Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/3YjsRMcZ71DOZUDyOe4ZxeaE3jQ.roa
File: 3YjsRMcZ71DOZUDyOe4ZxeaE3jQ.roa (raw, json)
Hash identifier: PJPsZ9d0mHBHlusLkmn3wc/E5MbxT8iGuboXn4p5zz4=
Subject key identifier: DD:88:EC:44:C7:19:EF:50:CE:65:40:F2:39:EE:19:C5:E6:84:DE:34
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0187E2CEE6B506A0B76AE7BC93779922F04E
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/3YjsRMcZ71DOZUDyOe4ZxeaE3jQ.roa
Signing time: Wed 03 May 2023 18:10:22 +0000
ROA not before: Wed 03 May 2023 18:10:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198889
IP address blocks: 2a05:1083::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:ce:e6:b5:06:a0:b7:6a:e7:bc:93:77:99:22:f0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: May 3 18:10:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd88ec44c719ef50ce6540f239ee19c5e684de34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:d5:a6:09:18:62:4f:74:3e:83:c7:5f:18:
4a:6a:b1:a9:2a:d7:2b:c2:e5:41:1d:d3:80:54:18:
cb:a3:87:da:81:10:91:d8:47:a8:e0:c0:d8:5a:c1:
4f:54:5d:35:86:dc:07:20:e0:02:e8:2a:c4:89:89:
bb:19:87:df:a1:2b:76:a5:77:d5:31:88:94:fd:b0:
46:05:67:60:99:98:3c:27:32:5d:ba:0f:61:a9:ba:
8a:bd:8e:9c:a8:83:71:20:34:12:b0:ad:54:db:2e:
30:0d:d4:99:8c:d3:a2:ad:4d:69:c6:0f:8d:12:e5:
fd:01:13:ba:80:15:51:44:ca:bd:8e:c0:76:c9:cb:
86:2a:44:2d:bb:93:ac:b8:48:d7:3c:21:a4:be:5e:
95:d8:49:b2:92:d9:47:f8:b2:d9:86:3a:f1:59:3b:
db:44:06:f1:f5:5a:0f:3b:45:d6:3b:82:e5:ba:c0:
85:c1:dc:33:6c:76:f4:c5:bc:a2:12:92:1e:21:e2:
d1:98:45:8a:ab:c9:a3:d3:49:81:83:9b:85:11:8b:
f4:37:74:6b:72:06:72:4c:cc:45:83:52:bc:09:c6:
c9:45:d5:43:8a:fc:10:83:c0:b9:12:ef:fe:b4:21:
58:34:fa:50:c3:c4:4b:a7:18:0f:9d:9d:e6:a5:20:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:88:EC:44:C7:19:EF:50:CE:65:40:F2:39:EE:19:C5:E6:84:DE:34
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/3YjsRMcZ71DOZUDyOe4ZxeaE3jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1083::/32
Signature Algorithm: sha256WithRSAEncryption
15:eb:38:08:a4:64:c6:04:27:eb:b2:69:5f:3d:4a:0d:3f:ae:
ab:6f:42:54:e2:55:f0:12:bf:37:b0:07:c0:70:d7:cd:e4:a7:
f7:3a:6a:f5:98:17:03:81:cb:ea:01:39:8b:e8:c3:8e:78:b8:
a2:87:fb:5f:7c:ad:b6:28:9c:b2:af:3a:9e:b6:76:af:28:2b:
ed:4a:cd:80:36:7d:3c:52:bd:2a:02:86:c5:48:5d:54:7c:53:
fe:3f:d9:1e:5d:f8:a1:a8:2f:f3:80:3e:eb:35:5e:c3:44:3d:
43:8d:83:42:31:be:e0:65:fd:7a:1f:b0:ca:75:1a:45:84:ba:
dc:33:37:9d:2c:06:15:76:1e:36:96:0b:fb:24:65:34:30:23:
8e:1a:51:eb:64:ff:d0:7f:b5:c0:26:2b:44:db:20:6b:f5:24:
3a:4f:68:b8:4f:9e:a5:79:a9:a3:0a:f9:07:d2:08:30:22:70:
f5:75:54:fa:18:60:c9:c5:0a:c9:6a:21:de:56:be:fc:ef:c0:
17:80:79:b6:90:ed:dc:db:dd:64:93:61:71:04:47:77:9b:84:
93:80:be:e2:9e:42:f1:4f:ca:2b:9b:8a:d7:6a:00:c5:d7:1d:
1b:ea:3e:15:c5:5e:c2:a5:cb:df:4e:d6:38:4c:b6:df:7b:13:
fa:09:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org