Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/rOzRfHeiirT8ZG-s8u3BwitcEic.roa
File: rOzRfHeiirT8ZG-s8u3BwitcEic.roa (raw, json)
Hash identifier: S0/b1uvSHruErAYb6oLMBB8F7tmxPnbReiz2OEMTP4Y=
Subject key identifier: AC:EC:D1:7C:77:A2:8A:B4:FC:64:6F:AC:F2:ED:C1:C2:2B:5C:12:27
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 0188E3FBE46F9B18F3598F536C03B16A7C60
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/rOzRfHeiirT8ZG-s8u3BwitcEic.roa
Signing time: Thu 22 Jun 2023 16:41:56 +0000
ROA not before: Thu 22 Jun 2023 16:41:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50867
IP address blocks: 2a0a:eec0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Jun 2023 08:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:fb:e4:6f:9b:18:f3:59:8f:53:6c:03:b1:6a:7c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jun 22 16:41:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acecd17c77a28ab4fc646facf2edc1c22b5c1227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:4c:09:b5:4b:2d:62:c3:d2:21:69:be:07:
4e:ed:48:12:83:2b:b3:99:fa:18:34:e3:22:c2:56:
67:90:c5:b9:4b:6a:c3:2e:21:e2:4c:6a:4d:cd:9b:
00:53:df:46:99:a6:02:03:70:b6:23:e0:d5:0a:bc:
fd:f1:a5:5d:bc:b6:64:f2:88:92:40:18:ac:e1:93:
f9:62:25:6d:a0:e7:05:51:ce:d8:fc:0d:5d:d5:df:
55:69:ef:79:5b:d5:41:33:64:4e:e4:7a:96:1e:e2:
74:0a:9f:a5:39:33:0d:35:27:54:b6:e4:8b:37:c7:
eb:4e:3f:3f:b4:c6:ff:3f:a3:93:ea:72:19:29:98:
29:65:7c:93:87:6f:7e:f4:f7:4d:4b:88:37:17:60:
d1:0e:8c:0b:8c:53:c9:c5:19:1d:a0:00:d8:6f:ab:
1d:21:11:56:a7:41:41:08:85:be:73:2a:0a:a7:6e:
77:38:a9:69:d1:2a:7f:a2:19:67:00:55:45:18:35:
fc:86:c0:77:f6:b0:6d:95:b9:7c:82:50:c6:21:d4:
75:2b:5e:99:0a:51:03:db:ca:85:a8:ac:d0:27:35:
a0:0f:12:2b:77:3b:07:d4:99:51:43:67:f3:52:d7:
d3:5d:03:f6:b0:71:5e:e8:9a:86:30:12:2b:07:f9:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EC:D1:7C:77:A2:8A:B4:FC:64:6F:AC:F2:ED:C1:C2:2B:5C:12:27
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/rOzRfHeiirT8ZG-s8u3BwitcEic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:eec0:1::/48
Signature Algorithm: sha256WithRSAEncryption
84:92:73:47:9c:24:ea:8f:44:c6:5e:54:4c:f1:a7:be:95:50:
62:d1:49:94:38:72:3e:8c:0e:37:3f:65:62:08:63:08:05:80:
16:be:28:36:63:d8:1b:4d:22:d7:b8:b5:3f:0a:c1:eb:f3:e5:
ac:1a:58:f4:13:1c:e2:e3:21:11:67:d0:e6:2a:5e:ab:3c:50:
62:2f:10:e2:c8:ba:b6:c2:e8:53:0d:e2:df:fa:0a:97:c2:52:
1a:9f:04:00:d6:1e:41:e3:43:fe:29:da:0f:5a:85:1e:11:72:
a8:76:01:5e:a2:fa:8a:a9:2d:a9:af:c0:fe:a8:9d:18:79:9a:
76:14:b0:d9:d7:cb:b3:eb:ca:da:c5:72:0a:b7:80:71:d3:9b:
39:cb:16:b1:eb:0f:9c:52:ee:3f:63:d2:9d:30:77:f0:09:d2:
51:0e:95:44:a3:71:53:29:28:40:6e:58:c7:b6:61:cc:a8:14:
a1:f5:da:a3:03:ef:84:85:23:e5:82:e8:90:e8:95:7c:2f:24:
96:d8:52:ae:16:b6:b3:f2:74:1d:a7:cb:a1:5c:03:37:d9:7b:
81:ed:68:93:60:ef:27:62:da:59:ce:ee:d5:ba:e5:cb:22:32:
c4:c8:9a:f3:ac:c0:40:42:9a:d6:96:b9:d6:49:bc:f2:cf:1d:
18:6f:3a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:20 2024 by rpki-client on console-fra.rpki-client.org