Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/vg3wDMUWcC6JtPhugrQnUVCGRxM.roa
File: vg3wDMUWcC6JtPhugrQnUVCGRxM.roa (raw, json)
Hash identifier: oSX7ZB7vJbWYbTG3xul7P1byloAJtQ3LuBlKoTQB97w=
Subject key identifier: BE:0D:F0:0C:C5:16:70:2E:89:B4:F8:6E:82:B4:27:51:50:86:47:13
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 018570E7485149D147C114C676F70EC43F4C
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/vg3wDMUWcC6JtPhugrQnUVCGRxM.roa
Signing time: Mon 02 Jan 2023 05:14:43 +0000
ROA not before: Mon 02 Jan 2023 05:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212567
IP address blocks: 2001:678:ed0::/48 maxlen: 48
2001:678:e68::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:48:51:49:d1:47:c1:14:c6:76:f7:0e:c4:3f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Jan 2 05:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be0df00cc516702e89b4f86e82b4275150864713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:37:cd:10:d2:49:43:9f:e8:0b:b5:93:a1:
5a:eb:1b:71:24:40:86:56:dd:7a:83:ba:d3:5e:f2:
fa:34:46:34:b0:bd:d1:92:dd:24:9a:7d:24:4e:6a:
37:b4:25:ce:60:9d:a6:8e:4b:37:2b:be:0c:77:ad:
a0:35:90:02:76:75:7e:c5:b9:31:80:a2:cb:d2:3c:
94:b9:1a:8b:44:fe:c2:f3:30:1e:c1:b8:96:bc:04:
d9:6e:cb:ce:07:c0:ff:a9:ae:c2:fa:2f:27:0d:a4:
6a:d5:e2:47:ac:d7:e6:e5:ee:94:24:1d:24:ec:98:
6b:b6:d5:80:8f:70:fc:a4:24:f1:d5:92:42:ab:e7:
04:eb:17:0e:a1:11:ba:48:0d:a1:78:4d:5b:f0:ef:
a9:fb:83:7e:ff:f1:0e:46:5a:8c:0a:6c:da:93:2d:
93:98:4e:b8:e3:19:52:cc:cb:9b:46:0e:45:f4:12:
8f:e5:18:91:8e:31:bd:03:c5:98:13:84:98:f8:b1:
f6:bb:94:27:6e:2d:9c:54:35:8b:ba:a3:e1:b2:6d:
5a:01:2f:70:8c:4c:bd:91:1a:08:48:3d:66:b0:de:
3a:7f:cb:08:7a:18:bc:0e:ad:82:88:24:25:9e:cb:
23:aa:20:d9:95:1d:e7:f8:cb:31:c2:6b:a0:e9:c4:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0D:F0:0C:C5:16:70:2E:89:B4:F8:6E:82:B4:27:51:50:86:47:13
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/vg3wDMUWcC6JtPhugrQnUVCGRxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e68::/48
2001:678:ed0::/48
Signature Algorithm: sha256WithRSAEncryption
0e:38:f3:4e:97:5f:fb:38:20:f5:71:f5:75:64:00:31:d2:d8:
75:46:42:11:a6:ad:5e:99:cc:90:aa:24:33:60:f6:e3:97:b1:
16:0f:f5:49:64:86:95:3f:a2:1a:6b:8d:d4:4a:8c:09:0e:97:
46:f2:93:fc:2b:0a:64:6f:05:d6:41:b8:2c:e0:47:52:e4:6f:
84:45:92:b1:95:84:97:1a:f6:3a:c4:c8:9b:6e:50:1e:45:83:
01:b0:2c:8a:7e:cd:2f:db:4b:2f:fc:5f:fe:ea:cc:ec:a7:b6:
f9:55:ae:36:a8:52:92:e6:1f:8a:c7:70:a7:3d:c2:8e:8f:24:
cc:e3:f1:ba:51:9b:67:53:10:0d:b6:b1:67:38:fc:7c:db:ab:
27:fc:b4:dd:fa:39:c7:c9:05:bc:c9:ee:b3:5a:b4:61:84:4a:
e8:a5:5e:14:49:74:79:55:cb:e6:4a:1f:be:19:0c:0d:52:96:
7e:e8:14:7b:a4:62:7a:93:32:1e:f7:c8:a5:d1:17:00:20:3f:
3d:67:6b:47:b9:92:f8:fe:0f:f9:74:00:07:3e:ca:01:73:ec:
df:84:b2:69:1f:06:eb:02:44:68:92:75:28:24:8c:e7:c4:e9:
7c:2a:41:ed:15:06:03:5a:02:35:2e:de:a3:6c:8c:0e:c9:8b:
f0:b6:b5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:47 2024 by rpki-client on console-fra.rpki-client.org