Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Ut-d5dOMqP0eIXD__Zc07p6tv2I.roa
File: Ut-d5dOMqP0eIXD__Zc07p6tv2I.roa (raw, json)
Hash identifier: QU/saSJF1p3+1cldvDHfqWqlxpPEBsdE3gO81tqzw+E=
Subject key identifier: 52:DF:9D:E5:D3:8C:A8:FD:1E:21:70:FF:FD:97:34:EE:9E:AD:BF:62
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0187B280527CA4D37952866EE9BF11C49DD3
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Ut-d5dOMqP0eIXD__Zc07p6tv2I.roa
Signing time: Mon 24 Apr 2023 09:02:46 +0000
ROA not before: Mon 24 Apr 2023 09:02:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150698
IP address blocks: 2a0c:fe01::/32 maxlen: 48
2a0e:a942::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Dec 2023 09:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:80:52:7c:a4:d3:79:52:86:6e:e9:bf:11:c4:9d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Apr 24 09:02:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52df9de5d38ca8fd1e2170fffd9734ee9eadbf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:45:cd:2a:e0:69:0f:24:22:f9:3d:49:c8:
ed:ff:18:6d:f6:f4:30:81:a4:d9:08:d6:fb:0f:54:
38:4f:1c:5b:85:e7:d9:6e:e9:7e:f7:c4:b8:80:9d:
ed:4b:f2:65:0a:c1:f2:1c:13:0e:b3:c9:72:42:d4:
1d:ed:08:e3:e4:2c:d0:36:39:78:61:83:2a:b3:db:
1b:2c:0f:10:b2:7e:e6:80:3e:35:8c:58:3a:cc:cf:
f2:40:06:0e:aa:fc:49:57:86:a6:7b:79:b6:52:e7:
2e:19:b3:11:aa:10:ac:e7:e4:c4:2a:7c:42:5c:eb:
cc:1f:3a:66:a2:d6:cf:20:4b:5c:31:c2:f5:3d:fa:
75:d3:d4:93:3c:43:aa:d9:4b:d6:9d:ed:45:3e:dc:
db:1b:20:e0:29:45:70:d3:72:88:ff:9c:41:8a:55:
31:90:3e:1b:77:fa:9a:5f:ab:eb:2e:93:e1:b3:f3:
cd:9d:65:9a:9c:b5:c5:ae:93:89:db:38:61:8c:34:
b1:3b:9e:e6:78:f3:56:49:bf:86:70:b5:6d:ec:dd:
2a:ff:06:7f:66:ca:b1:b2:bf:5d:65:90:0e:8f:c3:
62:5b:75:78:85:4c:9f:66:5a:c9:6f:fa:cd:8a:ae:
a8:68:d3:03:a6:59:aa:7e:62:6f:cb:d6:b1:a4:f3:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DF:9D:E5:D3:8C:A8:FD:1E:21:70:FF:FD:97:34:EE:9E:AD:BF:62
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Ut-d5dOMqP0eIXD__Zc07p6tv2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:fe01::/32
2a0e:a942::/32
Signature Algorithm: sha256WithRSAEncryption
06:ff:41:c4:58:55:b9:a4:42:52:65:95:d4:61:4a:21:a6:12:
77:7a:2a:55:a0:32:25:07:de:f3:a9:82:06:0d:a4:bb:ff:ce:
c1:36:23:28:4d:b8:54:68:63:5e:90:fd:17:41:f3:80:37:fc:
78:e8:78:26:14:c3:cb:d8:a5:65:63:ee:b6:69:45:5c:22:f7:
a2:cd:13:55:c0:68:67:e4:cc:f3:88:02:16:ba:22:0e:1f:58:
ce:45:ee:bd:31:36:c9:35:b1:7b:1e:eb:de:f3:a5:90:eb:65:
65:85:e8:06:7a:e9:e6:be:3e:a6:1b:44:b2:29:21:f6:5a:ac:
c5:4a:c8:33:f2:18:8e:b0:65:44:ff:84:a8:7f:5b:03:fe:f0:
89:c2:13:75:8f:d5:c4:45:65:de:7a:c5:56:2d:d8:8c:1d:a9:
fa:dd:a7:d3:7c:bd:f2:82:34:3c:58:1a:ff:f6:70:c8:d6:25:
63:fd:92:9d:3c:43:b9:cb:6b:db:01:24:1a:fd:e2:2f:2e:8f:
95:7b:45:b2:75:66:24:f3:9c:c9:0d:8d:8e:cf:d6:0a:29:52:
85:af:76:30:85:df:47:4a:91:fc:4c:6f:01:ba:97:56:f8:c4:
7d:c0:b8:ee:55:f6:1c:ec:da:38:19:41:31:f0:00:6f:19:03:
20:b9:d1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org