Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/RkV7Ni-OLzCgEboWGTsndQzeDP8.roa
File: RkV7Ni-OLzCgEboWGTsndQzeDP8.roa (raw, json)
Hash identifier: 2BIzg5MAVT6LDvWaw09neyDa1DdnBR1v0Gabr/yzFjo=
Subject key identifier: 46:45:7B:36:2F:8E:2F:30:A0:11:BA:16:19:3B:27:75:0C:DE:0C:FF
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 018A0001AF24897629E5568447A5DA32FF53
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/RkV7Ni-OLzCgEboWGTsndQzeDP8.roa
Signing time: Wed 16 Aug 2023 20:20:24 +0000
ROA not before: Wed 16 Aug 2023 20:20:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212144
IP address blocks: 2a10:4bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 19 Sep 2023 09:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:00:01:af:24:89:76:29:e5:56:84:47:a5:da:32:ff:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Aug 16 20:20:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46457b362f8e2f30a011ba16193b27750cde0cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:2c:7f:16:77:a8:24:3d:bd:1b:f6:fe:37:
0b:fe:32:98:79:d7:65:53:5e:1f:ae:b0:a1:19:a0:
54:db:aa:15:a6:f2:8a:33:0e:2c:4d:ef:b1:54:ce:
9d:a5:ed:78:56:52:ef:1b:8f:2d:85:d3:32:d9:a0:
bf:88:dd:c0:f3:13:fa:23:e2:97:29:5f:aa:a1:88:
67:dd:25:e6:17:09:de:c5:56:ef:04:be:99:76:c5:
e7:fb:e8:93:a2:79:c3:6e:a3:c6:bb:2b:e9:65:98:
db:08:94:45:24:db:17:2b:65:3e:e6:c3:e6:24:18:
a9:fc:15:10:43:b6:e7:b6:24:44:18:1e:0b:92:ea:
3d:97:0c:8d:05:f4:4f:59:f3:3a:70:88:63:87:12:
51:5d:42:c3:c1:a4:12:fe:62:7f:6b:41:0e:1c:12:
3f:90:2a:65:f8:51:1a:3c:24:e5:e2:b5:c3:b4:e7:
39:6a:c1:1a:dd:a8:3a:12:56:1b:34:44:b6:1c:89:
43:3e:cd:5e:d7:ff:bb:71:f7:15:eb:c2:10:7c:96:
3b:f4:e5:85:be:6a:58:87:ce:9e:f2:eb:c3:72:1f:
da:2a:dc:a8:12:1e:cf:27:6b:e2:cb:c0:74:95:7c:
3e:01:b0:95:c4:22:26:bd:49:e5:0d:67:af:7a:42:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:45:7B:36:2F:8E:2F:30:A0:11:BA:16:19:3B:27:75:0C:DE:0C:FF
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/RkV7Ni-OLzCgEboWGTsndQzeDP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
42:34:af:86:76:0f:5f:bc:9c:a5:2d:83:2c:65:5a:21:c7:c6:
85:6c:83:c0:14:46:cf:e6:7b:b2:f1:98:72:0a:ea:f2:df:48:
fd:e5:d2:ef:b3:4b:e1:8f:c0:a7:c8:68:13:d6:9d:2d:5f:99:
77:e0:8e:76:09:09:23:5b:96:9a:3c:3c:26:fa:af:73:4a:9e:
f7:83:49:df:8e:fb:11:ae:db:69:a0:de:86:e7:4c:9c:2f:f9:
a2:56:85:4a:3c:ed:0d:3f:d0:7a:99:46:c1:9e:44:36:c1:73:
46:69:53:04:de:4c:6a:9e:70:52:d5:62:ff:8c:3b:0c:16:4c:
13:95:3a:c9:f1:81:5d:47:37:67:ba:71:c9:89:7c:37:02:2d:
b8:a7:97:f9:13:60:26:8c:85:13:ed:db:f9:9c:5e:e5:0c:35:
c6:eb:60:6e:e9:32:41:c6:18:90:44:c2:ce:47:6a:a5:3a:81:
35:ca:77:cd:30:1e:fe:96:32:a9:e1:00:e2:87:63:c8:2a:43:
d3:57:1c:5b:89:20:60:3c:42:49:fe:80:8d:8d:4e:d7:8d:87:
95:fd:5a:ef:ca:29:24:8e:79:cd:58:21:a3:f4:27:49:98:63:
db:3b:e7:cf:be:72:c0:3d:34:7c:19:ba:9f:b4:70:84:66:ef:
a5:d1:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org