Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/1-sMjhxPV7c9Y5Sjpa1hzSmVztK8.roa
File: 1-sMjhxPV7c9Y5Sjpa1hzSmVztK8.roa (raw, json)
Hash identifier: aXXeWqrHRcK21dNj0fPj9blQl4aCaSMh2ZQCnP3WMX4=
Subject key identifier: FA:C3:23:87:13:D5:ED:CF:58:E5:28:E9:6B:58:73:4A:65:73:B4:AF
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 01856B00AAFE0D231DFEE3DE3B9B5A9E9A93
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/1-sMjhxPV7c9Y5Sjpa1hzSmVztK8.roa
Signing time: Sun 01 Jan 2023 01:44:43 +0000
ROA not before: Sun 01 Jan 2023 01:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a07:e02:41::/48 maxlen: 48
2a07:e00:19f::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:00:aa:fe:0d:23:1d:fe:e3:de:3b:9b:5a:9e:9a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jan 1 01:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fac3238713d5edcf58e528e96b58734a6573b4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:6f:d2:14:98:ae:5d:c8:16:4d:2c:e2:ec:
e6:6f:1b:7d:c1:58:41:f2:c2:68:5d:84:5e:ac:ce:
a8:c8:5a:a8:5b:1c:56:b0:37:1e:c3:fb:24:88:26:
55:03:3d:91:ce:17:7d:99:75:e3:1e:9a:f5:52:5b:
37:24:88:25:78:26:eb:82:25:5d:fe:b4:eb:8e:81:
a2:59:2e:df:e0:99:ca:a8:32:58:8d:4f:ea:22:8e:
6b:0e:22:9d:4c:7b:44:a1:c6:89:e9:1d:0b:3c:8c:
40:81:a0:2c:03:a6:19:8e:5d:5b:e6:6d:eb:05:0f:
8a:7f:17:4b:69:fb:47:27:cf:95:e1:b5:9e:4a:18:
8a:39:93:f5:59:e4:c4:db:17:9c:ae:be:27:75:50:
42:65:21:b8:44:6d:8d:c1:bf:d6:4d:fc:c6:24:d6:
b9:9c:60:c9:34:38:27:a0:81:53:07:81:b4:df:36:
e1:11:3a:9d:8f:33:3b:a3:48:97:a8:dc:c3:8f:0f:
08:4d:89:98:54:a9:d2:7d:e1:5c:77:42:7e:81:e8:
b0:5d:0c:ce:0c:68:e8:bd:13:6d:e0:95:cd:db:f9:
60:64:6a:2f:76:83:84:16:df:a8:a9:a9:0a:1c:ff:
48:31:40:5b:15:b3:2c:18:f2:cf:98:2f:93:6b:b6:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:23:87:13:D5:ED:CF:58:E5:28:E9:6B:58:73:4A:65:73:B4:AF
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/1-sMjhxPV7c9Y5Sjpa1hzSmVztK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e00:19f::/48
2a07:e02:41::/48
Signature Algorithm: sha256WithRSAEncryption
06:6d:5c:f2:ac:c6:76:be:97:60:32:1d:1e:64:88:b0:21:dd:
de:6c:1d:22:da:02:7a:00:25:31:86:0d:de:78:9e:d8:26:49:
29:d9:56:d3:38:bf:89:27:bb:75:2b:34:0f:06:1b:c9:6f:00:
08:d9:6f:28:3a:e9:77:2c:64:4f:af:22:00:28:f5:cf:c9:4a:
ce:6a:48:ee:03:00:7a:12:7e:50:f3:90:7d:11:82:52:31:ae:
6c:d1:87:df:bf:ac:02:bb:64:18:60:7a:f4:5d:12:2c:de:6f:
79:bd:b5:31:f3:84:8e:b8:2e:6e:e2:ca:59:2a:b2:90:db:d5:
af:ad:c7:35:ae:51:ac:32:9c:ca:c6:d7:f0:5b:b1:51:b3:b8:
9b:58:4d:f5:e7:cd:9e:e8:57:e4:84:87:3b:c0:ea:d3:5d:d9:
3e:23:f9:9d:1d:61:ec:3a:e0:44:e8:62:f5:1e:7e:33:2f:e1:
da:a5:07:62:e7:65:8f:e9:cd:8b:bd:75:08:53:df:aa:a2:03:
0e:c4:0c:df:e6:45:c1:04:9d:ce:19:1b:68:fe:84:2e:6e:85:
ae:ab:3d:40:11:1a:e7:92:11:a3:ad:a7:8a:c0:aa:72:da:51:
f2:e7:58:a9:fd:0d:d1:e8:b2:52:2e:0b:7a:d3:b2:fe:5c:4b:
6f:f9:ee:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:14 2024 by rpki-client on console-ams.rpki-client.org