Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/iz1O7Twr3-HZuxnCDYXm8TQhQIU.roa
File: iz1O7Twr3-HZuxnCDYXm8TQhQIU.roa (raw, json)
Hash identifier: FMmabMIm9WMssU45M+bw8OlQSZCY8qFujSnmqt/DsZQ=
Subject key identifier: 8B:3D:4E:ED:3C:2B:DF:E1:D9:BB:19:C2:0D:85:E6:F1:34:21:40:85
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 01856FD536F3F7BCB5A0A385692B0DA51DB9
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/iz1O7Twr3-HZuxnCDYXm8TQhQIU.roa
Signing time: Mon 02 Jan 2023 00:15:22 +0000
ROA not before: Mon 02 Jan 2023 00:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212981
IP address blocks: 2a0a:d6c0:186::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:36:f3:f7:bc:b5:a0:a3:85:69:2b:0d:a5:1d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 00:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b3d4eed3c2bdfe1d9bb19c20d85e6f134214085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:ac:e4:63:3a:01:4e:45:60:98:79:28:cf:
ae:bd:31:a8:6c:be:64:84:db:bb:bb:e5:52:cf:0c:
a0:94:48:eb:47:af:3c:39:f3:0a:ee:1e:30:59:c0:
88:15:16:88:9d:3d:dc:82:26:f8:fb:fc:a9:66:d3:
3f:62:80:b9:66:7d:4d:0b:b2:1e:b4:35:66:9f:c1:
d6:44:5d:5d:a8:ab:ad:73:24:d3:5c:2c:6d:77:4d:
e6:8c:a5:30:ba:72:78:84:e0:36:ad:42:d7:16:66:
41:de:f1:3d:c6:e9:9d:86:22:05:3a:45:f6:e2:40:
8c:f7:5b:ca:d3:19:fa:db:aa:32:a5:71:53:6f:7c:
57:df:bf:60:ba:10:b1:f5:99:db:14:1c:a9:f9:3d:
62:88:b9:b5:71:7f:e2:8c:48:93:06:23:f6:4c:be:
de:47:87:b9:85:a1:7a:0d:94:b9:e4:60:66:1c:31:
a5:2f:9d:00:8c:df:e2:f3:7a:5e:ba:7f:f0:a5:1d:
3d:40:67:14:26:74:5d:00:3e:bf:74:1a:b3:36:23:
68:3b:09:1e:a4:b1:54:ed:81:05:c3:76:47:b0:ee:
11:a5:69:ef:00:a6:61:54:4a:1e:37:bd:9f:50:d5:
28:6b:7f:39:9a:15:88:30:32:11:d0:49:be:f9:2b:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:4E:ED:3C:2B:DF:E1:D9:BB:19:C2:0D:85:E6:F1:34:21:40:85
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/iz1O7Twr3-HZuxnCDYXm8TQhQIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:186::/48
Signature Algorithm: sha256WithRSAEncryption
4e:4e:97:ce:a5:92:ff:ec:0d:c4:c3:d0:6c:08:8b:c4:ca:e6:
7a:a3:e3:30:5b:b8:b6:ad:10:68:45:ab:57:10:bb:03:97:85:
7f:d8:f8:83:53:e9:cf:cf:69:b3:22:24:5d:0a:27:e8:07:1f:
d5:4d:1c:75:8e:c7:b8:56:32:b8:ee:c6:2b:4d:f4:3d:e8:53:
1a:2f:2f:13:73:c8:80:aa:d8:43:9d:f2:02:d5:80:f4:3b:f7:
6e:2a:83:69:a1:48:07:25:0d:49:8a:59:cb:0a:77:c8:b1:f8:
1f:95:57:20:e8:dd:6a:6b:cd:8b:63:98:68:3b:73:ff:f1:c2:
14:87:69:15:ec:06:a1:9c:34:e5:c9:f5:ab:f4:52:87:26:bb:
4d:bf:e8:ba:0b:90:4d:2c:00:04:b5:bf:f3:a2:51:70:ac:f5:
a2:87:b1:f8:22:f5:a3:84:bd:4f:8f:2b:d2:30:9b:c2:01:bd:
35:51:33:e6:50:90:b9:10:3c:7b:71:14:72:ee:14:6d:49:42:
1b:cc:bd:f3:91:7a:35:ca:87:6c:2e:6f:a3:2a:38:8d:5c:15:
79:ef:68:b7:da:8f:db:c0:62:23:ab:10:8f:c3:3f:8b:48:ef:
31:a2:43:76:ed:21:5f:a3:98:bf:31:aa:21:b7:b3:a7:df:7c:
57:4f:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:38 2024 by rpki-client on console-fra.rpki-client.org