Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4nnOWYD3GFAHTQvbIz3LADZqQ7w.roa
File: 4nnOWYD3GFAHTQvbIz3LADZqQ7w.roa (raw, json)
Hash identifier: stDVShbO12HJsLoJqf3w76ZccHiYkuuqEypqCASB8Gw=
Subject key identifier: E2:79:CE:59:80:F7:18:50:07:4D:0B:DB:23:3D:CB:00:36:6A:43:BC
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0186DA52042ABF6FFB38D6B99356C0D2E540
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4nnOWYD3GFAHTQvbIz3LADZqQ7w.roa
Signing time: Mon 13 Mar 2023 09:34:13 +0000
ROA not before: Mon 13 Mar 2023 09:34:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42093
IP address blocks: 2a06:c3c0:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:52:04:2a:bf:6f:fb:38:d6:b9:93:56:c0:d2:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Mar 13 09:34:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e279ce5980f71850074d0bdb233dcb00366a43bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:34:2f:72:16:94:28:7f:bd:d9:bb:a7:a4:
06:38:fc:da:b2:47:f5:93:34:0f:67:20:d7:41:80:
c0:69:b0:2f:42:41:0f:c3:de:f6:ed:19:db:d0:0a:
eb:f3:43:c1:ee:2b:20:0a:32:66:c3:de:b3:7d:e4:
70:ff:0b:cc:4b:99:d5:38:a1:3c:b4:a5:66:9b:71:
27:a7:4f:c3:ab:50:35:40:1f:4a:e4:f5:e3:91:85:
06:39:51:e1:1b:be:46:69:bb:0d:46:b4:9d:fc:af:
f9:ee:58:75:39:1e:b0:cf:6e:17:8e:b1:33:dd:80:
1b:ac:c1:67:f2:98:f6:fc:ba:12:d2:18:77:ad:02:
7e:81:e9:f3:43:87:4b:46:3a:f7:5a:d3:66:7a:37:
de:a6:1f:a6:02:6e:a9:70:79:73:c5:07:4b:1b:b5:
b9:a2:c9:15:5b:84:23:6f:2a:71:87:0b:1d:96:50:
ed:3f:b6:6b:b4:6d:4c:ac:bd:17:5c:91:3a:6c:93:
49:ab:53:5d:80:d6:36:61:82:49:6f:84:b4:f2:1e:
6a:e2:25:a1:6f:84:6e:f0:3f:e2:f1:3f:ce:d9:a3:
4a:de:2a:31:fa:27:48:cd:38:3a:9e:b3:68:d2:d5:
2e:b7:91:56:bf:f4:0d:3e:57:dd:54:38:60:cf:a6:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:79:CE:59:80:F7:18:50:07:4D:0B:DB:23:3D:CB:00:36:6A:43:BC
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4nnOWYD3GFAHTQvbIz3LADZqQ7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
a3:c3:2b:b6:b1:f3:d3:86:dc:a3:ce:ef:30:d8:1d:68:57:99:
92:21:fe:c8:45:09:1f:94:75:f4:8c:7d:d0:bd:d0:78:b1:ba:
df:77:c7:19:70:7e:9b:dc:04:3a:7f:f9:69:12:f4:d5:fe:80:
f0:ed:7b:3d:4d:5c:59:8f:d2:98:af:8d:75:9c:b6:af:ed:36:
cb:3c:6b:2c:65:89:52:bd:f1:04:d5:91:85:e9:71:69:7e:af:
74:64:7e:57:9f:91:1f:17:cd:1c:bd:36:79:85:2d:b8:33:6b:
71:9f:9a:84:8c:09:c8:39:d2:0b:97:92:79:8a:37:4b:78:79:
51:be:63:be:9f:28:10:cb:55:f4:eb:fa:c5:a1:33:e3:1c:13:
9a:b1:3f:c4:84:5c:4d:4e:86:f0:be:d9:a9:2f:5b:1f:09:e2:
b8:c3:6a:03:0c:c3:c0:27:4e:73:f0:3f:48:8c:3a:b5:b8:72:
9b:67:6d:90:4d:85:9a:7f:ba:4a:b7:ae:12:8d:24:a1:74:73:
e2:40:a9:bf:6f:49:a8:b9:43:ef:00:a6:bf:82:ea:5a:0f:f2:
97:f4:53:5a:6b:49:5a:ef:cd:3c:1f:b1:f1:2f:df:17:93:60:
40:51:72:62:b3:a5:90:75:9d:dd:f0:ff:1e:a2:e9:cf:75:43:
5c:7e:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:04 2024 by rpki-client on console-fra.rpki-client.org