Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/t32cWjKIZAK9tEXD7jC0iYFKKP0.roa
File: t32cWjKIZAK9tEXD7jC0iYFKKP0.roa (raw, json)
Hash identifier: CVypo1BG3re9GjcfT9tD9CvXs9C3XufPbN3GDFFIfHw=
Subject key identifier: B7:7D:9C:5A:32:88:64:02:BD:B4:45:C3:EE:30:B4:89:81:4A:28:FD
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0ADECE3457BB6B4CD4E9E5B8E6F29B
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/t32cWjKIZAK9tEXD7jC0iYFKKP0.roa
Signing time: Sun 01 Jan 2023 11:15:06 +0000
ROA not before: Sun 01 Jan 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208157
IP address blocks: 2a00:7180:8000::/46 maxlen: 46
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:de:ce:34:57:bb:6b:4c:d4:e9:e5:b8:e6:f2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b77d9c5a32886402bdb445c3ee30b489814a28fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:a1:40:6f:86:76:58:4d:90:c0:73:60:dd:
bd:c5:4a:24:a7:1c:f1:e8:9d:7e:fd:a6:89:41:66:
10:78:5b:1d:19:6d:5e:90:54:82:a5:00:fd:33:dc:
d9:62:a8:40:f3:63:be:06:75:60:0e:34:f4:b1:51:
e8:ea:7c:86:45:16:8a:fb:52:c7:cf:07:20:4c:f1:
83:e5:d6:c5:bf:8c:31:aa:f4:2a:e2:e7:04:cb:f3:
85:f1:4e:1a:24:47:e6:12:71:35:0c:01:3b:d5:76:
52:69:4a:8d:81:29:02:f4:86:38:d8:e1:9d:2d:df:
2b:1a:b4:59:cc:e6:90:9f:66:f1:9f:ea:e1:b3:81:
3b:d2:99:fb:04:c0:6d:55:56:5e:a9:ff:c8:d8:f1:
7a:36:ce:83:a3:c0:29:3d:e3:94:ed:27:f6:8f:02:
a2:2a:de:86:38:95:d8:e5:52:63:6d:30:c6:32:7d:
91:5d:f1:86:0d:d5:70:cc:51:22:66:8f:5e:5d:e5:
86:78:75:95:19:24:f0:52:ea:f3:b8:1a:56:0d:b7:
62:31:55:9e:8b:5b:20:c3:c8:37:48:4b:5d:b8:6e:
cf:71:69:4a:9c:7d:f9:8b:31:13:53:75:8a:95:c8:
14:70:e8:f6:54:a8:42:ef:f4:5c:80:19:64:24:fb:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:9C:5A:32:88:64:02:BD:B4:45:C3:EE:30:B4:89:81:4A:28:FD
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/t32cWjKIZAK9tEXD7jC0iYFKKP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8000::/46
Signature Algorithm: sha256WithRSAEncryption
15:c9:13:6b:35:9a:e2:83:d0:57:3e:a7:56:11:01:ef:82:c4:
06:15:b9:b1:58:ba:86:d8:e4:1f:49:ff:52:b7:ac:da:d6:25:
44:12:61:07:1b:c5:2b:87:b7:36:28:63:01:36:38:91:41:52:
0e:39:af:7e:f5:6f:d1:69:4c:cd:a7:ab:0a:9c:b6:8e:41:16:
1b:11:81:86:cd:8a:1e:7b:14:f1:c9:fb:d2:dc:2b:e9:f3:0f:
29:d9:8a:e8:b2:cb:7b:35:76:b1:87:4e:4c:f2:88:39:00:b2:
7d:46:59:0e:6f:93:d7:88:ae:ec:ef:64:e1:76:0c:0c:10:b5:
a8:fe:d2:6f:ff:5d:5a:48:2b:31:16:96:94:22:c3:ae:9a:72:
eb:d3:9e:05:20:e3:a8:bc:f0:72:7d:e3:65:c8:98:c5:bd:81:
66:12:80:6d:8f:ca:91:71:19:df:40:16:d9:53:1a:de:48:a9:
da:44:40:4d:ab:f4:f0:6b:cd:f7:58:b0:af:92:cc:13:e7:10:
52:9d:bf:6d:c8:f7:68:50:90:ab:d9:44:3a:c8:4c:9d:1f:2d:
da:80:94:11:94:9f:d8:fe:f5:b4:c8:0b:ea:0c:dd:d7:63:7a:
b8:8c:f2:f1:e9:cf:2d:94:12:c2:51:f0:02:ca:65:d8:39:27:
96:49:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:51 2024 by rpki-client on console-ams.rpki-client.org