Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/_OHzRwgSGxR5mEPDJKFCcVl10gc.roa
File: _OHzRwgSGxR5mEPDJKFCcVl10gc.roa (raw, json)
Hash identifier: 9tkvNZqGVVKjUvnXjbr6/x4zZD+Y7WkXs6Qsw4OtwT4=
Subject key identifier: FC:E1:F3:47:08:12:1B:14:79:98:43:C3:24:A1:42:71:59:75:D2:07
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 018A648FEA81FC0B51308D20388664E6BCB5
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/_OHzRwgSGxR5mEPDJKFCcVl10gc.roa
Signing time: Tue 05 Sep 2023 08:57:47 +0000
ROA not before: Tue 05 Sep 2023 08:57:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2001:67c:2c3c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:8f:ea:81:fc:0b:51:30:8d:20:38:86:64:e6:bc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Sep 5 08:57:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fce1f34708121b14799843c324a142715975d207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:2f:96:06:81:3f:f5:b8:86:e5:ed:8c:ae:
ee:0e:4e:dc:54:c8:4a:c9:2b:de:92:33:93:46:f3:
91:fe:83:f4:d7:3f:f0:32:05:46:ca:6a:92:45:6d:
36:2c:1c:e9:3c:89:b1:c2:31:bc:eb:2d:83:2b:c9:
15:df:80:50:3f:73:f5:8f:77:5a:55:cf:cd:54:5f:
80:3c:f8:ba:ff:cb:31:6e:73:b6:6e:c7:9e:ed:03:
56:63:a4:94:ed:c1:51:20:6c:ce:90:c5:84:61:3b:
da:2a:51:9b:f2:18:42:cc:8e:6d:47:80:ea:0c:70:
9e:1a:e4:ad:42:30:82:da:fb:99:ae:ea:32:3b:63:
f5:47:1e:fb:a1:04:f6:db:dd:cd:7b:ef:64:a8:9f:
33:9f:6b:27:9a:8f:1d:63:06:a6:03:2a:e8:76:77:
5b:14:67:9c:ed:48:c3:78:6c:2f:bf:05:49:c4:63:
64:1f:bd:0a:1f:75:3a:9f:b6:5b:9c:ac:d8:34:71:
8d:5d:e7:ea:32:12:1c:f7:61:80:e9:6d:f8:58:4a:
43:e1:1b:78:c9:a7:6a:5c:7d:c0:c6:39:1e:d0:ba:
60:6e:92:be:ad:ca:2c:ba:b1:f9:5a:c0:8c:02:85:
0f:ac:df:b2:03:74:84:65:44:b7:cd:d2:35:ba:0f:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:F3:47:08:12:1B:14:79:98:43:C3:24:A1:42:71:59:75:D2:07
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/_OHzRwgSGxR5mEPDJKFCcVl10gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c3c::/48
Signature Algorithm: sha256WithRSAEncryption
83:b6:43:d6:d3:99:9f:1e:15:78:02:89:7a:29:f6:55:c4:f0:
ab:e0:98:6f:3d:3d:7d:21:96:2d:35:f6:82:ba:78:96:ef:b2:
82:2d:c4:28:27:fa:39:e9:c0:8e:10:16:dc:91:07:6f:6a:51:
ba:53:96:ad:00:05:3d:e5:c8:83:b6:9c:13:9e:09:2f:81:04:
d7:3e:67:39:cb:d6:59:72:1e:fa:7b:de:e8:20:85:54:64:a2:
54:d8:6a:40:2f:43:65:83:76:18:77:6e:80:f2:14:23:08:4f:
61:3b:90:c9:b1:e1:f2:d6:21:b2:d1:f2:c6:6e:cb:02:ab:b3:
14:03:df:2e:8e:d8:92:24:75:0a:d4:3e:64:cb:95:40:b0:c6:
7f:5b:03:66:9e:06:06:cd:21:e6:da:ee:13:e0:87:15:e7:ff:
bc:92:74:f8:0a:c1:ac:2f:ed:fc:58:d1:46:3c:a1:93:dc:22:
c0:c7:e0:ce:1b:9c:95:1b:ca:0a:2a:11:19:a3:75:57:82:09:
5d:06:bb:4c:c5:3f:33:9c:5f:7e:cd:09:df:ba:ff:17:51:70:
32:2e:46:e2:05:8f:29:6d:05:9c:b3:95:1f:04:19:9e:f1:e3:
0a:3a:28:90:c0:3c:02:29:eb:6c:58:98:e0:a3:4f:dc:9c:c9:
1a:db:1e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:12 2024 by rpki-client on console-ams.rpki-client.org