Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/6S-cPuIVrl3hgNaM3lTAzJnlroc.roa
File: 6S-cPuIVrl3hgNaM3lTAzJnlroc.roa (raw, json)
Hash identifier: jhGJDPAg6eVib0vNwtaEsqsbTXBvh8bmMeFgw51tYZk=
Subject key identifier: E9:2F:9C:3E:E2:15:AE:5D:E1:80:D6:8C:DE:54:C0:CC:99:E5:AE:87
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 01856BDC7122420AC04F323417D45D56415C
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/6S-cPuIVrl3hgNaM3lTAzJnlroc.roa
Signing time: Sun 01 Jan 2023 05:44:46 +0000
ROA not before: Sun 01 Jan 2023 05:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209557
IP address blocks: 2a0f:607:1000::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:71:22:42:0a:c0:4f:32:34:17:d4:5d:56:41:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 05:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e92f9c3ee215ae5de180d68cde54c0cc99e5ae87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:db:b4:b3:b8:0f:a7:34:c1:65:b6:15:26:
6f:63:9d:da:41:b9:26:d5:ea:58:d4:51:e0:d6:02:
8a:27:e6:12:c6:e9:40:c9:af:70:5a:e5:a3:b4:44:
94:25:59:6c:cf:59:d3:17:79:35:7d:b8:3d:2a:d5:
78:1b:93:8d:cd:ee:ed:1b:ea:83:6f:60:53:6f:6d:
47:aa:25:e9:e3:3f:c8:69:b1:4d:d7:5a:a9:18:1c:
aa:4e:87:81:9a:28:84:ca:b4:4a:61:65:f4:74:e7:
98:33:94:c7:bd:39:5d:e0:bf:92:0e:7b:e0:a2:78:
ff:bc:53:db:53:3a:59:42:bb:37:08:6d:88:9f:c7:
18:4e:b7:dd:5e:3d:70:9e:db:b8:eb:01:0d:64:c5:
6c:0b:24:0b:fd:9b:7f:81:8e:a5:ad:07:3d:1b:5e:
6f:af:8a:d0:37:f2:4e:e0:6b:cf:3a:83:5c:44:25:
60:92:4e:37:27:78:92:68:83:2e:98:7a:e0:4e:1f:
25:ca:87:a5:7d:41:4b:d9:30:be:6f:60:be:ca:f3:
63:94:d2:6d:11:ce:08:93:48:24:06:be:75:0c:b2:
da:68:6a:5a:b3:b7:5a:43:58:0c:e7:fa:d9:70:d3:
23:ab:9e:bb:35:cc:6e:ce:c0:3e:e1:a0:42:83:16:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2F:9C:3E:E2:15:AE:5D:E1:80:D6:8C:DE:54:C0:CC:99:E5:AE:87
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/6S-cPuIVrl3hgNaM3lTAzJnlroc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1000::/40
Signature Algorithm: sha256WithRSAEncryption
78:97:c7:56:30:f0:56:1e:fc:06:7b:af:38:9e:55:9f:83:0d:
c0:f1:2f:d1:18:e2:1a:41:c2:5b:ea:4e:54:a6:2a:60:c7:cc:
53:7f:0c:58:20:da:dc:d9:3e:cc:e8:20:11:cf:dd:56:98:96:
b4:68:2d:4f:8e:a4:27:82:de:b4:11:7a:51:1c:cc:86:63:0f:
91:da:9a:a0:bf:13:77:bc:eb:c9:d5:1c:70:37:0f:39:a2:63:
a3:82:7d:85:dc:c9:71:52:d9:71:b0:f8:71:c8:b3:13:20:30:
58:73:46:e9:94:fb:a9:7c:95:aa:8a:8c:88:5c:a5:db:9c:55:
6b:50:56:b5:be:17:25:f3:f2:08:3c:f1:ab:4a:69:29:54:ce:
83:86:fc:0e:b3:2e:f5:84:3d:11:90:0c:1e:73:33:d7:c3:b6:
4c:a1:45:64:c5:57:1b:59:b0:f9:a9:ac:b2:90:71:ec:7b:5d:
ca:02:25:3e:85:cb:3b:cb:df:38:f0:c1:24:91:d4:db:44:20:
c5:a3:9a:f4:73:ef:b4:c5:8f:dc:91:8c:32:b5:c6:a4:98:38:
ef:d6:4b:9f:e4:f2:ae:42:39:9e:48:7b:76:c2:1d:20:e2:61:
04:ee:72:a0:07:83:b6:5c:48:7c:12:ec:fa:bb:39:af:22:ef:
f4:43:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:46 2024 by rpki-client on console-fra.rpki-client.org