Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/I3RhUQ5_QKFMPXuepO1kwnJWZEs.roa
File: I3RhUQ5_QKFMPXuepO1kwnJWZEs.roa (raw, json)
Hash identifier: HKvbCyd+DrZWi6TFdcI+67ebqWrK0WpJKYPvUoYuk0w=
Subject key identifier: 23:74:61:51:0E:7F:40:A1:4C:3D:7B:9E:A4:ED:64:C2:72:56:64:4B
Certificate issuer: /CN=e66cf1f3904620aa773742915add0da8e63501b8
Certificate serial: 018D4773FAC91D2F3324E1F2EA9A4AC2109C
Authority key identifier: E6:6C:F1:F3:90:46:20:AA:77:37:42:91:5A:DD:0D:A8:E6:35:01:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mzx85BGIKp3N0KRWt0NqOY1Abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/I3RhUQ5_QKFMPXuepO1kwnJWZEs.roa
Signing time: Fri 26 Jan 2024 20:26:39 +0000
ROA not before: Fri 26 Jan 2024 20:26:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215751
IP address blocks: 2a0b:4e04::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 27 Jan 2024 13:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:47:73:fa:c9:1d:2f:33:24:e1:f2:ea:9a:4a:c2:10:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66cf1f3904620aa773742915add0da8e63501b8
Validity
Not Before: Jan 26 20:26:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=237461510e7f40a14c3d7b9ea4ed64c27256644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:da:2d:cb:03:64:fd:43:a3:84:b0:05:56:
86:4b:9e:f9:b5:1c:85:b0:9f:f2:34:79:5f:90:f9:
0c:49:84:f8:d3:4d:a5:ce:05:85:1b:2d:a4:b0:a3:
2f:5f:83:cf:48:73:20:98:d5:65:80:fb:11:7d:0b:
f3:89:de:9e:26:ac:a5:e0:00:7f:db:b6:0e:ef:7e:
36:23:c8:a4:6d:44:5a:e2:b3:81:11:d1:57:f5:8b:
86:e9:46:71:49:7f:dc:65:71:a9:8b:82:89:ed:42:
be:ae:82:fc:05:df:0d:50:a5:fb:b4:96:aa:9c:11:
f6:a1:fe:60:c9:f2:e5:e3:04:c4:8d:c7:94:82:3d:
d8:f8:4d:51:81:0e:dc:ea:9e:3f:2e:70:f2:77:bd:
9a:79:a8:3a:d2:db:2c:13:21:c9:b3:27:a0:ac:be:
1b:f6:3c:78:c1:8e:d5:5f:f3:7a:9a:43:a0:c3:62:
91:db:92:9d:e4:9a:cb:b1:83:eb:f8:49:5c:44:b1:
22:c9:75:28:d9:43:78:8d:c6:6a:97:6f:33:a0:29:
f5:d1:26:8b:9e:92:11:d9:1a:81:62:de:84:df:65:
bc:a4:72:5b:9e:88:fd:5a:d9:eb:91:8d:dd:fc:a0:
93:4b:cb:49:4a:79:70:10:d7:cc:1e:7f:3a:05:7e:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:74:61:51:0E:7F:40:A1:4C:3D:7B:9E:A4:ED:64:C2:72:56:64:4B
X509v3 Authority Key Identifier:
keyid:E6:6C:F1:F3:90:46:20:AA:77:37:42:91:5A:DD:0D:A8:E6:35:01:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mzx85BGIKp3N0KRWt0NqOY1Abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/I3RhUQ5_QKFMPXuepO1kwnJWZEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/5mzx85BGIKp3N0KRWt0NqOY1Abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04::/32
Signature Algorithm: sha256WithRSAEncryption
c7:c8:6a:33:9b:9d:e9:9b:ef:0e:31:ff:75:f4:cb:ee:35:13:
c5:a1:f3:37:10:15:f0:a6:05:89:54:cf:69:95:ff:5a:cc:c7:
e3:23:31:cf:14:4e:a8:ec:ad:af:ff:3e:92:56:ca:4a:ce:01:
cc:af:35:45:00:90:d2:04:0d:7e:7a:c6:43:1d:f3:14:08:9a:
93:eb:31:24:8a:a1:42:18:f6:cd:fa:cf:f3:b2:6d:05:4d:f7:
2a:c6:63:7a:fb:24:7c:70:e0:b4:f1:ee:0c:0f:2c:fe:82:58:
a7:d7:62:d9:ee:d3:7d:89:a2:05:79:8f:c3:ed:df:7e:ab:da:
2b:67:88:a0:ea:83:17:ba:88:2e:64:45:a5:90:b2:ad:43:4e:
b4:37:4a:8b:e5:61:4d:05:32:e8:68:79:f4:4a:fd:ab:d3:29:
d6:87:86:25:2c:c3:99:72:0e:47:fc:89:f7:a5:84:19:f4:06:
05:df:4a:52:86:ae:88:d2:f3:d2:ca:86:27:a2:11:37:b1:fc:
b7:58:be:67:51:b1:ef:61:ca:b3:cd:98:fc:0b:1c:82:93:c4:
75:60:46:d1:f9:65:c0:1d:d5:54:d2:5d:ec:b8:a4:76:89:07:
b2:f8:ea:07:eb:66:3d:9c:e9:66:c9:60:a6:cc:fc:41:1c:10:
fc:89:b1:9d
-----BEGIN CERTIFICATE-----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Generated at Sat Jan 27 13:53:23 2024 by rpki-client on console-ams.rpki-client.org