Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/2NhtXF0-mjZaoHHeDfiSOZkiY2c.roa
File: 2NhtXF0-mjZaoHHeDfiSOZkiY2c.roa (raw, json)
Hash identifier: ir9wlvZelHk9uf52W22Vux2a9GLILwnZKY6VVwC22ok=
Subject key identifier: D8:D8:6D:5C:5D:3E:9A:36:5A:A0:71:DE:0D:F8:92:39:99:22:63:67
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 01856C78415D4B467A7A99FD37EDB78708D7
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/2NhtXF0-mjZaoHHeDfiSOZkiY2c.roa
Signing time: Sun 01 Jan 2023 08:34:58 +0000
ROA not before: Sun 01 Jan 2023 08:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24409
IP address blocks: 2a04:3e00:1002::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:41:5d:4b:46:7a:7a:99:fd:37:ed:b7:87:08:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Jan 1 08:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8d86d5c5d3e9a365aa071de0df8923999226367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:38:2d:5f:fc:78:80:1a:64:bb:dd:c4:6e:
9a:f8:ea:fa:9b:e4:96:93:5b:02:4a:95:d7:d7:74:
a4:60:5f:2d:1c:29:83:46:50:5b:03:88:cc:31:bf:
10:cd:90:e4:36:98:73:dc:90:ab:ad:92:9a:44:30:
1f:4b:1e:8f:b6:da:4e:7e:f0:c8:41:df:9c:b6:d2:
5d:3c:40:29:b1:a4:2e:b6:2c:fd:e1:da:54:0f:11:
1d:b9:17:7c:84:f5:a5:d1:78:ef:b6:a2:57:f4:58:
82:2e:6b:88:0a:5a:50:72:48:51:50:ec:ff:43:31:
b6:f9:ec:33:6b:d7:ff:29:2e:3b:78:5e:b3:5b:8f:
1b:d5:0e:2e:50:04:9a:18:cf:7f:6a:fe:fe:91:06:
a2:83:54:2d:d3:67:e7:e8:e3:59:be:14:2a:b9:ea:
00:a8:a6:9f:33:0a:e7:9d:1c:0f:16:ae:d7:0d:e4:
a6:59:d1:a9:7e:8b:0d:87:a9:1d:bb:b9:83:0f:2f:
c7:2f:d7:9c:64:34:26:37:6e:db:20:11:18:4f:f9:
ae:1f:c3:74:62:17:f1:c6:33:ea:ac:00:6d:9c:f5:
0d:01:58:e4:88:62:c0:f5:ba:e4:cc:94:f6:6e:8f:
3e:f0:38:bc:f6:b2:89:1e:0b:19:08:66:d9:68:4f:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:6D:5C:5D:3E:9A:36:5A:A0:71:DE:0D:F8:92:39:99:22:63:67
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/2NhtXF0-mjZaoHHeDfiSOZkiY2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:3e00:1002::/48
Signature Algorithm: sha256WithRSAEncryption
11:98:8d:f9:6f:22:e3:5f:4e:6f:9a:24:76:0d:6d:5a:01:24:
eb:2f:08:5e:cc:ab:85:96:49:4c:75:e3:a1:be:77:38:7c:d2:
af:32:9e:f7:a2:03:3f:cf:21:0c:9d:92:17:81:57:79:6b:76:
09:6d:ed:ae:b0:5b:31:78:58:d7:d7:2c:db:c0:47:b9:ee:61:
82:09:82:36:6d:6d:a6:0f:d6:82:6e:74:54:31:49:f0:29:37:
80:35:e0:43:76:dc:8e:22:4b:92:cf:c3:c3:be:3f:b4:2f:b1:
21:58:b0:5b:aa:77:d7:63:49:99:e7:87:89:ab:d4:cb:c9:07:
7d:de:c5:b7:a3:15:ac:b3:bc:0a:a4:41:0a:e3:15:af:ba:87:
ee:29:ee:aa:03:61:19:0e:5c:65:af:57:07:21:a3:8c:f8:7e:
1d:87:8d:b7:49:69:89:97:e1:d3:9a:e1:08:fa:ac:47:a5:48:
93:b3:39:b4:63:67:82:7a:0b:5f:73:3e:46:db:e8:8c:10:e2:
9f:31:95:b3:67:18:f0:f4:51:59:04:34:18:a6:16:37:83:40:
5c:95:95:fe:e9:c7:bf:f7:43:0a:a0:6f:04:39:18:aa:eb:1e:
5f:0e:92:72:7f:04:3e:6e:86:64:94:39:b7:42:63:42:52:91:
a4:b1:10:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:16 2024 by rpki-client on console-ams.rpki-client.org