Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/VE9sEwm02AuhkewfEU_YBcTaHW4.roa
File: VE9sEwm02AuhkewfEU_YBcTaHW4.roa (raw, json)
Hash identifier: 9kCWCxFV7GtTxzpo5t8UqpytyRaXBD76C7JoxBvgtoE=
Subject key identifier: 54:4F:6C:13:09:B4:D8:0B:A1:91:EC:1F:11:4F:D8:05:C4:DA:1D:6E
Certificate issuer: /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial: 01856D53CDA6EF79C0547F22D722BDB62EBF
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/VE9sEwm02AuhkewfEU_YBcTaHW4.roa
Signing time: Sun 01 Jan 2023 12:34:46 +0000
ROA not before: Sun 01 Jan 2023 12:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a03:5640:f000::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:cd:a6:ef:79:c0:54:7f:22:d7:22:bd:b6:2e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Validity
Not Before: Jan 1 12:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=544f6c1309b4d80ba191ec1f114fd805c4da1d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:3f:16:e1:8c:97:de:70:f9:2e:e0:72:39:
b0:f7:6e:bf:13:11:74:6b:1f:76:1d:60:4d:06:e4:
2b:fd:01:52:bf:10:a1:87:3b:cc:7a:85:86:0f:e7:
b9:80:bd:62:4c:2f:42:6e:7d:04:09:cf:85:63:73:
03:1f:8f:f5:f1:d8:a1:e7:69:1e:d0:7d:82:83:e0:
6c:20:92:ea:93:4b:72:10:c0:17:9d:fd:1b:ab:72:
18:c9:f2:55:e8:ed:4f:da:66:07:09:bc:c2:cc:fb:
ad:da:0e:60:39:41:6d:28:07:f6:20:12:64:c1:2c:
0f:b8:9e:1f:54:29:4d:11:b8:03:2b:b7:f6:c8:f2:
b7:f0:37:e4:7a:59:ee:6d:fd:68:12:cb:8e:37:bc:
fc:87:4c:59:ce:46:2c:8d:ff:83:e8:65:a2:72:20:
01:84:dc:3a:5d:e5:b1:51:13:35:eb:be:50:da:ce:
18:c4:09:d3:9f:b8:dc:80:c4:01:9c:25:bd:35:84:
8d:05:d8:b6:60:ab:14:65:30:24:6b:a4:0f:f1:03:
71:a2:9c:03:7f:2e:69:f2:2d:a6:1a:2d:38:c0:0f:
91:4c:b3:2c:64:de:77:5b:b1:70:a3:aa:46:a4:36:
80:45:88:45:21:c8:cf:0b:9c:56:59:f1:bf:7d:e8:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:6C:13:09:B4:D8:0B:A1:91:EC:1F:11:4F:D8:05:C4:DA:1D:6E
X509v3 Authority Key Identifier:
keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/VE9sEwm02AuhkewfEU_YBcTaHW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5640:f000::/36
Signature Algorithm: sha256WithRSAEncryption
67:4f:56:67:00:7e:d2:35:50:3d:ad:90:73:99:3d:8a:cc:0e:
19:40:f4:db:e5:99:e5:bd:be:03:f0:31:a9:02:dd:53:b3:a9:
be:7c:bd:c0:d5:68:59:be:1e:39:72:1a:25:c0:f1:b8:17:a2:
97:f2:ec:64:bc:0b:2a:f6:d2:77:1d:de:62:20:31:b3:ec:ca:
60:45:ad:39:de:ee:34:c2:ca:75:4c:4d:7e:63:9d:1d:cd:61:
9b:f7:67:b3:c4:d7:02:9e:4b:8a:7c:7a:90:96:df:be:10:e2:
54:6a:99:36:73:87:4d:97:69:df:4c:c5:d7:28:d4:3b:20:66:
9c:10:89:a9:5c:0d:b2:c0:f0:12:d2:da:6c:df:31:51:26:93:
48:91:61:87:70:ec:a4:83:b5:8b:19:9f:58:78:66:85:6d:0c:
2a:d0:94:8b:bb:4a:7b:33:3f:99:f1:c1:8e:cb:03:f9:71:d2:
24:1c:b3:de:c4:22:69:ad:7c:8e:d2:56:da:36:85:18:8d:de:
39:27:b2:f6:59:86:2c:12:21:5f:30:86:c1:ed:06:39:51:88:
de:0a:94:54:7c:f8:6d:85:5b:83:48:bc:8d:0f:bc:36:2e:ff:
d9:6c:7b:1e:68:bd:20:10:73:ff:cf:6b:3a:98:11:2a:9d:46:
3b:75:cd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:22 2024 by rpki-client on console-ams.rpki-client.org