Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/0XHed1fFn7b_18YD3gVlURpdtnE.roa
File: 0XHed1fFn7b_18YD3gVlURpdtnE.roa (raw, json)
Hash identifier: 0jTht1X8/e2M+iuegrLzCC3hWFFTJaEDbVAFHuMz9vU=
Subject key identifier: D1:71:DE:77:57:C5:9F:B6:FF:D7:C6:03:DE:05:65:51:1A:5D:B6:71
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 01857082C0E9BAA84B8B59D1C65D704AA8A9
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/0XHed1fFn7b_18YD3gVlURpdtnE.roa
Signing time: Mon 02 Jan 2023 03:24:55 +0000
ROA not before: Mon 02 Jan 2023 03:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2486
IP address blocks: 2001:660:3005::/48 maxlen: 48
2001:660:3006::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:c0:e9:ba:a8:4b:8b:59:d1:c6:5d:70:4a:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 03:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d171de7757c59fb6ffd7c603de0565511a5db671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:aa:db:c3:58:17:66:02:45:44:b8:f1:32:
da:13:23:c0:31:d8:2c:19:31:fd:73:30:82:ad:86:
09:a0:74:64:83:d6:03:55:b8:50:63:07:60:df:4b:
10:a9:8b:e7:22:51:72:ff:6f:7b:c6:11:fd:e0:ca:
b8:18:c9:dd:d4:01:fc:c6:b2:45:13:6d:7b:17:50:
8f:ce:8f:78:ab:51:d4:f1:3b:10:6e:de:c9:74:19:
2a:9e:18:df:27:55:b9:bd:51:0d:97:06:1f:0d:ea:
fd:78:27:49:af:78:2d:61:47:fe:e7:80:20:7d:83:
7c:14:9d:ff:52:a0:78:5a:25:02:ae:ef:cc:56:8a:
3c:9f:e4:af:c5:34:f3:40:9a:4b:57:1f:26:36:8a:
b8:1f:17:ff:5d:f4:ce:ff:56:af:e1:eb:b3:e8:94:
fe:5a:b4:7c:f1:ab:68:f2:33:f1:a4:b3:37:78:19:
0c:7d:46:ee:5f:10:be:93:64:26:ee:b9:a0:da:9b:
f1:d3:52:d9:37:6e:65:b8:fa:43:57:4f:b2:a1:10:
45:74:98:02:36:2d:69:3c:f4:b6:b0:89:b7:a7:88:
55:31:69:e0:c4:9c:ac:89:77:f2:65:aa:25:75:97:
81:4e:9a:84:a9:89:16:be:71:73:f4:c8:63:19:f0:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:71:DE:77:57:C5:9F:B6:FF:D7:C6:03:DE:05:65:51:1A:5D:B6:71
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/0XHed1fFn7b_18YD3gVlURpdtnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:660:3005::-2001:660:3006:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:87:98:06:48:20:0b:cd:f3:ca:69:96:82:8b:6a:e3:59:71:
57:a0:30:9b:27:2f:f4:f9:64:14:82:89:15:4f:f9:4e:ed:76:
a6:be:81:d0:bf:2c:1c:91:b9:0b:83:6a:88:90:39:e9:24:3c:
32:b1:1b:c9:dd:3b:d8:46:56:56:d9:e6:6b:97:52:42:0e:2b:
57:80:60:bb:22:21:49:15:5e:46:e1:9d:ce:35:3b:95:db:17:
ae:41:0f:57:a3:df:55:8a:82:65:c7:2e:8b:aa:b0:fd:d9:f3:
75:2d:1c:d2:43:8c:4e:81:04:a9:02:f3:58:53:1f:bc:7a:91:
50:28:c8:90:04:60:14:2e:ce:af:af:33:3c:18:1b:51:25:77:
ef:46:60:5b:1c:1a:82:03:de:b5:46:86:1c:50:35:24:a2:0e:
72:ad:72:68:bd:16:21:28:13:fe:76:8a:0a:46:36:27:e0:98:
56:14:8d:45:42:a6:3d:47:17:89:93:74:46:17:ca:68:3e:ea:
36:5a:a9:c7:91:47:72:fa:d9:9e:d5:dc:7b:fa:cb:ef:e7:b0:
25:77:55:13:bf:7a:56:ac:64:9a:9f:5a:df:96:aa:f1:6f:0c:
72:15:a2:3b:c7:8d:2e:d2:e6:14:b9:62:ca:b5:ca:98:83:92:
db:5f:ae:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:27 2024 by rpki-client on console-fra.rpki-client.org