Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/k3EqAIA_YjsAQgvu_Ezv-UmdYNY.roa
File: k3EqAIA_YjsAQgvu_Ezv-UmdYNY.roa (raw, json)
Hash identifier: 78c/PMEWmOxqWHZfwPG919QukuAu9ERjMn3GCfhLL4g=
Subject key identifier: 93:71:2A:00:80:3F:62:3B:00:42:0B:EE:FC:4C:EF:F9:49:9D:60:D6
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0185787C2ED536D87BD090932C6C098FB84F
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/k3EqAIA_YjsAQgvu_Ezv-UmdYNY.roa
Signing time: Tue 03 Jan 2023 16:34:42 +0000
ROA not before: Tue 03 Jan 2023 16:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150698
IP address blocks: 2a0c:fe01::/32 maxlen: 48
2a0b:3c40:38::/48 maxlen: 48
2a0b:3c40:56::/48 maxlen: 48
2a0e:a942::/32 maxlen: 48
2a0b:3c40:19::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jan 2023 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:7c:2e:d5:36:d8:7b:d0:90:93:2c:6c:09:8f:b8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 3 16:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93712a00803f623b00420beefc4ceff9499d60d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:e8:f7:03:93:9a:e1:6a:31:d3:9a:e9:cc:
8c:bc:fb:db:46:be:2c:f3:33:0b:a5:5d:34:3b:6c:
6d:2a:b9:2d:d9:95:80:74:15:79:de:51:96:82:b3:
25:b4:40:53:7a:b4:ec:84:a8:3a:de:d8:c7:7e:39:
48:b7:fc:88:cd:f7:e8:00:ac:34:f8:71:7f:32:94:
66:d3:49:20:a1:79:c5:c2:0d:69:57:d7:ca:50:bf:
e1:08:c0:ec:3e:08:b1:b3:7a:22:df:1e:de:fe:d7:
93:86:17:5d:eb:ba:7d:97:75:b1:69:f7:b8:bf:a8:
bf:9f:8f:b8:cd:68:dc:ea:6e:5d:d7:26:ec:9d:14:
74:56:cd:fa:58:09:79:26:e2:bc:16:15:df:93:56:
9c:02:2d:ed:cd:bd:a9:d4:74:0f:60:c6:42:02:07:
77:47:c4:a6:9a:f9:4e:53:49:ca:1e:42:70:a7:26:
ca:cc:f8:af:16:ed:f4:46:19:86:7e:20:ce:2b:61:
05:6c:d1:da:8b:5e:7f:43:77:0f:b1:84:93:a5:6a:
ea:91:ca:1f:e4:37:f5:ef:21:5c:ce:a3:a8:39:cc:
79:34:08:0f:2e:24:6f:b9:49:1f:ec:1e:a0:2c:72:
09:eb:0c:6c:34:58:75:62:2f:f8:0e:5c:69:db:46:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:2A:00:80:3F:62:3B:00:42:0B:EE:FC:4C:EF:F9:49:9D:60:D6
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/k3EqAIA_YjsAQgvu_Ezv-UmdYNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3c40:19::/48
2a0b:3c40:38::/48
2a0b:3c40:56::/48
2a0c:fe01::/32
2a0e:a942::/32
Signature Algorithm: sha256WithRSAEncryption
8d:9c:a0:d1:d8:eb:b5:ce:8c:d8:0d:a8:40:be:47:38:09:e6:
6b:64:71:38:e0:7f:18:63:16:99:d2:07:d4:c5:46:a9:4b:71:
e7:a3:4f:6c:cf:dc:02:39:41:18:cd:02:1e:9b:4c:c7:7a:2e:
2e:83:c6:fa:ff:d8:fd:70:02:9c:7d:41:8c:16:7a:e9:c7:fc:
ea:b7:26:04:af:1a:10:ab:e0:2a:2c:c5:0e:d1:a0:f9:f7:24:
ab:e2:f8:0b:c9:18:0d:87:f4:ab:18:cc:14:7a:79:3d:f0:51:
7c:d3:59:2f:cb:36:c6:04:9d:ba:2d:28:e1:8f:70:49:87:7b:
47:d3:2c:5f:2d:e7:ae:e4:77:4e:f9:e6:e1:e1:e9:44:ee:30:
34:ab:02:53:1f:62:50:82:d6:d9:e0:9f:9f:db:3d:d9:59:2c:
1f:0e:03:16:dc:b3:93:5d:45:ec:ce:37:ed:d0:21:e5:1a:fc:
06:c7:53:22:25:2c:87:01:52:d9:58:89:04:80:0b:90:a1:49:
df:3c:c9:e3:f4:98:80:80:c4:12:a9:10:bf:e5:04:7b:d4:28:
2d:42:c5:13:f2:ff:cc:ef:5e:36:48:31:8b:55:38:96:e5:c4:
d2:1e:3b:04:a7:ce:58:32:5c:dd:ab:d3:f0:cc:6e:ef:ef:c1:
19:43:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org