Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fz9ns2xJHG-_0smOcHB8r-NcVDo.roa
File: fz9ns2xJHG-_0smOcHB8r-NcVDo.roa (raw, json)
Hash identifier: nAojDQ7aLqRgIZjzc0vZA5hNjyvak2mapGBZ9bj4dyI=
Subject key identifier: 7F:3F:67:B3:6C:49:1C:6F:BF:D2:C9:8E:70:70:7C:AF:E3:5C:54:3A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C540FDA80BB0ABF5036AE5253478444
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fz9ns2xJHG-_0smOcHB8r-NcVDo.roa
Signing time: Sun 01 Jan 2023 07:55:26 +0000
ROA not before: Sun 01 Jan 2023 07:55:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206499
IP address blocks: 2a0c:da04:c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:0f:da:80:bb:0a:bf:50:36:ae:52:53:47:84:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f3f67b36c491c6fbfd2c98e70707cafe35c543a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:06:5f:96:b4:9b:9c:84:4d:52:5f:63:7a:
2e:16:9c:fe:09:77:4f:25:c0:25:bc:1b:2a:6a:65:
e7:44:67:73:65:db:33:6b:46:9f:58:f1:58:25:dc:
3c:f2:cc:b5:e3:12:35:7c:8a:9a:d9:4f:d6:7e:03:
4d:12:05:a7:ed:d6:63:f7:3b:2e:6f:48:a8:ff:22:
c2:28:96:1e:27:1b:b9:ec:d5:ad:1b:46:56:0a:ac:
dd:4e:51:69:b3:0b:90:c3:42:5c:16:28:e3:24:db:
12:e9:36:8c:97:15:b3:59:6c:b9:b9:c6:21:07:31:
4d:dd:fb:0e:16:22:7a:d3:c7:30:4b:f4:2b:8c:0d:
a9:5c:c0:b0:c5:12:4b:3a:fb:a5:bf:00:66:4a:5a:
9b:b1:ce:24:3a:3e:d0:67:b4:62:f4:d4:ef:c5:fd:
8d:38:8f:d9:3b:c1:25:cc:15:4c:21:20:79:6f:59:
b3:8c:be:11:f8:c9:d4:84:8f:1a:cd:7a:99:30:ae:
35:6b:4a:4b:3a:18:47:cc:bd:ac:81:38:27:e2:da:
6d:fd:5b:bd:6e:87:03:f7:19:18:ae:95:a7:72:61:
e1:38:fe:51:03:0b:57:b0:57:eb:31:1d:9c:0d:d8:
80:37:00:2a:47:c7:47:ed:5e:db:03:f5:15:a4:1f:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3F:67:B3:6C:49:1C:6F:BF:D2:C9:8E:70:70:7C:AF:E3:5C:54:3A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fz9ns2xJHG-_0smOcHB8r-NcVDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:da04:c::/48
Signature Algorithm: sha256WithRSAEncryption
d0:3f:95:74:14:bd:1d:6d:c6:0b:7e:1a:e6:e8:e7:60:c0:c7:
36:b9:db:63:89:40:17:62:d3:83:bb:74:14:8b:4b:d1:2f:37:
31:ac:cb:66:86:2b:eb:19:13:5d:50:30:22:ca:1a:24:6a:71:
ae:e4:41:0f:18:1e:1f:66:13:c4:29:84:8b:39:26:63:1d:9c:
ce:99:f5:20:60:a2:8a:aa:58:3f:46:79:6d:7c:c1:40:b6:4e:
1e:43:6a:32:ed:84:86:67:77:4b:74:02:02:e1:00:68:80:49:
46:85:92:ba:b3:79:7b:a2:95:f1:dc:56:df:0a:f6:52:bb:f4:
d5:9f:dc:b5:6a:fe:10:6c:5d:bc:21:bb:d3:b8:f6:34:69:54:
c2:ff:33:f7:08:f9:46:1e:38:6e:1d:8f:3b:24:ae:8a:c5:9e:
88:4d:c4:59:63:6c:22:b1:23:0f:dc:b9:4d:54:58:b5:ca:78:
85:2d:15:35:86:2d:c6:79:e1:2e:6b:2c:66:f3:e1:5f:09:5a:
2b:ab:b3:b5:b1:a9:83:30:40:80:6e:5e:97:d9:40:e3:c3:71:
d4:17:7b:27:6f:78:9e:44:b5:d8:db:17:67:72:de:6c:40:e2:
88:5b:71:87:da:71:94:44:72:e1:85:60:31:45:64:7f:8b:27:
ff:2f:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org