Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Uv2VdPF7TalriSZTzroKiZvZJq4.roa
File: Uv2VdPF7TalriSZTzroKiZvZJq4.roa (raw, json)
Hash identifier: tX3iBC59b2fAacuiu0F8WpkJ6Gf3zranjrFJSJZy48o=
Subject key identifier: 52:FD:95:74:F1:7B:4D:A9:6B:89:26:53:CE:BA:0A:89:9B:D9:26:AE
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 01856B8A3ACA1CD28A78BE0A680C48B4AFAE
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Uv2VdPF7TalriSZTzroKiZvZJq4.roa
Signing time: Sun 01 Jan 2023 04:14:59 +0000
ROA not before: Sun 01 Jan 2023 04:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33660
IP address blocks: 2a03:2887:ff47::/48 maxlen: 48
2a03:2887:ff46::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:3a:ca:1c:d2:8a:78:be:0a:68:0c:48:b4:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jan 1 04:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52fd9574f17b4da96b892653ceba0a899bd926ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:eb:3d:6e:d3:33:4a:e2:23:db:2f:91:49:8f:
e8:e1:4c:7f:b0:58:f7:d3:11:49:1b:75:10:3f:9e:
3c:97:2b:77:1d:aa:6d:e5:42:6f:7d:aa:e2:76:1d:
97:9a:8e:f4:4f:4e:a8:5f:bf:39:52:78:0e:68:f0:
dc:7c:60:12:f2:6a:51:1e:55:86:28:01:7f:0f:b4:
3d:85:e0:7e:5f:e9:ab:96:4d:28:96:e2:8c:c4:fc:
32:29:5c:d3:9b:a9:42:cd:f8:2e:df:ea:f1:b6:5e:
64:1a:e6:28:32:d1:a7:18:44:a6:0a:34:25:6f:1c:
af:8c:12:b8:08:15:80:36:ee:dc:9d:cc:f2:23:4a:
e9:8d:ea:1c:39:47:a5:c7:08:5c:b1:23:fd:d3:c6:
09:bd:55:86:6f:bc:fe:b1:98:a0:b8:cc:d2:f9:b3:
4d:88:dd:1a:74:27:68:87:3f:93:b6:2b:08:0f:b5:
8b:50:4e:97:29:1f:53:d6:02:c3:37:0a:f8:39:3e:
c4:7a:e1:49:b3:73:df:ce:07:30:60:a9:0c:8c:f1:
3b:96:ff:02:1a:dc:27:f9:94:bf:98:e2:fd:76:7e:
c4:18:3a:b7:62:83:93:3a:ce:07:c2:76:79:64:f4:
64:b7:86:b6:fc:29:83:fc:37:27:a9:1a:5d:0f:82:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:95:74:F1:7B:4D:A9:6B:89:26:53:CE:BA:0A:89:9B:D9:26:AE
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Uv2VdPF7TalriSZTzroKiZvZJq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff46::/47
Signature Algorithm: sha256WithRSAEncryption
67:41:6f:99:2d:8d:d6:ef:ce:e6:e9:11:71:9a:6d:b7:38:7a:
65:0c:72:06:1f:da:72:22:88:b7:e9:c8:28:21:5c:5e:ef:19:
80:14:d6:2a:d0:f4:40:8d:dd:11:26:44:25:52:48:6c:95:7c:
69:ac:18:48:5e:3f:a6:88:67:38:91:35:66:38:88:29:32:15:
3b:8f:50:c6:39:0b:b1:b0:7b:ac:1b:8a:0a:a1:9f:e9:67:0e:
14:4b:bc:ad:9b:47:4e:f8:c8:40:b6:8d:74:36:df:2a:3f:da:
42:e7:a8:af:31:b8:0c:fe:d1:07:0f:6a:3f:1b:d8:d1:cf:9a:
bf:72:87:1b:2e:9b:28:ba:59:c7:69:a2:8e:73:36:3a:97:64:
56:b3:21:4a:c0:20:3a:d7:e9:37:3d:61:bc:4c:7c:a4:c5:6f:
98:9c:91:7b:e5:a9:bd:65:d3:4d:24:c2:3f:e5:ee:a5:ee:59:
3c:fa:e9:ce:07:03:fd:d8:c2:4f:e9:26:2d:40:c9:00:56:7e:
0a:1d:fc:bf:45:de:b1:de:39:d1:f2:b5:2b:d5:1a:fd:2d:02:
ed:b7:c0:6a:d3:7a:8d:64:d0:55:7b:df:da:d9:b9:8c:03:01:
99:94:3f:3a:01:25:3f:59:21:d4:ed:4f:f7:c4:49:3f:29:8b:
5a:0d:33:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:09 2024 by rpki-client on console-ams.rpki-client.org