Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/vpSOcjV1mYOwGA8BNGiw8fDgLis.roa
File: vpSOcjV1mYOwGA8BNGiw8fDgLis.roa (raw, json)
Hash identifier: Fp04JiEH2VzsX2fBiTaOEFiUy7Kr590kLVzKiYEMXIU=
Subject key identifier: BE:94:8E:72:35:75:99:83:B0:18:0F:01:34:68:B0:F1:F0:E0:2E:2B
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 01856C813D4B75214FAD6EB25E2C6CE57EFF
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/vpSOcjV1mYOwGA8BNGiw8fDgLis.roa
Signing time: Sun 01 Jan 2023 08:44:47 +0000
ROA not before: Sun 01 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:27c0:10::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 10 Mar 2023 10:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3d:4b:75:21:4f:ad:6e:b2:5e:2c:6c:e5:7e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 1 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be948e7235759983b0180f013468b0f1f0e02e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:a3:41:5a:f2:9e:51:f8:46:8f:09:74:aa:
4c:97:37:39:a5:47:32:05:eb:47:00:5b:2a:cb:13:
c3:a4:9f:cc:68:38:75:24:1b:73:81:5d:6d:77:25:
4c:41:4d:e1:6c:90:cd:b5:9f:f2:3c:1f:4d:44:03:
d6:a9:7d:eb:c3:9e:70:05:93:4c:71:a3:c1:b5:12:
e9:8c:79:ed:07:2e:32:f2:1d:7e:11:9d:93:c1:f3:
52:5c:31:27:27:c1:63:b0:a7:ad:89:69:8b:ea:26:
1c:d0:71:8a:22:d0:b0:bf:87:30:ac:6e:4b:02:cd:
5d:7b:e0:c6:0d:99:ea:6e:77:5f:b5:13:51:c4:99:
9d:80:f2:90:b7:9c:22:b4:0f:80:c0:0b:e4:28:18:
b5:27:78:5b:5f:b5:42:ce:7e:fe:e4:79:45:17:8b:
af:75:42:d3:49:f5:de:93:77:56:e3:8f:99:a4:b8:
37:c7:cd:74:f8:a6:72:f3:a8:db:f6:bf:5b:b2:28:
c2:51:11:94:96:01:f4:e5:80:a2:14:bb:1d:7f:25:
0b:12:d9:23:4c:90:18:6d:e0:29:4f:e7:57:83:c2:
01:a1:af:10:80:f1:71:cc:50:68:2d:64:48:68:49:
34:43:18:15:be:10:d8:79:01:03:df:fd:f7:8b:ac:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:94:8E:72:35:75:99:83:B0:18:0F:01:34:68:B0:F1:F0:E0:2E:2B
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/vpSOcjV1mYOwGA8BNGiw8fDgLis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:27c0:10::/44
Signature Algorithm: sha256WithRSAEncryption
b0:ae:f6:10:f5:90:0b:71:b4:ce:3a:ad:4c:c2:d7:98:e9:b2:
de:e7:29:6e:02:ec:6d:e0:18:56:7c:9a:ba:1b:5f:e1:d8:ee:
d8:20:e8:2c:2a:c7:6e:38:49:d1:32:d1:5f:4e:3e:ce:0d:f0:
52:77:34:dc:eb:11:20:dc:e0:90:ae:d5:fc:35:88:47:02:2e:
6d:0e:a2:e0:d2:8d:b0:02:05:d4:f2:05:18:7c:35:63:99:49:
51:24:6d:c8:d3:8f:4f:85:cd:7f:ea:9d:92:ad:76:08:71:ea:
35:1c:99:4b:2a:21:a5:9a:ec:07:25:74:13:57:d8:9b:07:95:
37:1e:6f:a1:2d:b0:b4:62:a9:dd:be:a3:5c:11:cc:41:4e:be:
c3:84:6b:56:29:f8:25:f5:f4:08:02:3e:71:8b:a3:f8:f3:bf:
93:5d:ff:f4:a4:b4:33:43:35:c2:a2:97:27:52:fa:01:c7:60:
0d:a1:f2:b8:74:59:ce:c9:25:24:c6:b9:a3:94:7a:e2:7d:09:
b9:8f:fc:25:f7:06:be:ca:d7:0c:14:17:72:cc:27:11:be:b6:
70:83:38:d9:45:5f:d7:12:df:aa:6d:9d:c4:97:cb:c5:71:86:
ae:22:f1:36:b0:9f:0f:c7:cd:64:15:6c:5c:41:09:3c:c7:99:
b9:11:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:02 2024 by rpki-client on console-fra.rpki-client.org