Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/1a79URRWVUphEavLaDpFrJI0JvM.roa
File: 1a79URRWVUphEavLaDpFrJI0JvM.roa (raw, json)
Hash identifier: 3W9R3Ozd6ON39H+QPJG/DideXBFKKnDWQ7vyPUjaRJU=
Subject key identifier: D5:AE:FD:51:14:56:55:4A:61:11:AB:CB:68:3A:45:AC:92:34:26:F3
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 01856B8A3C29C915763E9ACCBAF28707E055
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/1a79URRWVUphEavLaDpFrJI0JvM.roa
Signing time: Sun 01 Jan 2023 04:14:59 +0000
ROA not before: Sun 01 Jan 2023 04:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33667
IP address blocks: 2a03:2887:ff32::/48 maxlen: 48
2a03:2887:ff31::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:3c:29:c9:15:76:3e:9a:cc:ba:f2:87:07:e0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jan 1 04:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5aefd511456554a6111abcb683a45ac923426f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:b2:bd:a7:22:97:b1:57:37:20:3a:0e:f4:
90:b0:5e:d9:f7:17:4d:65:21:a2:53:09:a5:97:d0:
fe:51:c4:40:bb:74:34:45:64:90:1a:c2:1a:1b:bb:
f7:0c:0a:6a:8c:4b:ac:84:67:0a:d9:e7:7d:86:c8:
d5:11:98:2e:0f:4f:83:c4:de:1a:59:21:28:b0:b3:
f2:35:7a:63:21:df:f5:17:c3:e1:fa:27:d6:ad:e4:
63:e1:d7:e1:81:48:5b:a8:23:58:eb:7a:d2:4b:71:
3f:b7:42:3a:82:e1:4c:a8:ec:b8:de:7a:73:92:15:
9c:14:a0:8e:3a:52:23:c5:e2:69:ce:9a:21:b6:8b:
d5:27:da:9a:7b:ae:30:ec:d4:25:af:9d:e0:44:97:
81:e7:a4:3b:5c:39:e2:e6:eb:4d:f6:56:23:00:13:
af:50:fe:a3:c7:a7:30:d0:c2:ec:cc:e6:0c:0d:50:
ed:9b:11:49:2f:bb:3d:21:68:cb:01:02:21:be:5a:
6d:75:3b:22:f6:9d:21:69:78:2b:ec:54:03:c9:52:
82:e1:8c:e4:2d:8b:47:6e:b6:59:89:ff:3f:bf:fe:
83:87:50:22:23:fd:3b:43:06:9b:f7:a8:f5:01:65:
7f:7f:13:8c:ef:e3:69:82:84:d9:c3:e0:f1:d6:ee:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:FD:51:14:56:55:4A:61:11:AB:CB:68:3A:45:AC:92:34:26:F3
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/1a79URRWVUphEavLaDpFrJI0JvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff31::-2a03:2887:ff32:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d7:1a:e0:16:65:2a:13:6d:69:27:24:0b:2a:2e:83:cb:2e:bd:
62:34:f5:a6:56:d8:c3:76:44:c5:7c:15:03:49:e5:9f:97:82:
4c:31:c1:29:51:bf:c5:a4:b1:a5:6a:23:9b:35:5f:ed:70:5b:
50:32:32:34:8c:21:2f:27:88:9d:2b:5c:76:5a:e1:ac:af:e4:
43:f2:f3:d7:a3:1e:81:a2:ec:13:ab:11:ba:37:c5:4f:fa:14:
45:29:d6:93:fa:d6:28:bd:1b:f2:ba:20:e5:68:e2:76:74:01:
7a:ae:15:f2:3f:bc:08:78:1b:e3:ba:f1:12:43:e8:89:fb:be:
8a:6a:19:06:5c:c3:7e:cb:10:2f:0f:41:07:dd:3d:b0:f0:c1:
d3:1e:3e:0c:91:9d:cc:bf:a6:86:27:e4:a8:bc:bf:0b:8e:ee:
cb:35:1b:04:92:03:06:1f:79:c6:40:80:b4:7a:62:8e:41:81:
df:bc:c1:11:05:ad:ed:5b:63:ed:1e:9a:68:fd:cb:70:33:7a:
1c:96:83:d5:0a:3e:db:63:fa:eb:e6:b1:21:11:3d:73:50:51:
21:ae:76:c8:b7:0e:92:1c:60:48:85:af:6c:e3:f1:2c:a2:32:
58:99:3d:9f:25:31:3d:31:d7:f7:e8:c6:2a:8c:23:11:25:bf:
0a:99:d4:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:09 2024 by rpki-client on console-ams.rpki-client.org