Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/9yJIUhmOsiplIY12ZKz4qcpPTIw.roa
File: 9yJIUhmOsiplIY12ZKz4qcpPTIw.roa (raw, json)
Hash identifier: YR/hPq3W83DP+1l3bk8xMV+0OB9nQgyVdu/+hM/IEZQ=
Subject key identifier: F7:22:48:52:19:8E:B2:2A:65:21:8D:76:64:AC:F8:A9:CA:4F:4C:8C
Certificate issuer: /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial: 01856B93504CD0BF20879C4E47D540FA8366
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/9yJIUhmOsiplIY12ZKz4qcpPTIw.roa
Signing time: Sun 01 Jan 2023 04:24:54 +0000
ROA not before: Sun 01 Jan 2023 04:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206290
IP address blocks: 2001:67c:9e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:50:4c:d0:bf:20:87:9c:4e:47:d5:40:fa:83:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
Validity
Not Before: Jan 1 04:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7224852198eb22a65218d7664acf8a9ca4f4c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:bc:f4:6a:52:c4:50:62:70:80:a8:79:36:
54:dd:4e:5c:8b:64:63:4c:99:a9:38:e8:02:87:b2:
82:83:b2:24:c0:f3:cf:11:6b:37:d8:33:54:f1:eb:
c3:d1:20:ff:47:cd:e5:64:de:9a:79:a8:b9:2f:4a:
98:67:b1:b7:10:be:3f:49:a9:6d:35:d7:4e:8c:58:
7e:6f:b0:7a:d0:35:e1:1b:bf:a7:6f:ee:be:56:50:
3e:18:4e:bc:92:c2:a8:e7:65:a3:7c:f0:1f:7b:4e:
45:19:ac:dd:ed:77:96:3a:b3:17:75:06:0b:4e:6c:
17:49:12:12:53:27:86:52:39:bd:0d:de:21:26:20:
25:c5:9b:08:3d:d7:76:a2:5d:91:44:3f:95:26:7c:
3f:2e:a0:3b:21:85:45:60:f6:a8:5a:ed:56:0b:a1:
e1:04:38:f6:f6:5f:2c:fa:4f:51:00:85:d6:d3:d6:
db:6b:37:f9:10:22:e8:6a:96:c9:b3:08:b6:38:7b:
72:06:86:de:70:de:93:b3:9a:14:9b:6b:42:67:5c:
15:05:c9:5d:8c:0c:0e:df:83:18:bd:2b:55:ef:ca:
44:85:ff:9c:b3:56:43:fa:df:08:be:d5:cd:29:21:
db:52:1e:2a:26:1d:9c:b4:c3:ef:8f:b5:16:ea:37:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:48:52:19:8E:B2:2A:65:21:8D:76:64:AC:F8:A9:CA:4F:4C:8C
X509v3 Authority Key Identifier:
keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/9yJIUhmOsiplIY12ZKz4qcpPTIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9e0::/48
Signature Algorithm: sha256WithRSAEncryption
b8:30:72:33:6e:d1:70:52:e4:ce:85:25:74:3c:61:37:27:8a:
fa:c6:18:dc:0d:d0:ea:ec:09:86:e2:a5:95:89:e9:86:bf:b7:
9e:ba:1a:a5:68:ed:8b:17:04:64:43:8e:24:d1:5d:a8:34:60:
c2:38:77:51:53:bd:16:da:23:f4:b2:67:93:f0:96:87:9e:bc:
bd:48:57:1f:ee:e3:8d:1b:61:ce:39:68:ed:98:f2:a4:55:41:
61:0e:e0:9b:22:e4:89:6d:7c:31:0e:da:bd:68:16:82:15:65:
86:45:98:59:1e:ef:86:9f:7b:f7:d7:f7:ea:62:16:79:85:7f:
98:38:ea:b7:e1:25:3c:e3:2e:9f:3a:36:72:eb:a7:4d:64:4f:
30:9a:58:e7:8c:90:53:e1:0f:e4:38:9f:fe:0c:3d:b1:b1:24:
78:57:34:85:e9:74:f1:11:04:bb:08:ec:3e:1d:72:30:5e:c6:
2d:e6:15:d1:4b:0c:96:21:24:4d:d2:4a:60:0d:e4:bf:03:c4:
fc:03:bc:64:e5:72:58:39:01:b2:52:d6:f0:ee:5a:da:3a:58:
5e:7e:64:bc:df:eb:4e:cb:72:6a:8c:2c:31:c1:b6:2c:f8:b7:
d7:da:04:df:22:c7:d5:5a:ee:93:84:e7:fb:68:81:7f:2f:db:
b3:73:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:17 2024 by rpki-client on console-ams.rpki-client.org