Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_YDr4TDEz4jEfiT1x67xbT5UVzI.roa
File: _YDr4TDEz4jEfiT1x67xbT5UVzI.roa (raw, json)
Hash identifier: vvC1e9XpUR8WRtpPKEgPcxEJFIeXTqr5zXlQBJhwaHY=
Subject key identifier: FD:80:EB:E1:30:C4:CF:88:C4:7E:24:F5:C7:AE:F1:6D:3E:54:57:32
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 0189690C6492FF4B550459056782E0F1CF74
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_YDr4TDEz4jEfiT1x67xbT5UVzI.roa
Signing time: Tue 18 Jul 2023 12:49:27 +0000
ROA not before: Tue 18 Jul 2023 12:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210712
IP address blocks: 2a02:17a0::/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 16 Aug 2023 16:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:69:0c:64:92:ff:4b:55:04:59:05:67:82:e0:f1:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jul 18 12:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd80ebe130c4cf88c47e24f5c7aef16d3e545732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:b1:b9:0a:ef:3d:4d:e4:52:0b:c0:bd:70:
ca:9d:56:e4:a3:3e:d4:8b:25:e2:a9:27:a6:f4:d4:
03:71:f2:ee:6c:cb:e1:a6:82:b3:b4:fb:b6:f7:18:
64:97:f5:b9:13:79:5e:4c:4d:00:80:6a:05:01:d1:
43:ae:5f:3e:9c:b9:6f:c2:5c:21:4d:f1:dc:9f:2d:
30:9c:f8:58:f5:3e:77:b6:64:8e:4f:7a:22:6b:3f:
cf:92:05:13:2b:b3:6d:c9:75:43:0f:35:f5:ab:ab:
40:83:16:b5:52:fc:dc:75:2f:75:18:d2:bd:dd:3c:
68:f1:b5:79:d3:3f:c0:63:6c:7f:08:3a:64:a5:bd:
50:ef:16:a7:c2:50:0b:a0:12:4d:aa:7c:36:f7:d3:
c5:50:eb:9d:40:c8:9a:c8:18:b0:0c:8f:db:5b:9d:
7e:85:9f:72:30:38:b6:1d:71:b6:35:af:04:6f:5c:
70:08:e1:4e:0c:96:83:bc:29:29:2c:85:31:da:e0:
87:83:a3:66:2a:c4:4f:d4:77:99:f9:38:66:75:52:
c3:0b:47:0e:9d:2c:e9:64:97:d4:78:de:91:13:87:
e6:38:db:85:e0:c6:aa:07:d0:c9:e7:6e:28:8a:0a:
d9:b1:f9:ff:04:78:f9:50:7f:4e:7c:1d:b1:f8:34:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:EB:E1:30:C4:CF:88:C4:7E:24:F5:C7:AE:F1:6D:3E:54:57:32
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_YDr4TDEz4jEfiT1x67xbT5UVzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:17a0::/31
Signature Algorithm: sha256WithRSAEncryption
71:e4:fc:83:e5:8a:4d:36:46:4b:85:51:77:07:54:99:f8:26:
56:27:fe:e4:db:3e:f4:12:2a:f5:89:b5:a1:64:57:c8:f1:18:
82:b9:5e:f3:a4:f7:66:84:ac:5a:26:b7:01:4a:f5:f2:3a:08:
58:d3:09:0c:26:5a:92:0f:82:5c:53:bc:76:1b:80:18:99:47:
b3:42:46:67:69:b2:ad:ef:23:e8:4e:e6:b2:64:b8:26:d0:1c:
ed:d0:ce:6e:2c:db:0a:cd:ad:07:c8:06:51:3d:e2:dc:42:72:
e2:7e:d8:33:b7:21:5c:9a:c7:d4:f3:ef:4b:82:e0:87:8f:26:
ac:21:21:73:c7:94:02:a5:2a:b6:c5:77:32:c9:23:d4:96:6d:
66:ba:03:73:f5:c0:46:57:1b:72:e7:f4:45:0c:e2:c0:f8:99:
f8:3e:e8:60:2c:55:fd:8d:cf:25:73:80:e6:bb:60:d9:df:9f:
e8:db:a1:3d:63:4b:9d:41:db:9e:f5:88:68:3f:a8:86:85:98:
ad:bf:fa:1b:cb:b6:76:7f:0b:9f:0e:00:47:fe:7f:0a:63:cd:
90:6f:49:c5:27:70:27:91:77:83:be:5f:26:b8:bc:a0:08:dc:
e8:ce:80:cf:fa:ea:b3:d9:93:b7:e4:67:a7:5c:1c:49:a5:5a:
af:fd:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:32 2024 by rpki-client on console-fra.rpki-client.org