Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/I4HDGaaqXz6v_j2V5u3vXU8AOCQ.roa
File: I4HDGaaqXz6v_j2V5u3vXU8AOCQ.roa (raw, json)
Hash identifier: VDzC2ROKFPqW8wsELuiW3CxnUsAJZyB+SgxFwH/h2oQ=
Subject key identifier: 23:81:C3:19:A6:AA:5F:3E:AF:FE:3D:95:E6:ED:EF:5D:4F:00:38:24
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01856C6F235D4D76038A1DA1153DB483ECEE
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/I4HDGaaqXz6v_j2V5u3vXU8AOCQ.roa
Signing time: Sun 01 Jan 2023 08:25:00 +0000
ROA not before: Sun 01 Jan 2023 08:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212085
IP address blocks: 2a0f:ca81:1330::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 04 Jun 2023 16:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:23:5d:4d:76:03:8a:1d:a1:15:3d:b4:83:ec:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jan 1 08:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2381c319a6aa5f3eaffe3d95e6edef5d4f003824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5e:f0:6f:04:5f:f9:92:d3:a4:d8:ec:76:0e:
5b:ed:7c:d6:e1:c4:4d:a1:c6:27:0c:be:9f:81:61:
a2:e0:91:6a:a3:e7:3b:81:28:ba:6c:89:d7:0e:1a:
de:82:3a:b7:60:e5:f7:78:97:1b:dd:0d:aa:77:f0:
36:d8:40:f4:af:98:ed:c2:f5:27:9a:a9:04:d1:9d:
d2:fb:96:88:49:2c:5c:35:15:c2:c2:7b:2b:26:be:
40:a4:d7:30:22:2b:fb:d0:22:6c:79:55:a9:85:53:
29:e4:ce:44:85:97:6b:f0:6a:d9:71:0d:56:44:c3:
b8:76:62:c0:f8:17:0c:c0:7e:95:1a:75:94:ef:51:
0f:67:13:81:7c:b9:62:56:5e:77:1e:cc:2c:b0:56:
ca:fe:e2:60:65:ac:b8:5b:7c:70:f2:95:b9:be:f3:
0f:1c:03:e6:bd:b8:58:b4:87:ac:06:a7:77:f6:df:
05:80:04:fa:f5:06:7b:4e:66:b4:87:fa:78:68:c8:
ca:48:f4:4b:88:e2:06:ff:ee:4e:f0:3c:04:a8:4e:
59:5f:b7:3b:1c:38:5f:ca:84:00:c1:76:1d:a7:9e:
05:2a:48:59:50:ac:d2:b4:bb:eb:ee:90:fd:46:25:
02:a3:7a:5e:86:3e:93:8c:85:d3:ba:6f:fb:57:8a:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:81:C3:19:A6:AA:5F:3E:AF:FE:3D:95:E6:ED:EF:5D:4F:00:38:24
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/I4HDGaaqXz6v_j2V5u3vXU8AOCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca81:1330::/44
Signature Algorithm: sha256WithRSAEncryption
80:80:66:7b:51:d3:cb:9f:27:19:40:ca:4a:be:34:e5:9e:4b:
15:b2:ee:2e:ef:5e:c8:2a:c8:c9:a0:fa:58:18:e4:c7:64:7d:
a4:17:1a:5c:4d:1f:bd:3a:bc:51:1f:92:66:2d:a2:0e:5b:49:
31:54:0f:81:29:23:13:aa:0e:07:04:a3:b4:4d:d7:56:27:65:
86:65:37:b6:46:b4:ca:04:ca:72:65:75:14:6f:95:ee:fb:f2:
e3:59:12:fd:20:2d:dc:7d:2d:0c:a2:c3:5e:32:f8:58:4e:d4:
fc:2a:84:15:10:85:97:5d:fc:78:c1:5e:96:0d:49:27:bb:c7:
a0:37:dd:fb:82:80:15:1d:dc:76:d8:e7:c5:f0:09:e5:9f:c5:
c9:e6:ce:91:70:32:81:5d:f8:a0:be:23:c6:3e:09:b5:2a:e2:
32:18:27:70:d3:70:4f:b0:4a:57:bc:db:03:40:c5:87:47:ce:
ab:c2:ec:24:66:50:65:b1:c1:8d:97:78:cc:94:e1:d1:6f:ea:
08:33:16:df:21:fb:aa:90:5f:ae:44:d2:6f:43:76:69:78:d1:
c7:71:27:fa:91:4b:f1:4a:ff:88:55:9b:b1:a5:b2:c1:ab:1c:
1a:d6:00:97:96:67:9b:37:d9:34:ff:2f:df:38:00:91:48:6a:
e5:64:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org