Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UmL3KwHwgzTuvBezJLVVIzlypPs.roa
File: UmL3KwHwgzTuvBezJLVVIzlypPs.roa (raw, json)
Hash identifier: hyXytY65sJ/RoUNCUM24umKZ88frzQLuuohRk/v+7w0=
Subject key identifier: 52:62:F7:2B:01:F0:83:34:EE:BC:17:B3:24:B5:55:23:39:72:A4:FB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018A3B9F71A557E162B5440E7C576E1DFB5A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UmL3KwHwgzTuvBezJLVVIzlypPs.roa
Signing time: Mon 28 Aug 2023 10:10:19 +0000
ROA not before: Mon 28 Aug 2023 10:10:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216393
IP address blocks: 2a0c:9a40:83c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:9f:71:a5:57:e1:62:b5:44:0e:7c:57:6e:1d:fb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 28 10:10:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5262f72b01f08334eebc17b324b555233972a4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:eb:12:03:dd:a7:8b:dd:4a:38:2f:3d:82:
25:3a:72:38:1d:60:22:96:85:07:50:22:ae:f3:f5:
b0:33:b6:3f:15:f8:78:a1:3c:e5:d6:05:48:d4:ec:
a0:c7:aa:59:80:89:b6:90:04:5a:a7:28:b6:35:da:
e2:6c:9c:58:31:e6:7f:96:bd:37:36:f0:46:c4:71:
b9:27:f9:db:75:fa:cd:0f:20:d0:bf:91:09:35:b6:
1c:3b:c8:a7:d9:82:6c:dc:ab:9c:b4:8c:0c:58:fa:
c2:c1:1f:82:de:82:b6:79:ce:f4:21:c5:20:29:d2:
a2:84:ea:9d:17:03:fe:4a:93:44:f4:40:f9:be:c9:
c8:7a:f5:a1:41:53:cf:6b:70:4a:00:da:f8:cd:fb:
66:83:e2:37:a5:d3:e2:20:6d:b7:5e:bf:9d:6c:74:
c4:43:18:fe:62:0b:8f:99:91:ee:58:32:48:c3:af:
1f:8a:fd:cf:76:35:02:e7:ad:22:6d:1c:de:c3:07:
7a:23:df:94:f6:00:46:ce:3c:ec:19:a8:df:30:e1:
46:3b:4f:ea:85:f8:0d:83:1f:8e:56:94:90:92:97:
6a:df:8d:1f:ee:b9:57:aa:f7:10:69:69:ac:f5:f3:
e9:3a:71:7d:ac:b7:1d:38:8d:5a:a8:60:a2:d6:7f:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:62:F7:2B:01:F0:83:34:EE:BC:17:B3:24:B5:55:23:39:72:A4:FB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UmL3KwHwgzTuvBezJLVVIzlypPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:83c0::/48
Signature Algorithm: sha256WithRSAEncryption
09:59:93:f9:6d:ba:80:54:83:2e:20:a5:4a:9f:9c:40:24:ec:
ba:80:40:0f:94:85:b7:3d:24:61:f3:5b:08:40:ae:c9:19:e3:
f3:be:ae:75:e4:6b:6d:e8:6d:f1:f6:85:de:0b:7f:68:92:38:
3b:26:6f:c0:69:a1:69:37:4a:db:3e:68:5a:37:bf:d2:66:57:
95:e0:7d:31:ac:ae:7e:c1:69:e0:56:d3:66:18:5b:40:65:8a:
01:91:0c:00:14:b8:80:e4:ce:a3:47:cc:e5:63:b5:9a:97:58:
e6:60:fa:d4:20:01:4e:41:14:74:ad:52:22:f5:94:e8:86:96:
27:a5:2d:8e:8e:96:0a:d7:db:a7:3e:64:24:88:66:60:53:8b:
b2:4e:f4:90:97:ba:fb:61:e6:30:2b:3f:f1:b2:2e:dd:8a:1b:
85:89:66:65:b8:67:ef:e9:4b:dc:39:98:74:a7:2b:56:5c:ca:
4a:8a:01:2c:12:7b:90:69:56:93:fc:4b:60:ee:a4:fc:6c:4b:
1b:4d:e2:ef:4a:1b:ec:fd:53:00:b0:1d:d1:d0:32:e2:7d:2c:
23:57:08:3a:77:18:a0:7f:8d:7c:a3:dd:5d:88:16:d3:52:7f:
72:9e:e0:65:fc:01:e8:7e:52:42:24:b3:87:fe:cc:e0:c1:50:
9a:9f:6f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:15 2024 by rpki-client on console-ams.rpki-client.org