Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PhNVUiHVM-Yvl17nWTNthc-gGdw.roa
File: PhNVUiHVM-Yvl17nWTNthc-gGdw.roa (raw, json)
Hash identifier: T3bFke0RjtdQyIFViUZXEmeLpTVEAdH1IP2/N25qMRo=
Subject key identifier: 3E:13:55:52:21:D5:33:E6:2F:97:5E:E7:59:33:6D:85:CF:A0:19:DC
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246CA357B0EE0B5CED8AB8B37D47C85
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PhNVUiHVM-Yvl17nWTNthc-gGdw.roa
Signing time: Mon 02 Jan 2023 11:38:39 +0000
ROA not before: Mon 02 Jan 2023 11:38:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 148971
IP address blocks: 2a0c:9a40:82f0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ca:35:7b:0e:e0:b5:ce:d8:ab:8b:37:d4:7c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e13555221d533e62f975ee759336d85cfa019dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:62:16:76:42:76:73:e3:97:11:5f:42:be:
21:db:37:b4:80:3a:0a:0d:2b:c6:64:d2:6f:83:68:
6d:b1:15:29:3d:cd:a2:53:c5:0b:fa:4b:11:17:36:
fb:35:ba:48:2b:69:0c:f6:d7:6e:43:2a:ea:e6:dc:
7e:9c:48:da:ca:b4:b8:27:b9:68:dc:c8:c7:1b:a1:
82:14:4c:9f:b1:b1:33:f1:ef:1b:51:3c:7b:62:2b:
57:38:7f:47:db:ce:23:12:e5:35:fb:5e:00:5f:34:
30:82:fd:2f:cd:a2:1d:d6:dc:ca:e2:e6:3a:cc:84:
fa:0b:22:4a:cf:27:21:b2:82:7d:8d:2b:80:18:92:
7d:b2:fd:da:cc:51:66:32:1b:4a:dd:fa:f9:6e:ce:
76:87:62:ac:27:6d:b3:a1:61:c7:b5:ce:bc:7a:58:
1d:b6:07:a2:a4:9d:68:73:2f:0b:06:c4:97:48:14:
ef:67:6b:40:9e:c7:fe:15:cc:a6:7a:56:70:65:08:
96:bc:8f:e3:1a:cc:3c:1d:eb:1c:4e:dd:f0:73:6b:
e2:7c:1b:00:02:21:07:86:6c:eb:35:3b:c4:26:6c:
fd:81:74:bc:90:f4:92:cf:77:43:44:a3:58:42:66:
4d:e2:33:75:88:38:92:ab:4a:f7:23:2e:09:ba:d6:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:13:55:52:21:D5:33:E6:2F:97:5E:E7:59:33:6D:85:CF:A0:19:DC
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PhNVUiHVM-Yvl17nWTNthc-gGdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:82f0::/44
Signature Algorithm: sha256WithRSAEncryption
79:c4:91:60:51:d8:df:04:00:3e:8f:43:6f:ce:00:64:ee:1e:
e3:81:14:0a:8c:64:93:bd:58:7d:09:63:51:68:c4:43:ed:20:
cd:ed:f2:fa:cb:a6:14:61:3d:0a:3d:d6:7b:8c:49:6c:8e:bd:
4d:75:2b:e5:09:a8:c7:bf:cf:01:0d:c9:f6:da:f8:79:c7:f9:
e5:79:13:8c:b9:0e:17:83:e9:2c:62:fd:51:55:55:22:f4:1b:
5d:dc:03:83:84:7e:4a:a6:ca:08:8e:4c:03:7a:1d:ee:a9:ee:
a1:cd:56:26:3b:c6:cd:0e:90:cd:c5:03:66:1c:5e:9b:19:09:
19:91:ea:14:db:8b:65:76:52:cd:eb:16:00:ed:c3:9b:5a:ff:
a3:2f:bc:b1:d7:7e:7f:07:23:38:9e:10:ab:e1:58:4f:72:89:
91:34:31:e7:1b:1c:e0:80:9a:d1:17:93:89:3f:ef:47:b3:ec:
69:74:3b:3c:df:67:4e:0b:53:a5:34:34:62:76:5e:85:25:40:
14:6d:30:28:00:2a:5e:56:4b:e8:48:22:44:7b:60:f5:cf:fd:
61:45:d0:94:11:ae:ae:5f:39:95:1d:80:9e:b1:8f:ee:b4:cb:
02:ff:f2:82:05:61:53:ca:39:26:bd:1c:51:2a:a6:82:be:1f:
57:61:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:50 2024 by rpki-client on console-fra.rpki-client.org