Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/tA4oYs9obEgwyXvVuprA6rS8yJc.roa
File: tA4oYs9obEgwyXvVuprA6rS8yJc.roa (raw, json)
Hash identifier: vAqg7jSzGW2goyFhcjNKP65J4EIWqsSGNF2Hhnw3S7E=
Subject key identifier: B4:0E:28:62:CF:68:6C:48:30:C9:7B:D5:BA:9A:C0:EA:B4:BC:C8:97
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 018B8F1D7B5F766B471A665153787B68DBC3
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/tA4oYs9obEgwyXvVuprA6rS8yJc.roa
Signing time: Thu 02 Nov 2023 08:19:15 +0000
ROA not before: Thu 02 Nov 2023 08:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 2a0e:1c80:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:1d:7b:5f:76:6b:47:1a:66:51:53:78:7b:68:db:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Nov 2 08:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b40e2862cf686c4830c97bd5ba9ac0eab4bcc897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:5d:06:ea:48:a6:41:18:16:b7:16:28:5c:
3a:55:18:9d:72:4e:86:a3:ee:73:37:78:58:77:35:
dc:7f:69:06:16:2c:c5:4f:bd:27:f9:ad:de:ca:23:
5e:11:eb:6d:24:5c:1c:f6:e2:c0:f4:45:bb:2f:0c:
08:f2:85:3e:ba:fe:9c:b8:eb:a2:ef:2c:32:64:6e:
f1:5e:8c:c9:a8:39:a1:7f:02:09:fd:4c:23:66:b2:
4e:6a:75:e0:41:b8:b4:90:6e:ce:6c:e9:d8:8b:5c:
37:d2:f2:b0:0a:b4:e8:e5:25:ae:b2:75:3d:45:ec:
1e:03:35:44:f6:ab:a7:c8:82:71:88:3a:81:2f:4e:
2f:46:f8:4d:7d:a2:50:0d:46:d2:06:be:a1:75:6e:
00:b4:c4:34:ee:2b:8b:e4:41:91:73:7d:ab:60:09:
b9:ab:f2:a9:d9:2a:fb:32:a6:33:2f:d6:7d:b3:6e:
a4:91:5a:11:34:b7:a1:70:c8:e7:96:a6:e5:b8:b0:
ed:c9:4a:8b:fa:39:33:73:76:62:38:d0:b3:91:90:
a8:6a:1f:20:63:96:77:39:88:1a:bc:20:c4:6b:76:
a1:ca:b3:ec:24:ed:f3:fc:70:eb:86:8e:d7:36:fb:
b6:3d:e8:6f:46:82:64:ce:8e:07:2a:1a:48:28:51:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0E:28:62:CF:68:6C:48:30:C9:7B:D5:BA:9A:C0:EA:B4:BC:C8:97
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/tA4oYs9obEgwyXvVuprA6rS8yJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:3::/48
Signature Algorithm: sha256WithRSAEncryption
9e:61:da:40:5c:cd:d1:60:46:b3:70:f1:37:8d:53:72:45:ec:
37:b1:52:2c:5f:6e:7c:c8:53:47:cf:c6:4e:5c:a2:7f:71:e8:
26:f8:33:cb:68:72:fa:d7:33:98:6b:72:f2:02:fe:58:65:3d:
73:3b:63:4c:2c:37:7d:69:72:27:78:4f:2b:ea:19:d2:55:37:
b3:9b:f5:d5:d6:ee:9d:f6:ed:77:b3:ee:8c:68:5a:04:8e:20:
b2:9e:ea:a3:90:18:ce:0b:f2:09:29:6a:16:16:d0:f0:b4:5c:
2d:c3:81:d6:4c:66:ae:79:06:e6:11:ca:0d:fe:bc:49:91:88:
33:27:f7:51:90:21:16:e8:ad:9c:7d:e5:46:c6:85:21:98:2d:
0f:15:30:24:83:79:85:b3:1d:11:85:73:5d:fc:7c:29:8f:9e:
19:44:9a:6a:55:dd:a6:1c:cd:18:a7:54:58:d8:71:ca:58:6e:
da:eb:a3:03:5e:b2:3e:b8:85:ff:7c:00:50:ce:2f:3e:dd:1c:
30:1e:0e:cf:cb:62:70:3d:5e:78:2e:45:4a:9d:16:88:3d:82:
18:a1:ed:68:7f:56:d6:39:2c:dc:ce:f9:c2:22:f9:dc:26:2e:
8c:5a:8b:f4:9e:51:19:da:af:9e:7c:26:e9:7e:1e:2b:17:51:
e7:ab:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:01 2024 by rpki-client on console-ams.rpki-client.org