Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/C0ogmLHU48UtvLza2ZE475P7TrU.roa
File: C0ogmLHU48UtvLza2ZE475P7TrU.roa (raw, json)
Hash identifier: p9VkkNPTZYUzqvzAVyDlcWXUGkCqhzKBhnmOwYzi7ik=
Subject key identifier: 0B:4A:20:98:B1:D4:E3:C5:2D:BC:BC:DA:D9:91:38:EF:93:FB:4E:B5
Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial: 018573CCEDA36FA224382E7AA159E5A6C864
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/C0ogmLHU48UtvLza2ZE475P7TrU.roa
Signing time: Mon 02 Jan 2023 18:44:48 +0000
ROA not before: Mon 02 Jan 2023 18:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0d:9b84:ff00::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cc:ed:a3:6f:a2:24:38:2e:7a:a1:59:e5:a6:c8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
Validity
Not Before: Jan 2 18:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b4a2098b1d4e3c52dbcbcdad99138ef93fb4eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:9f:b9:68:0e:1b:1b:3d:c0:af:de:ed:e3:
db:76:16:10:79:fa:36:40:6c:ab:b2:71:3d:f6:77:
88:26:80:28:58:d4:70:51:97:33:aa:ad:6e:5c:b0:
de:e5:f2:cf:fb:8e:b1:bf:a7:2b:1a:d1:a9:5e:27:
7f:1f:f1:a6:ee:f0:5d:a9:65:08:1c:46:8e:dc:31:
4b:68:ac:17:42:c9:ee:7a:d6:73:ac:78:ae:d8:9a:
4e:69:ae:2f:bc:b8:64:2a:21:b4:14:e2:56:2a:e3:
67:d4:39:6e:69:ba:25:75:68:cf:b8:b5:07:33:fe:
79:ea:2a:07:e8:32:3b:5a:98:de:35:d6:2a:39:e0:
7d:5f:72:10:1b:6b:b5:73:99:ad:2b:08:49:dc:83:
01:99:d2:11:80:fa:8b:09:99:ba:22:e0:0a:11:7a:
5c:d0:7c:87:3f:d4:6e:48:99:2f:91:a0:df:a5:b8:
e8:8e:a9:64:93:75:dd:91:9c:ee:a0:8c:c1:61:64:
2f:25:7d:27:33:42:32:c0:b4:73:16:d3:34:9a:e4:
bf:7a:ca:32:3e:a9:05:c7:35:74:68:64:f7:0c:1e:
47:67:9a:25:11:85:69:14:8b:13:a5:d1:37:05:bb:
e2:a5:8c:0f:76:6c:40:8f:4e:57:ba:b2:b4:74:a9:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4A:20:98:B1:D4:E3:C5:2D:BC:BC:DA:D9:91:38:EF:93:FB:4E:B5
X509v3 Authority Key Identifier:
keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/C0ogmLHU48UtvLza2ZE475P7TrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9b84:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
1c:b3:99:d7:10:55:af:56:c1:41:44:79:6f:aa:2e:cc:ad:d1:
44:da:2f:1e:68:67:7d:95:0d:f3:4e:f7:2b:3a:47:08:fc:3c:
7f:ec:37:06:b7:5d:94:48:6a:8e:40:b0:d7:45:84:ac:e9:8e:
6c:74:c1:ec:c7:c7:74:36:93:48:b0:1e:f7:7c:6b:72:37:cc:
6f:0a:78:da:df:b5:b7:e7:d7:a9:dc:9f:0e:6d:d4:5a:f4:7b:
f2:f4:00:30:1f:0f:36:b8:96:64:31:a2:fe:87:62:fa:57:ec:
71:ae:36:38:79:60:0d:55:bf:9d:eb:61:96:cf:3a:e8:34:32:
8b:35:a9:e3:43:13:0a:d3:51:50:f0:9c:7f:cc:ea:64:26:cd:
1b:1e:6d:0f:20:f5:94:9f:b0:21:bd:93:7e:19:46:16:6d:a8:
07:f3:7f:da:bf:50:b7:2c:c5:20:3e:4c:cd:d1:06:aa:af:31:
2d:a6:aa:5c:fb:4f:be:d5:53:86:02:c7:27:a9:a1:d0:93:35:
0a:a3:d8:b9:ce:f4:2f:b2:fb:ac:6d:5c:97:5d:b6:3f:a9:32:
61:ab:9b:12:bd:f1:7e:e5:5d:89:9a:e1:ba:a0:a2:63:2a:77:
95:45:fb:08:48:63:a7:df:9b:1d:4b:90:c3:3f:2f:98:c2:c4:
29:98:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:50 2024 by rpki-client on console-ams.rpki-client.org