Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/O3SNwytF4N-Cety9FCk6lahl5oU.roa
File: O3SNwytF4N-Cety9FCk6lahl5oU.roa (raw, json)
Hash identifier: jInI+mMdnaCIg0onUnlPPrkqHNlEsRR6jmi/H5oVoBs=
Subject key identifier: 3B:74:8D:C3:2B:45:E0:DF:82:7A:DC:BD:14:29:3A:95:A8:65:E6:85
Certificate issuer: /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Certificate serial: 0192B608B631A2F91EF4B931F4EE50296C45
Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/O3SNwytF4N-Cety9FCk6lahl5oU.roa
Signing time: Tue 22 Oct 2024 21:01:17 +0000
ROA not before: Tue 22 Oct 2024 21:01:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214237
IP address blocks: 2a01:e880::/32 maxlen: 64
Validation: Failed, certificate revoked on Sun 03 Nov 2024 12:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b6:08:b6:31:a2:f9:1e:f4:b9:31:f4:ee:50:29:6c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Validity
Not Before: Oct 22 21:01:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b748dc32b45e0df827adcbd14293a95a865e685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:32:96:39:41:3c:e8:6f:c4:58:34:b4:7b:
30:5c:c6:fd:e3:82:31:28:2b:9a:2e:4a:4f:a2:de:
49:dc:ec:e4:5b:8f:2f:7d:0b:f3:cf:c1:5e:35:32:
56:1d:ff:fe:cd:50:1f:87:72:2f:f5:8f:24:e9:c2:
ee:92:b5:2f:2e:e4:d7:ae:52:05:6e:97:fa:fd:40:
87:08:d4:0c:2c:f1:34:c0:c6:56:76:2a:90:14:66:
9d:41:1e:78:e5:ff:4e:ca:33:4f:87:08:63:b6:32:
59:a7:34:0f:c6:75:b2:30:0d:84:cd:b6:87:8a:5c:
f2:34:a7:49:fb:dc:ee:ad:a3:d4:d6:ff:ab:a8:08:
fa:cb:86:2d:9d:bd:b7:29:88:24:7d:ff:29:f2:09:
04:f5:a5:a9:03:45:bb:89:c6:07:c5:d2:00:7b:c0:
de:c0:24:cb:e2:66:75:50:d3:be:97:49:4d:6c:54:
90:7a:34:7b:95:cf:bc:45:dc:9a:de:10:ee:4b:a4:
fc:97:c9:ad:1c:00:99:84:ce:da:2e:61:16:14:9d:
d8:26:9f:c0:f2:4e:0b:03:00:02:93:c3:85:11:56:
da:1e:e5:98:c3:aa:33:6c:62:69:eb:9c:0d:da:a8:
43:a9:03:b1:87:22:d7:93:40:92:6c:88:d0:22:e8:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:74:8D:C3:2B:45:E0:DF:82:7A:DC:BD:14:29:3A:95:A8:65:E6:85
X509v3 Authority Key Identifier:
keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/O3SNwytF4N-Cety9FCk6lahl5oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e880::/32
Signature Algorithm: sha256WithRSAEncryption
0b:c6:b9:51:34:c1:e5:e0:f8:05:07:1f:c2:5d:38:75:2a:b5:
5f:e9:e5:e9:11:85:32:7a:d1:37:4a:72:30:d5:0a:1b:e9:bc:
d0:d2:43:ac:9c:36:f1:45:e2:5b:5a:01:5e:6e:1f:30:a1:8d:
01:0e:3d:27:03:40:e6:e4:84:71:1f:58:ca:81:82:e7:a7:c6:
70:58:0a:a9:d9:86:48:38:5e:bf:2e:f7:d0:fb:8b:7e:fb:44:
50:79:9c:af:8f:c2:45:65:fe:93:d6:ba:bf:7a:15:94:74:d4:
a8:a2:49:19:8e:43:c3:05:9f:27:2a:8b:d5:95:29:a5:5e:2c:
7b:b1:7c:4e:c2:79:28:a0:27:41:49:56:67:d6:04:61:b8:05:
38:0f:df:ba:6a:ce:4c:85:4d:51:4b:94:ed:3a:a9:c9:01:cf:
63:7f:28:9a:bd:26:a7:38:af:4d:74:9e:e2:7d:11:52:83:e0:
ee:2c:60:05:23:e2:a1:7b:66:09:5a:0c:55:4d:49:64:5d:2b:
5e:99:38:c8:3e:2d:fa:cd:c1:56:84:fa:d4:6b:5f:89:ee:7f:
33:22:1c:19:ab:ac:2a:69:42:54:8d:21:cf:bd:40:41:79:7a:
10:17:6d:5d:2b:7c:f1:ec:9a:bb:90:f3:94:67:7e:4b:b3:8f:
f6:5a:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org