Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/1-xWmDJqVV3zSkCPJ_zgVgVKCwlc.roa
File: 1-xWmDJqVV3zSkCPJ_zgVgVKCwlc.roa (raw, json)
Hash identifier: yms3UJgKk3eUdsT26Gl0K710Wo545ksxdivnMJGldS4=
Subject key identifier: FB:15:A6:0C:9A:95:57:7C:D2:90:23:C9:FF:38:15:81:52:82:C2:57
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 018CC6B8C312E2827FA37BFFDCE5292E441B
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/1-xWmDJqVV3zSkCPJ_zgVgVKCwlc.roa
Signing time: Mon 01 Jan 2024 20:30:46 +0000
ROA not before: Mon 01 Jan 2024 20:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 2a10:4bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 16 Apr 2024 11:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:c3:12:e2:82:7f:a3:7b:ff:dc:e5:29:2e:44:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jan 1 20:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb15a60c9a95577cd29023c9ff3815815282c257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:95:d9:12:1f:1b:4f:e4:7b:3c:75:13:d5:
fe:cc:5c:96:ce:6e:95:82:9f:23:87:ec:0a:38:7a:
f5:64:55:00:8c:76:82:04:95:ab:9c:35:49:8a:a0:
15:d1:64:a2:48:b2:23:f5:0e:f5:88:58:cb:8f:49:
3a:a0:41:3d:34:d6:55:d8:2e:39:17:ba:23:77:50:
05:af:c7:cc:f4:59:0c:92:c6:b2:1b:57:06:cc:1e:
12:18:18:3d:29:05:46:62:44:2f:ae:f8:64:0f:06:
2d:28:0e:57:4a:17:67:70:11:f8:d2:72:1e:fa:58:
66:24:cb:8a:26:b0:1c:ca:d0:d5:b2:ee:b7:3a:a6:
5b:e4:67:25:ca:6f:bb:4e:fe:73:46:1e:eb:06:b9:
48:15:0c:d2:23:6e:6b:74:42:a6:19:a8:e0:ce:e6:
c0:f3:f9:d7:9c:9d:b5:7b:14:4b:3b:d9:7b:77:3e:
15:0c:a4:ef:12:6a:9c:01:fb:26:a2:67:2a:e2:d6:
d7:db:8a:9e:dc:e6:bb:7a:61:d1:4d:3a:61:f2:ad:
61:56:f6:e3:0b:3f:73:6d:13:fa:37:22:c9:bb:32:
39:bc:78:94:0d:79:4b:54:16:99:57:25:a4:e5:48:
f2:46:bb:88:b1:74:7f:c3:be:9b:70:b3:d6:f0:c9:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:15:A6:0C:9A:95:57:7C:D2:90:23:C9:FF:38:15:81:52:82:C2:57
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/1-xWmDJqVV3zSkCPJ_zgVgVKCwlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:2c:8b:ca:ae:98:e8:dd:9e:5c:5c:c6:1c:7a:2c:c7:37:b8:
1c:ab:56:1f:38:e2:4c:99:b8:b5:05:fb:61:ab:fd:17:ba:46:
13:1c:ab:3e:a6:66:75:cc:b5:51:ae:1b:6d:4e:fc:dc:11:20:
56:ca:9e:c4:90:93:aa:55:62:6f:0a:20:ba:69:a6:65:4c:37:
b6:43:5f:b4:c7:29:85:e8:5d:48:7c:9f:84:d1:e7:7b:3c:70:
ca:cb:dd:84:ca:07:ac:a2:9c:3f:b5:b3:e3:6a:de:2a:cf:26:
9a:37:69:99:ca:43:50:4b:78:b8:7f:da:3e:a5:99:ad:40:04:
c7:ba:c7:e5:51:76:48:9f:12:d6:ae:98:3e:e4:6b:44:15:47:
fd:86:f7:a1:90:3b:6c:eb:55:3d:d3:36:3c:be:d4:ad:0e:20:
bc:ea:89:5a:ca:8c:83:a4:f2:5f:f0:a6:12:ff:da:79:28:13:
24:7c:d2:e9:86:7d:c8:92:b5:ef:24:ec:ef:08:e6:28:35:f8:
3f:28:4a:76:ed:89:83:e9:88:ff:56:2d:87:6a:7a:b1:06:37:
9b:01:10:1b:70:2a:1a:a8:b0:d1:43:23:f4:05:fa:0b:ee:f7:
3a:8e:72:d5:66:2e:5f:bd:00:59:02:c3:64:38:9f:b4:6b:59:
59:5f:4f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 14:06:35 2024 by rpki-client on console-ams.rpki-client.org