Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/dX42a9Euum7_i1aZh9IAFdzoQ1k.roa
File: dX42a9Euum7_i1aZh9IAFdzoQ1k.roa (raw, json)
Hash identifier: GzNuHh5wLLd2qnJ7drnP7jx4VQcOo8cX5Y1nyni1bxs=
Subject key identifier: 75:7E:36:6B:D1:2E:BA:6E:FF:8B:56:99:87:D2:00:15:DC:E8:43:59
Certificate issuer: /CN=fce2fd8df1a266ce13457fbe0f938b9abe3aa761
Certificate serial: 0189CA282D9356A38D949D58C3B0B9D8D450
Authority key identifier: FC:E2:FD:8D:F1:A2:66:CE:13:45:7F:BE:0F:93:8B:9A:BE:3A:A7:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OL9jfGiZs4TRX--D5OLmr46p2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/dX42a9Euum7_i1aZh9IAFdzoQ1k.roa
Signing time: Sun 06 Aug 2023 09:22:57 +0000
ROA not before: Sun 06 Aug 2023 09:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52114
IP address blocks: 2a03:e500:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:28:2d:93:56:a3:8d:94:9d:58:c3:b0:b9:d8:d4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce2fd8df1a266ce13457fbe0f938b9abe3aa761
Validity
Not Before: Aug 6 09:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=757e366bd12eba6eff8b569987d20015dce84359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:53:57:24:e2:6e:aa:9f:95:7f:66:8a:96:
44:7b:1a:19:5d:8d:c8:5c:a2:17:88:c0:53:ea:7e:
dc:44:4e:b6:1b:83:5f:94:51:b2:41:39:d3:2c:b2:
b0:61:df:94:11:d4:ed:55:9c:29:e2:bd:56:73:26:
99:9d:1b:16:96:03:b5:5f:08:fd:71:3f:35:2a:81:
d7:79:0b:67:40:d2:1c:e8:c4:1b:62:8a:69:da:1e:
72:4a:27:e5:9e:f4:80:da:47:6e:de:18:cd:58:44:
70:69:2e:32:23:e6:6b:b7:3b:9b:d5:a1:dd:e2:1c:
39:2d:e0:fa:86:6a:d5:7e:65:fd:9e:d0:cb:33:a3:
c7:e6:ee:16:cb:09:d6:2e:06:e9:a4:09:d1:b3:9a:
9f:ad:bf:74:2e:cc:47:03:20:d6:4f:02:12:05:9e:
dc:e9:55:b8:7f:1c:18:c0:8c:96:39:39:ac:08:87:
ed:f7:71:dd:4d:2b:a5:0b:99:cf:94:99:5f:9a:ce:
18:a4:d2:6c:0b:a6:15:49:d1:89:60:8f:5a:18:0b:
04:f8:0f:30:3f:83:20:ad:cf:9b:7a:0c:17:cc:ef:
e3:43:0c:44:c9:67:fb:07:31:20:d2:23:61:3b:d7:
cd:06:8a:6b:f3:3a:9a:b6:ba:cc:3e:94:6a:f2:20:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7E:36:6B:D1:2E:BA:6E:FF:8B:56:99:87:D2:00:15:DC:E8:43:59
X509v3 Authority Key Identifier:
keyid:FC:E2:FD:8D:F1:A2:66:CE:13:45:7F:BE:0F:93:8B:9A:BE:3A:A7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OL9jfGiZs4TRX--D5OLmr46p2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/dX42a9Euum7_i1aZh9IAFdzoQ1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/_OL9jfGiZs4TRX--D5OLmr46p2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e500:5::/48
Signature Algorithm: sha256WithRSAEncryption
8e:f7:4f:a4:3b:35:c5:93:3a:85:90:b9:fb:47:3c:3c:7e:b0:
1e:59:f7:81:a5:a0:4d:dd:16:3c:10:a5:8d:b6:f8:15:6a:70:
63:3e:ec:fe:54:88:b3:91:14:e5:c4:86:d3:0f:88:45:d1:f6:
b3:99:7e:28:21:16:9f:be:47:80:a0:49:2d:54:6f:8c:b3:23:
01:d3:b9:52:e5:42:be:5b:e7:c6:a3:70:ae:8b:52:7c:31:c2:
4d:83:1b:d3:d9:6e:44:f0:7a:20:70:55:0c:68:a2:e0:00:f5:
40:0b:02:56:5c:d9:7a:c6:b1:fa:08:17:45:61:a0:82:61:aa:
1d:b8:f6:f9:6b:83:1f:5b:77:de:53:10:f6:8e:e3:b4:dc:b9:
a4:4d:34:42:c7:a7:ba:1c:21:ed:e4:d0:82:87:72:89:d6:ba:
d1:6d:de:30:68:da:00:d6:3f:36:6a:54:dc:c0:25:23:25:24:
41:0c:ae:dd:22:84:1f:cf:69:de:cc:7a:aa:da:d1:94:89:f7:
fb:9b:8c:49:78:78:b3:e8:1c:2e:a6:2e:0a:78:0b:5f:22:3b:
97:98:d1:9c:e3:36:40:5d:d7:1e:8e:d5:59:c3:c3:39:9b:ea:
f8:90:9c:15:79:0c:f7:f6:53:09:63:97:c5:19:5d:75:40:f0:
8a:ff:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:03 2024 by rpki-client on console-fra.rpki-client.org