Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/j6vrjKahOhn-yzGIyQi58JnrgLQ.roa
File: j6vrjKahOhn-yzGIyQi58JnrgLQ.roa (raw, json)
Hash identifier: Dw2d13jpvIDhJqYCIuS1ft+VEc3M6d8u1DG0CJWJeaU=
Subject key identifier: 8F:AB:EB:8C:A6:A1:3A:19:FE:CB:31:88:C9:08:B9:F0:99:EB:80:B4
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 01857247015F4506F71C57865B76C04CA2B3
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/j6vrjKahOhn-yzGIyQi58JnrgLQ.roa
Signing time: Mon 02 Jan 2023 11:38:54 +0000
ROA not before: Mon 02 Jan 2023 11:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204828
IP address blocks: 2001:67c:2284::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:01:5f:45:06:f7:1c:57:86:5b:76:c0:4c:a2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Jan 2 11:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fabeb8ca6a13a19fecb3188c908b9f099eb80b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:b7:7a:72:f9:b4:03:df:9e:7f:12:d4:68:
1a:64:8c:a2:00:52:3b:bd:1d:99:fd:e8:38:bb:d2:
2a:b1:92:55:c5:72:63:12:70:b1:4d:cc:71:ef:2c:
33:19:de:37:8a:c7:f0:0a:7c:8c:b0:62:19:2b:34:
f1:82:d6:8c:34:f4:ce:29:f0:41:bd:66:ce:5f:4e:
c7:89:37:9e:b9:a0:7a:39:15:e6:55:47:da:62:3d:
8b:d1:7b:b7:50:4c:b0:5f:34:c6:6f:ec:ba:e7:52:
5f:35:72:0e:1b:dd:33:85:01:a8:02:60:9b:07:e5:
03:1b:ec:95:e9:63:e8:80:d7:06:24:4a:94:1f:0e:
e3:08:7e:da:2f:21:55:f6:ec:e3:3e:32:13:ee:54:
46:69:44:72:d1:38:a0:0e:8f:e9:37:8f:55:86:3d:
7a:00:57:26:61:77:cd:cd:e8:ef:0a:9e:80:c2:67:
e4:33:6e:71:e8:79:e6:e4:01:81:9b:39:1d:4b:6e:
26:fb:60:86:5f:e8:e7:51:cd:27:cd:2a:bc:df:03:
c4:8f:07:20:31:e6:ba:b4:58:bf:3a:98:1d:48:ae:
bc:bc:f7:4b:92:1c:41:ea:66:88:e5:48:a2:a3:74:
88:a1:0c:c1:a4:2d:af:2d:d3:90:94:d6:81:56:f6:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:EB:8C:A6:A1:3A:19:FE:CB:31:88:C9:08:B9:F0:99:EB:80:B4
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/j6vrjKahOhn-yzGIyQi58JnrgLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2284::/48
Signature Algorithm: sha256WithRSAEncryption
79:01:e6:5d:75:4e:06:91:f0:19:c4:b8:11:01:bc:86:ca:87:
94:6f:d8:ce:4a:44:d0:37:4b:04:2e:13:d9:d2:b8:b7:ed:90:
6a:c9:51:37:0e:0f:14:ab:f0:a5:99:46:b4:82:33:00:d0:55:
c9:3f:7a:2b:f6:a5:ac:a9:04:84:b6:49:3c:9f:79:44:02:b2:
b8:8d:cd:58:4a:27:2f:2f:f4:e2:8c:e1:a7:56:6e:2e:04:4b:
d2:35:38:92:e1:23:68:30:be:59:de:73:fa:6e:00:21:e4:34:
d8:fd:9f:8c:fb:d5:32:44:07:39:99:c0:27:01:37:d0:37:fb:
76:4b:eb:1e:1b:9b:99:61:a9:8a:d4:19:ce:41:a0:de:d0:0a:
87:e4:e5:52:53:fc:1c:e5:4f:76:8e:93:c0:be:5a:6a:c9:e9:
bc:9c:bd:49:f2:db:91:86:33:d8:be:5d:c7:48:2a:f0:a7:21:
d4:7e:9f:c4:74:f9:7a:c6:71:6a:ef:8b:40:ab:58:4e:b2:56:
f8:1f:2a:67:c6:79:15:53:6c:a0:5e:a0:d8:b5:6b:54:a0:16:
bf:92:7c:13:1d:76:c0:ba:50:f8:66:04:9c:6e:6d:e8:37:4c:
9a:4d:c9:b0:17:c9:f3:a9:66:bb:b1:1a:22:f7:70:ac:53:2c:
6b:4f:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org