Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/COqX2skmDH2uvpMwDaoGGfxXl8w.roa
File: COqX2skmDH2uvpMwDaoGGfxXl8w.roa (raw, json)
Hash identifier: gK6LKEOYTG9reF0pW505orOaAJIHqCVM0OaZWW1mfik=
Subject key identifier: 08:EA:97:DA:C9:26:0C:7D:AE:BE:93:30:0D:AA:06:19:FC:57:97:CC
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 01856CEF32FAFF38C59F8BB73599B20D6B0D
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/COqX2skmDH2uvpMwDaoGGfxXl8w.roa
Signing time: Sun 01 Jan 2023 10:44:53 +0000
ROA not before: Sun 01 Jan 2023 10:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 967
IP address blocks: 2a0f:7880:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Oct 2023 17:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:32:fa:ff:38:c5:9f:8b:b7:35:99:b2:0d:6b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 1 10:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08ea97dac9260c7daebe93300daa0619fc5797cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:f6:7a:64:48:53:eb:e8:9f:b4:cd:34:46:
3b:22:13:53:74:39:b4:cc:4c:04:94:63:d7:89:62:
f7:46:60:56:84:30:e8:61:07:3d:82:c9:1c:c5:41:
65:11:75:13:09:c2:0f:ce:ac:b6:9d:2d:32:20:80:
26:84:cf:98:b4:75:18:ec:70:fa:da:42:ec:06:0b:
4f:6b:7b:64:22:55:50:5c:ff:02:4f:c9:16:b9:98:
76:28:50:e9:d3:75:80:4b:f9:6b:a8:8a:18:d5:24:
2b:b3:dd:24:4b:56:65:f6:a6:c3:e6:08:e5:30:b0:
64:76:a3:f4:87:73:89:a1:b6:bf:1f:d6:23:d2:7e:
ed:68:99:5a:21:d6:a8:6c:10:75:9e:72:80:29:09:
14:10:1d:ee:db:3f:52:0c:b0:70:d1:c3:84:c9:08:
38:99:f7:e2:db:bb:89:58:05:7e:09:fe:f1:07:eb:
09:07:14:da:fa:f1:89:a5:95:db:f4:19:cf:83:0d:
88:64:cc:4b:ff:ca:92:09:39:5a:5e:27:1e:f4:b0:
83:db:dd:51:f1:2c:87:94:e4:98:b5:60:36:ea:ea:
09:12:cc:25:36:c9:69:af:f5:b0:c9:f6:7a:0f:2a:
03:e6:b1:2f:20:e8:87:90:26:88:b2:72:95:04:75:
1f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:97:DA:C9:26:0C:7D:AE:BE:93:30:0D:AA:06:19:FC:57:97:CC
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/COqX2skmDH2uvpMwDaoGGfxXl8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7880:200::/48
Signature Algorithm: sha256WithRSAEncryption
22:a8:8c:3c:c3:dd:a6:22:2c:8a:70:a9:6b:4f:ab:a5:8b:fe:
d8:b8:59:c9:81:f9:8c:b2:f5:33:69:50:27:6b:fd:e8:76:74:
3e:24:c2:f0:56:04:76:62:45:f3:13:00:94:10:90:2e:f5:8d:
9a:00:51:a4:44:d2:a4:a3:19:13:a2:7a:ed:11:7a:66:b3:16:
40:66:2f:f4:1a:77:6a:1c:85:8e:19:b0:d3:2e:74:6a:da:55:
05:03:31:c1:b7:3f:5d:b6:27:39:60:0a:84:06:cd:36:33:34:
4d:f9:db:17:4b:a1:ae:26:44:8d:fa:c7:ac:f7:5f:c8:1a:66:
aa:6d:50:41:81:b4:3d:f7:5c:e1:4a:de:f7:67:47:63:6f:bb:
4e:0a:56:4d:69:6c:ce:ff:bd:86:10:ec:16:3d:72:31:4c:fa:
96:78:b0:0e:79:ba:df:2c:1b:18:f5:4a:b8:dc:25:1b:f4:6a:
de:06:a7:b9:6a:aa:b0:3e:86:9a:ac:b9:f1:25:c6:c1:16:ae:
f5:97:a2:f2:c1:03:a7:56:8b:b0:92:ad:3e:7b:59:1a:30:b0:
91:f4:b4:d5:63:aa:33:92:9e:17:07:df:08:ba:c3:b8:09:42:
a7:23:52:76:59:ac:3c:32:6e:a2:0e:77:0d:0a:a5:a5:57:bf:
9a:e5:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:32 2024 by rpki-client on console-ams.rpki-client.org