Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Op3uFFkDugEGGQ3_KPXWMZF98K4.roa
File: Op3uFFkDugEGGQ3_KPXWMZF98K4.roa (raw, json)
Hash identifier: gHHf/uKmLno4O/4adZudBw3EIVbsajpedOI+CRRB6rY=
Subject key identifier: 3A:9D:EE:14:59:03:BA:01:06:19:0D:FF:28:F5:D6:31:91:7D:F0:AE
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1CB580462BC0394DA1E9277A1D753
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Op3uFFkDugEGGQ3_KPXWMZF98K4.roa
Signing time: Sun 01 Jan 2023 14:34:55 +0000
ROA not before: Sun 01 Jan 2023 14:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 2a06:c3c0:5::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:cb:58:04:62:bc:03:94:da:1e:92:77:a1:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a9dee145903ba0106190dff28f5d631917df0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:da:df:92:88:3b:a8:21:5b:8c:75:b5:ca:
81:fc:96:58:ee:9b:fc:68:4e:a5:3e:33:fd:f4:f6:
c2:51:61:98:ce:9e:43:a0:51:1e:29:b9:28:16:14:
15:e7:0c:04:19:e5:9c:24:02:b1:b7:90:7b:7d:4e:
11:9b:bf:1c:43:0a:4d:52:de:b8:a8:68:a6:cd:05:
ca:c7:dc:26:f9:74:3a:fa:b7:d2:30:58:16:ab:02:
87:4b:20:7a:49:20:36:4a:4d:26:0b:6c:cc:6f:af:
c0:f0:3a:2a:53:99:80:2e:2b:57:5f:16:14:13:c6:
13:5e:e6:08:20:bf:1a:1d:57:75:a1:4f:b7:d4:be:
22:68:68:fd:47:33:36:b2:2b:ac:6e:1d:51:b0:a9:
2d:77:88:16:3b:1d:a0:31:2d:cf:cd:2a:02:f6:00:
5c:7f:db:18:59:a2:10:78:e6:81:2d:b7:cf:d3:ea:
f2:ac:75:ba:ce:32:cb:00:8a:9a:ce:37:1e:82:7e:
07:79:ac:45:10:e3:04:f8:95:fd:bc:db:41:3f:6a:
e0:d5:2f:b1:66:4c:a1:62:73:59:f3:c4:f6:89:6a:
e7:75:71:14:aa:12:5b:c4:77:28:6f:cc:75:7a:61:
2c:4b:5f:6e:45:d0:1a:c0:79:17:7a:0f:b2:b3:38:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:EE:14:59:03:BA:01:06:19:0D:FF:28:F5:D6:31:91:7D:F0:AE
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Op3uFFkDugEGGQ3_KPXWMZF98K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0:5::/48
Signature Algorithm: sha256WithRSAEncryption
aa:88:54:60:19:86:e3:82:51:35:a4:c3:92:a6:f5:41:29:76:
aa:a2:04:5c:ef:77:63:df:06:0a:35:25:74:aa:f5:d0:00:f6:
c7:e4:b9:2e:7c:c3:82:67:b0:34:60:97:f4:8e:e0:ab:f3:f5:
d1:ad:34:fd:8f:e4:15:8f:36:fa:55:ed:9e:2c:c5:6b:7e:16:
57:fa:9b:a1:0d:9e:b8:b2:db:78:a4:6b:a8:3c:5c:aa:fc:05:
a2:05:38:44:9a:6f:eb:7f:63:e4:6a:f5:47:62:76:4a:f4:30:
21:b8:ac:6a:00:56:b1:8d:f2:73:f0:f4:11:c4:97:af:f6:40:
2e:73:3a:70:83:2d:4a:db:16:d5:15:95:c7:b9:60:5e:4a:99:
2e:ac:64:16:f8:a6:ec:1c:bc:37:76:6a:5c:4c:5e:25:41:a0:
78:24:d5:11:53:3a:b5:3f:11:6b:98:0d:bd:e5:2e:d3:f0:16:
92:7b:c5:2e:c9:06:6a:19:c8:36:87:04:29:7c:2b:0a:46:de:
f6:f7:66:96:63:25:78:57:b5:23:37:c1:de:3e:53:4a:b2:70:
1c:f1:87:09:ce:06:46:c4:cf:d3:58:54:cc:46:f0:7c:72:7b:
b4:38:d6:1e:07:0b:f3:73:eb:39:f9:26:97:0a:66:a6:56:72:
f0:f6:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:04 2024 by rpki-client on console-fra.rpki-client.org