Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/R8mjQxLK4HZ_WZ_ETt2NhctVsmM.roa
File: R8mjQxLK4HZ_WZ_ETt2NhctVsmM.roa (raw, json)
Hash identifier: kQ9JkUAlQg48Xs/Sr9hDSyDQXk5MJwUwzmfb6w9JCTM=
Subject key identifier: 47:C9:A3:43:12:CA:E0:76:7F:59:9F:C4:4E:DD:8D:85:CB:55:B2:63
Certificate issuer: /CN=95406691f2e374ee37a640492a364dfc53ba4412
Certificate serial: 01856B6EA78710AE3056356EE8D8A8CE7EA7
Authority key identifier: 95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/R8mjQxLK4HZ_WZ_ETt2NhctVsmM.roa
Signing time: Sun 01 Jan 2023 03:44:52 +0000
ROA not before: Sun 01 Jan 2023 03:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207754
IP address blocks: 2001:678:c40::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:a7:87:10:ae:30:56:35:6e:e8:d8:a8:ce:7e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95406691f2e374ee37a640492a364dfc53ba4412
Validity
Not Before: Jan 1 03:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47c9a34312cae0767f599fc44edd8d85cb55b263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:e0:d4:c3:25:02:c3:92:03:e8:08:ae:93:
8f:ae:ab:99:b1:3f:0a:6c:3f:2c:d3:eb:ef:f3:e4:
1f:40:1b:66:7a:52:ef:b0:d8:8d:ec:75:66:19:55:
1f:ec:f3:74:57:86:3c:fa:71:89:86:64:09:b1:d8:
fe:fb:eb:e8:ac:96:8d:91:3f:b4:9b:f4:e8:ad:79:
2e:05:3c:23:61:10:88:60:7b:76:a8:eb:fc:f3:18:
bc:27:a6:54:0a:d7:a5:9b:79:74:43:96:75:ab:92:
59:5e:cd:a6:12:cc:98:66:3e:21:16:76:ee:1e:19:
19:70:9a:9e:75:27:6a:43:e0:1f:53:bf:5b:0d:8d:
5c:08:7d:b6:e5:10:92:dc:ca:9d:db:cc:50:59:0d:
5a:2d:5f:3e:cd:94:7c:9d:ec:14:4d:5a:58:00:59:
de:42:b5:32:46:50:4d:95:33:1a:9c:6f:8b:8b:8a:
85:99:b2:d1:ea:09:fb:f0:a9:7d:a3:b8:9f:4f:32:
69:18:ce:cc:6f:03:11:96:26:6b:8f:3d:e9:98:fe:
ad:69:2c:64:ee:d0:d6:85:69:0e:5a:ed:e3:ea:93:
f8:bf:5b:84:b9:5e:6d:bd:cd:43:66:56:88:d8:5e:
07:e7:34:0e:00:c5:e6:d7:34:cd:eb:0e:2d:81:64:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C9:A3:43:12:CA:E0:76:7F:59:9F:C4:4E:DD:8D:85:CB:55:B2:63
X509v3 Authority Key Identifier:
keyid:95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/R8mjQxLK4HZ_WZ_ETt2NhctVsmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c40::/48
Signature Algorithm: sha256WithRSAEncryption
21:0a:d2:19:28:8b:84:1a:52:e0:bd:96:49:b6:0c:25:a3:c6:
dc:02:12:b5:36:0d:86:06:51:52:e3:e2:78:a4:fa:f5:ea:d3:
5b:af:f8:3b:0b:80:43:bb:e6:6a:3c:8c:19:4e:4d:3a:a4:1f:
58:0d:ad:13:2a:29:21:61:5d:f7:9c:d5:97:62:c8:90:d9:af:
5b:6f:1e:87:97:53:f9:ab:d9:44:9d:4a:92:a4:97:de:b8:ec:
a2:5a:f4:f5:51:ad:d0:ac:9a:42:72:79:5b:c8:06:81:b3:ae:
aa:a3:ff:9b:8e:ec:47:43:cb:d5:dd:12:86:cf:e2:50:2e:4a:
38:49:f6:6c:6d:22:28:a9:db:68:14:2e:07:9c:62:0b:b5:af:
b9:92:c8:e0:6e:cf:56:65:1c:44:e8:36:80:58:3a:cc:3f:7f:
23:c5:78:0e:4f:57:23:b5:cd:12:aa:a1:94:18:48:a0:5e:8b:
f5:e6:42:27:ef:13:0e:22:c0:ba:28:cc:51:e9:f7:12:9c:b0:
03:db:b5:ff:4e:d5:a8:53:96:7b:a0:74:fc:ea:11:73:f8:64:
e6:15:1c:7d:3f:c4:6f:7b:04:3a:02:9e:31:da:73:e3:0d:85:
dd:0d:57:02:b4:c7:c8:e3:8f:39:c6:6f:5f:24:01:12:fe:11:
b9:76:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:36 2024 by rpki-client on console-fra.rpki-client.org