Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/uxCyqrI1a2-zVaS5ErHWGDMVa0w.roa
File: uxCyqrI1a2-zVaS5ErHWGDMVa0w.roa (raw, json)
Hash identifier: ZMixZC6F6538tSkqRcVD11uBEGDg4al+ikYFq/75wJI=
Subject key identifier: BB:10:B2:AA:B2:35:6B:6F:B3:55:A4:B9:12:B1:D6:18:33:15:6B:4C
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 01856FE719F724650D59D618E6ACEFA07F46
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/uxCyqrI1a2-zVaS5ErHWGDMVa0w.roa
Signing time: Mon 02 Jan 2023 00:34:54 +0000
ROA not before: Mon 02 Jan 2023 00:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6900
IP address blocks: 2a02:9f8:9000::/48 maxlen: 48
2a02:9f8:9000::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:19:f7:24:65:0d:59:d6:18:e6:ac:ef:a0:7f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Jan 2 00:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb10b2aab2356b6fb355a4b912b1d61833156b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:64:bb:26:f1:45:c1:41:a3:bd:4e:17:3a:
eb:00:60:0a:e7:63:38:94:21:a9:1f:a1:89:e1:47:
70:93:18:75:99:08:2b:36:e7:04:fe:00:e1:d4:fd:
95:8d:c4:c0:b3:c8:78:e6:b1:de:a5:61:2c:f6:72:
8d:59:80:ea:a1:0b:1b:50:93:40:e0:26:52:e8:5a:
89:e4:60:28:f0:52:92:45:fe:ad:9f:0e:7f:03:da:
88:20:51:0c:ff:d7:07:d4:5d:09:7d:17:2f:dc:0c:
aa:1e:63:df:53:5f:21:5c:b2:65:4d:0f:4e:2a:83:
69:e5:71:a3:c7:e4:8c:c9:f4:62:78:fa:20:94:1f:
c5:b3:cc:9e:d0:de:74:9e:e3:2c:b7:ff:8a:9b:bc:
97:f1:4c:e2:ed:f5:ab:ad:02:44:bc:cb:15:3e:cb:
8e:58:ec:1d:d4:5f:5c:e4:72:a1:57:41:a7:43:14:
9e:c0:32:df:e6:ee:a2:db:f3:23:c2:2c:2f:cb:a2:
f4:38:19:4a:a9:4a:55:ed:3a:37:1a:34:23:e8:d6:
37:f3:74:5a:c3:89:e0:7a:f4:06:99:5e:a5:4f:eb:
66:c6:ae:36:62:9a:2b:1c:73:d4:cd:9a:e5:99:58:
9e:16:ae:cf:d1:e7:4d:80:d7:1e:06:38:35:a4:00:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:B2:AA:B2:35:6B:6F:B3:55:A4:B9:12:B1:D6:18:33:15:6B:4C
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/uxCyqrI1a2-zVaS5ErHWGDMVa0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:9f8:9000::/44
Signature Algorithm: sha256WithRSAEncryption
86:8b:72:83:b3:e3:d4:72:fc:9a:ab:69:fd:2b:55:4a:23:14:
14:0e:ed:09:d2:67:a1:7f:81:4d:4f:e4:57:98:ce:d6:08:de:
14:5a:6e:4e:14:9d:14:33:00:ab:7b:93:b9:d0:45:56:2c:60:
51:ac:4e:1a:f4:d4:28:a0:3c:5f:cf:74:5c:11:28:06:51:d2:
ee:df:a5:ab:bd:6c:ec:e7:0b:2b:5f:95:c3:ec:32:28:d4:2e:
71:fa:f4:8e:3e:c1:d0:70:96:d4:25:3c:3b:b7:ca:98:cf:34:
bd:c9:4d:29:57:b2:dc:8b:97:9d:91:ec:8c:0f:07:4d:ad:24:
a7:7d:08:a9:ef:a1:32:4c:c5:5f:9c:f4:fd:b7:54:bb:ad:2f:
b6:40:c9:12:3b:1c:2d:4d:06:b8:68:46:36:dc:cc:31:2a:ce:
6e:dd:dd:cd:d3:f9:b9:e5:b6:68:c9:51:ef:78:d2:7c:b0:0b:
e2:17:ca:ea:6d:44:40:b6:0a:b8:d7:f2:24:b3:08:2f:2e:16:
53:aa:05:c5:01:82:21:81:b5:fc:a5:f2:39:2f:86:63:98:b2:
14:23:c9:6f:e1:b3:d7:13:37:41:da:3a:e7:42:52:96:e3:ae:
43:62:17:59:5d:af:0d:fe:77:2a:91:f6:c7:f0:7a:1c:a1:ce:
dd:b3:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:35 2024 by rpki-client on console-fra.rpki-client.org