Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/Y3G9q6sLHVfn8xd1O51eXpUmMTM.roa
File: Y3G9q6sLHVfn8xd1O51eXpUmMTM.roa (raw, json)
Hash identifier: 0eCZ0vd1Kh9s3hDhLqMwxrOyUdbvyPTMTnv9gilnH5Q=
Subject key identifier: 63:71:BD:AB:AB:0B:1D:57:E7:F3:17:75:3B:9D:5E:5E:95:26:31:33
Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial: 01856FF93C74E356C8FD754B1287527943B4
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/Y3G9q6sLHVfn8xd1O51eXpUmMTM.roa
Signing time: Mon 02 Jan 2023 00:54:42 +0000
ROA not before: Mon 02 Jan 2023 00:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 134.28.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:3c:74:e3:56:c8:fd:75:4b:12:87:52:79:43:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Validity
Not Before: Jan 2 00:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6371bdabab0b1d57e7f317753b9d5e5e95263133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:e0:f0:5b:67:ea:d6:de:c3:4b:85:67:30:
f4:2c:ca:8e:83:6e:30:e8:ad:51:b4:4f:f1:59:90:
b1:f8:2c:40:7e:89:bb:98:be:61:3b:d0:fa:b9:59:
b9:95:e4:de:46:ff:c9:1b:86:0a:71:bb:fc:1b:94:
c8:ae:47:94:d5:a4:bf:7d:ca:c4:7d:b4:4c:4e:e7:
4b:06:17:9a:b0:84:8d:d6:a7:df:ab:52:ce:af:1d:
a9:e7:4e:d9:aa:1e:67:8d:56:1d:e2:21:9b:5a:a2:
35:01:f0:e1:44:e3:15:4f:01:b3:98:82:6b:91:1d:
1d:8c:65:6e:b2:5c:c9:e5:b3:fc:4d:c9:39:c2:41:
8a:c9:0b:0a:1d:da:21:aa:3c:a2:0d:52:72:53:c2:
b5:1f:22:e8:80:cf:85:58:52:12:fa:15:24:93:04:
6f:99:a9:45:f7:6f:cb:4d:23:13:30:59:f9:d6:fb:
e3:c0:ca:f7:bc:52:ed:ee:2b:2c:20:c0:e4:ea:2d:
fc:97:3c:88:a2:89:75:3a:b0:f2:9c:a3:96:c0:f1:
5a:89:39:f1:b4:64:5a:ff:57:26:48:a2:88:75:ff:
10:df:76:ea:b3:e1:16:1a:cf:49:6d:7f:f9:81:a7:
3e:2c:06:c6:1e:1c:06:74:90:1f:01:b0:19:da:05:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:71:BD:AB:AB:0B:1D:57:E7:F3:17:75:3B:9D:5E:5E:95:26:31:33
X509v3 Authority Key Identifier:
keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/Y3G9q6sLHVfn8xd1O51eXpUmMTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.28.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:c6:f0:39:e3:81:54:cc:06:f0:74:23:99:26:ce:4e:60:8e:
7a:d8:ab:2d:ce:ee:b1:8f:77:fa:99:f2:ea:9f:b2:46:1f:3c:
2b:2d:be:1c:5c:28:f0:3b:e9:8a:f4:de:ee:e8:6d:85:16:1a:
c3:f5:ba:50:69:75:71:49:6a:f3:8d:8d:ba:21:62:22:1f:eb:
78:ec:9b:22:de:00:ac:5a:24:2c:a3:4a:aa:1d:aa:0c:14:22:
7e:c6:fc:b7:ab:a9:9f:94:70:29:21:01:4f:8a:11:1e:23:9f:
69:a8:7f:1b:31:e0:44:f1:b3:61:ab:5e:09:0c:43:39:3a:7b:
f1:9b:4f:43:e3:97:83:9f:73:5c:bd:4f:af:16:ab:0e:79:7c:
38:b3:8b:0f:e9:45:f3:1b:6a:2a:72:31:d5:5b:1c:ca:81:fb:
d9:ec:13:de:43:19:22:c3:7b:00:f7:70:06:c4:48:e8:14:40:
b2:ff:d5:a3:5a:bb:82:0e:15:6e:e1:fc:fb:ab:03:f6:8f:8c:
11:46:58:3f:a4:5e:79:59:be:dc:70:81:d2:22:75:07:4f:3e:
69:7d:e7:11:b8:43:92:3c:b2:86:52:86:8d:95:d7:ee:4f:ce:
fb:79:c3:72:f5:b4:f7:bc:e2:56:ae:2e:77:8a:43:ad:3d:3a:
4e:1c:59:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:44 2024 by rpki-client on console-ams.rpki-client.org