Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/J6IhPwHjEamgkNghBlpRwdNFsnM.roa
File: J6IhPwHjEamgkNghBlpRwdNFsnM.roa (raw, json)
Hash identifier: M1Z4xZPBL7oHcnEiBJ6o9fBEaFB5FxQCMyIOA8SYSos=
Subject key identifier: 27:A2:21:3F:01:E3:11:A9:A0:90:D8:21:06:5A:51:C1:D3:45:B2:73
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 01856E1D324E8B071AA5A4CBE763A9000E71
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/J6IhPwHjEamgkNghBlpRwdNFsnM.roa
Signing time: Sun 01 Jan 2023 16:14:45 +0000
ROA not before: Sun 01 Jan 2023 16:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209309
IP address blocks: 2a0d:9843::/32 maxlen: 32
2a0d:9847::/32 maxlen: 32
2a0d:9845::/32 maxlen: 32
2a0d:9841::/32 maxlen: 32
2a0d:9844::/32 maxlen: 32
2a0d:9842::/32 maxlen: 32
2a0d:9840::/32 maxlen: 32
2a0d:9846::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:32:4e:8b:07:1a:a5:a4:cb:e7:63:a9:00:0e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jan 1 16:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27a2213f01e311a9a090d821065a51c1d345b273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:3d:d4:b5:1c:6f:2a:dd:16:f0:c3:cd:0b:
24:21:3d:36:61:7f:57:b5:b1:bf:f4:d5:72:23:78:
8b:d7:a0:bc:eb:db:ef:a7:b9:dc:72:b2:17:48:9d:
7b:97:6a:b4:94:45:98:2a:68:11:32:2a:00:f0:0c:
8e:69:75:ea:df:af:57:1c:75:d1:f7:a0:43:29:fa:
c2:5a:5e:19:e1:66:6e:c2:cb:c2:c7:d8:2b:ad:73:
11:0b:f9:d6:86:bd:0c:d5:bb:43:4e:f1:e9:0e:33:
5b:b9:76:a6:a3:54:c5:6c:9d:70:03:c2:95:26:47:
7d:61:c0:f3:49:d4:6b:1a:7b:04:b9:49:bc:43:d5:
c3:83:75:4b:ef:bb:5e:76:c5:1a:9c:72:e5:88:2c:
04:f0:5b:36:d9:0f:22:0d:d8:c6:b6:6c:35:31:f5:
53:29:b1:89:2d:6d:34:29:09:12:a0:59:47:89:49:
04:17:d6:03:19:2b:03:7b:2f:d9:5f:f7:64:5f:c3:
b5:59:f4:a7:25:be:bd:ba:49:c4:c8:b9:cd:46:f4:
ef:93:44:b9:0c:34:b5:43:ac:e2:64:ea:6e:7e:15:
31:b4:4d:d6:0b:32:d5:19:61:7f:c5:75:22:4d:74:
56:8b:88:a5:42:0f:22:07:55:8c:dc:d4:24:36:cb:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A2:21:3F:01:E3:11:A9:A0:90:D8:21:06:5A:51:C1:D3:45:B2:73
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/J6IhPwHjEamgkNghBlpRwdNFsnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9840::/29
Signature Algorithm: sha256WithRSAEncryption
81:93:ee:d0:67:eb:b8:cb:09:78:22:b2:18:c1:e0:37:9b:e4:
69:47:69:2d:b7:6e:d9:f6:40:f2:00:f7:6d:2b:ed:a9:00:b9:
0a:cd:9f:e0:91:46:3b:02:92:7e:c1:5a:73:23:ca:9f:f7:c0:
1a:73:21:6b:cb:d1:7d:d2:12:1a:dd:70:5d:87:b4:30:27:a7:
e4:97:dc:9b:00:dc:aa:88:58:ac:3a:ef:e5:5a:5b:62:90:0f:
40:b6:54:ea:8b:d8:7b:7a:ee:9b:7b:be:19:82:7d:b8:46:de:
d4:5c:79:13:9c:84:34:e8:59:c4:a2:b9:a4:d4:b6:04:31:27:
fb:c4:a1:ab:be:7a:9d:1b:fd:7d:23:54:92:f5:f6:8e:2d:ed:
23:8e:31:0c:2d:89:4c:4e:5b:72:ed:67:75:39:4e:d1:f1:8d:
74:b0:df:40:61:3e:71:99:3e:62:bf:59:81:c1:90:02:e1:92:
89:8e:a9:e3:dc:b9:52:7b:5b:a7:da:e8:e4:fd:c5:26:1d:9c:
95:b4:15:60:17:7a:b9:51:af:d9:c2:ce:a4:2c:0c:4b:df:17:
bc:b6:1e:ff:6c:85:b4:0d:46:cf:6f:e6:29:06:36:13:4b:be:
6f:3c:ab:73:9c:11:81:57:40:53:4b:5a:13:6d:c8:67:68:b1:
27:47:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:46 2024 by rpki-client on console-ams.rpki-client.org