Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/AqvkdOHi7_tUyCEKgNrT-qVADJQ.roa
File: AqvkdOHi7_tUyCEKgNrT-qVADJQ.roa (raw, json)
Hash identifier: kNl6hP6Vai7xYy2w3xTDvrTiXWoGeJ3NcdZX47D3WGg=
Subject key identifier: 02:AB:E4:74:E1:E2:EF:FB:54:C8:21:0A:80:DA:D3:FA:A5:40:0C:94
Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial: 018CC26D1192A4CFC1D9658D52413C2E0DF9
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/AqvkdOHi7_tUyCEKgNrT-qVADJQ.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5400
IP address blocks: 2a0c:7c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 07 Jun 2024 07:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:11:92:a4:cf:c1:d9:65:8d:52:41:3c:2e:0d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02abe474e1e2effb54c8210a80dad3faa5400c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:42:a9:5a:59:3c:bf:b1:b9:c5:97:8d:83:5c:
c0:57:93:43:40:8f:45:da:95:ab:81:6e:55:26:fd:
b9:06:ec:65:10:a3:15:f8:87:08:25:38:f0:ff:f1:
ef:94:95:9a:19:a2:9d:a1:86:87:f6:dc:df:ac:9b:
5a:6f:cb:e5:ae:ed:2e:33:3d:83:9a:3a:49:46:84:
e8:dd:fd:ca:1f:96:39:ed:b1:1a:ea:5c:17:e4:0f:
87:65:47:c2:0c:3f:5f:21:ad:dc:60:13:ab:f1:70:
d3:3a:81:4f:ca:11:ff:16:b0:8e:41:e1:32:a4:30:
8c:81:b0:07:26:e7:0b:9a:4d:02:25:f8:61:bd:60:
cb:bd:0f:1e:c6:b1:eb:89:21:e8:65:c5:85:f1:8a:
c0:0b:1c:14:5d:bf:dc:87:8b:d4:cc:21:b4:ff:01:
d2:84:53:d8:ee:67:f2:26:ad:06:ed:00:64:05:0c:
3c:12:bb:16:37:3a:41:49:f7:77:13:00:a0:af:8c:
4b:8d:c4:18:db:45:3a:fa:73:f2:22:ed:bc:44:d1:
af:91:f6:f8:c8:30:aa:84:bf:c8:9a:d9:67:2e:c3:
b7:7f:d9:58:14:e1:2d:5d:b0:78:91:3a:a1:25:cf:
5a:3c:a4:25:95:08:c2:59:9f:0f:cd:3d:fd:20:35:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:E4:74:E1:E2:EF:FB:54:C8:21:0A:80:DA:D3:FA:A5:40:0C:94
X509v3 Authority Key Identifier:
keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/AqvkdOHi7_tUyCEKgNrT-qVADJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
a7:0d:84:f8:25:2e:86:72:05:fa:2e:d9:a4:7c:69:fe:8b:5b:
ed:39:86:a3:1e:90:61:7c:a0:f8:02:a9:62:1e:aa:7d:64:d0:
d0:23:45:e8:83:35:aa:63:9f:71:0f:3f:b0:2e:f4:d7:af:e1:
08:bc:de:7e:c7:d1:dd:39:b9:88:46:b5:79:3f:30:27:ae:27:
75:95:24:f8:e0:2e:da:a2:ce:a4:6b:77:cf:03:8f:4b:2b:c3:
6f:02:da:a5:d4:7b:72:83:51:c5:2c:a7:b1:90:95:9e:85:ea:
92:52:08:67:ce:4e:91:14:38:f9:76:47:68:25:0a:c9:4e:ff:
74:33:bd:a1:57:4c:95:0a:22:da:cc:f5:ab:5f:bf:28:0e:c1:
44:fb:f1:cb:bf:a3:73:bf:cf:f4:47:96:43:fb:41:4b:79:01:
5f:1e:71:39:a4:87:3d:9d:78:a7:c7:bb:f6:31:4d:9f:93:0e:
96:b0:cb:57:bf:83:fa:26:68:3f:d5:36:60:a2:16:af:b1:9f:
98:60:19:4a:3a:5b:42:3d:f7:c6:47:0c:e5:1e:09:4b:c1:ff:
9b:fd:a3:6c:99:77:64:8c:86:d2:6b:31:64:b0:b8:8d:67:63:
fb:67:97:dd:95:1e:8a:07:fb:ac:d5:5f:a0:8b:35:19:ab:ca:
19:69:71:24
-----BEGIN CERTIFICATE-----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Generated at Fri Jun 7 11:40:23 2024 by rpki-client on console-ams.rpki-client.org