Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/1AhStZ41s_zE-omXgvGmORIYB_Q.roa
File: 1AhStZ41s_zE-omXgvGmORIYB_Q.roa (raw, json)
Hash identifier: +9M5kFwMfF4lU1QK11AGSovuCPjQJihhwa6sZWiRbpA=
Subject key identifier: D4:08:52:B5:9E:35:B3:FC:C4:FA:89:97:82:F1:A6:39:12:18:07:F4
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA4C357B301E0D4FC4C65786BFF64B
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/1AhStZ41s_zE-omXgvGmORIYB_Q.roa
Signing time: Mon 02 Jan 2023 13:44:49 +0000
ROA not before: Mon 02 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203348
IP address blocks: 2001:648:25e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:4c:35:7b:30:1e:0d:4f:c4:c6:57:86:bf:f6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d40852b59e35b3fcc4fa899782f1a639121807f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:96:99:ea:ad:72:44:87:02:04:61:3a:f3:
03:77:5c:f6:d2:ca:4c:01:fa:45:d5:e0:54:b3:02:
c3:e3:d4:cd:4a:d4:b7:09:b3:1d:ca:ee:dc:31:74:
21:d4:c5:4e:94:3d:6e:41:03:2c:d6:a5:54:93:89:
dc:91:6a:28:a1:ad:bc:c0:7b:f8:d5:a8:0b:4a:47:
bb:b1:03:79:04:30:64:25:06:dd:85:92:c9:89:da:
92:0d:99:53:b4:1b:70:4c:43:36:70:68:14:34:0b:
dd:3c:7e:57:bd:d9:7b:77:a8:0e:81:a9:c5:39:6b:
5c:fe:23:35:b9:f9:b4:f1:b5:96:c6:14:72:3e:47:
a9:6d:9b:44:93:d4:74:3f:67:fc:9a:ab:4d:51:f1:
5e:6b:d2:64:7b:99:bb:7e:ee:57:56:2b:76:f9:09:
a6:f9:bf:d3:30:a3:30:11:d2:81:c9:80:ea:7f:de:
03:07:f9:3c:7f:49:a4:0f:4c:f6:43:eb:a1:63:ac:
6c:5b:ca:5b:5d:71:b6:03:78:80:68:9f:b7:d9:87:
c3:de:a5:90:23:46:d6:3a:f1:d0:50:c7:a0:c3:db:
5e:ad:85:9c:55:0b:a3:67:e8:98:19:b9:49:10:0c:
24:c9:19:d1:f6:1d:4e:3f:ea:ed:0f:bf:bd:a8:2f:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:08:52:B5:9E:35:B3:FC:C4:FA:89:97:82:F1:A6:39:12:18:07:F4
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/1AhStZ41s_zE-omXgvGmORIYB_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:25e0::/48
Signature Algorithm: sha256WithRSAEncryption
3e:f9:2d:c8:d9:74:13:a6:df:8f:93:b2:69:67:7d:3b:72:c6:
ac:d1:d5:5c:c5:42:a2:6d:bb:45:f7:8d:bd:be:a4:0a:6c:8f:
b6:0c:ba:7d:85:9f:f9:8b:cb:81:a3:c8:2a:70:62:dd:f0:a1:
9e:2f:a3:99:03:31:46:7e:90:e7:df:6d:25:86:2d:4a:dd:44:
6b:cc:61:35:b0:cb:1d:27:41:86:1e:7c:0b:08:13:a8:97:c8:
2f:25:5f:59:1e:a0:21:c6:7f:7e:78:36:a4:be:99:ce:02:41:
5f:11:28:a1:f4:ea:32:51:45:a5:ae:ef:75:b1:30:9c:7a:34:
f5:49:f0:cf:c0:f0:ff:36:56:35:59:ab:e7:29:d3:82:56:e0:
b2:16:39:67:b2:f3:10:63:a3:8c:3d:65:fc:49:80:d5:45:51:
42:cb:7d:4c:92:7a:7e:52:06:45:22:bd:41:91:7d:95:fb:38:
ce:7d:c6:9e:91:9d:2b:24:3e:01:47:40:58:ac:f4:2f:cb:1e:
a9:4d:d2:ca:4c:72:15:79:8d:f3:36:7b:d6:63:39:29:e8:2b:
2d:67:08:2a:72:3f:99:7c:98:42:ee:f6:5c:af:94:60:33:c8:
38:6a:e5:3a:0c:ce:c6:8f:ec:14:15:ff:ea:a6:e2:63:7d:0c:
c2:eb:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org