Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/x6vv_rfoQTRDWi0M87BZEKA77Fo.roa
File: x6vv_rfoQTRDWi0M87BZEKA77Fo.roa (raw, json)
Hash identifier: /0CV5G8+IYhcR5g7eCIaq+6rsFywJO4ydU7Ttg365EM=
Subject key identifier: C7:AB:EF:FE:B7:E8:41:34:43:5A:2D:0C:F3:B0:59:10:A0:3B:EC:5A
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 01856FD532803EA5521DE3FBFF990CB03B36
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/x6vv_rfoQTRDWi0M87BZEKA77Fo.roa
Signing time: Mon 02 Jan 2023 00:15:21 +0000
ROA not before: Mon 02 Jan 2023 00:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203564
IP address blocks: 2a0a:d6c0:2035::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:32:80:3e:a5:52:1d:e3:fb:ff:99:0c:b0:3b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 00:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7abeffeb7e84134435a2d0cf3b05910a03bec5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:23:0a:ea:3b:66:1a:8f:63:c8:39:12:84:
58:26:1e:d6:52:ff:f9:26:06:37:e0:2a:a9:ec:06:
a3:cb:47:a0:3d:cd:f6:07:8e:70:86:50:df:e8:21:
78:df:30:d9:8c:eb:99:17:19:8f:08:03:88:3e:23:
c6:ac:bd:2c:7f:8c:4c:c5:f3:48:66:88:1e:d5:02:
45:2e:22:8b:dd:b1:50:4a:1e:25:b7:62:59:dd:c1:
9e:c0:f8:00:5a:7d:b5:ba:21:3c:74:16:71:dc:d1:
30:8c:36:a5:34:fd:04:41:a3:b9:2a:61:8f:74:ee:
9b:6a:9b:5b:d5:93:01:9d:f5:ab:79:76:a1:58:16:
48:96:74:6b:ce:97:5e:3a:88:91:5d:40:c8:92:91:
9a:5b:5a:6d:e1:15:02:c0:a4:d8:90:75:3d:a2:a1:
3e:dc:20:ec:75:e5:94:ec:9a:07:dd:6d:63:e8:1b:
da:66:0a:6d:52:c9:97:52:94:fe:3b:49:10:6d:92:
76:e9:1e:a7:f7:e0:3c:79:66:06:93:61:db:e5:2c:
58:22:e4:ba:5e:78:22:c0:5d:9d:fe:05:ca:6f:d5:
b3:9d:97:3f:42:da:c7:ae:78:3c:93:d8:9b:5a:55:
eb:06:f5:25:90:7e:3d:72:8f:1f:f3:67:2c:c6:b3:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:EF:FE:B7:E8:41:34:43:5A:2D:0C:F3:B0:59:10:A0:3B:EC:5A
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/x6vv_rfoQTRDWi0M87BZEKA77Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:2035::/48
Signature Algorithm: sha256WithRSAEncryption
5c:47:c8:99:ba:aa:82:94:00:c2:df:0c:26:00:d0:1b:3d:7e:
c7:fb:2a:dd:e4:17:69:b8:19:46:70:d4:fb:8c:c5:5e:ed:13:
f0:83:9a:70:40:69:0f:e7:04:e7:52:0c:ee:ab:7a:f1:b8:74:
73:48:f4:d7:49:ce:1d:c7:2e:a0:d3:66:be:e6:9b:09:02:f9:
13:c6:0c:0c:21:c4:0e:f4:e0:cf:82:56:3c:c4:14:45:c5:e2:
49:e0:08:97:dd:9d:1a:9a:28:84:49:a1:67:9d:95:eb:f2:1e:
0f:db:b4:af:0a:2d:e2:ed:48:5b:f4:46:77:ba:80:80:34:f5:
70:31:33:f4:d1:00:f6:26:61:5b:a5:60:3d:a5:7e:b9:30:f1:
ae:fa:b3:aa:9a:d6:63:ed:f8:4d:29:41:a5:38:79:05:c0:00:
27:61:b8:68:89:6c:3e:d2:df:18:7f:84:b6:d9:1a:0e:a6:a6:
96:eb:94:f4:b5:d9:8e:d2:df:ce:01:b5:79:ee:41:8d:e3:8c:
c5:ab:63:89:b7:00:b2:e9:17:66:ff:12:d9:9c:cd:27:fd:58:
4d:c0:ca:33:f4:52:44:36:65:62:a2:78:e5:0b:13:f1:60:63:
97:53:68:32:25:a4:4d:49:54:f9:c7:9d:aa:1d:0e:86:2c:b8:
15:12:71:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:53 2024 by rpki-client on console-ams.rpki-client.org