Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ScyydrvsWRJ86mFOKE1AZzjivC0.roa
File: ScyydrvsWRJ86mFOKE1AZzjivC0.roa (raw, json)
Hash identifier: Xi1YuqBmS/RHgAqLnsfjtawbCVVyHjkRtQ9EMFa5T5s=
Subject key identifier: 49:CC:B2:76:BB:EC:59:12:7C:EA:61:4E:28:4D:40:67:38:E2:BC:2D
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018AFAA7D5F77A1031BFBABF858C208748B2
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ScyydrvsWRJ86mFOKE1AZzjivC0.roa
Signing time: Wed 04 Oct 2023 12:26:57 +0000
ROA not before: Wed 04 Oct 2023 12:26:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216271
IP address blocks: 2a13:dac0::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 06 Oct 2023 14:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:a7:d5:f7:7a:10:31:bf:ba:bf:85:8c:20:87:48:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 4 12:26:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49ccb276bbec59127cea614e284d406738e2bc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:86:54:bc:cf:8c:8e:ba:39:e8:4d:29:e6:44:
23:65:3b:05:67:6c:e0:c3:59:32:ae:70:e0:12:19:
8c:1a:91:3e:ae:dc:4b:cc:22:76:23:54:3b:9f:c6:
0e:f3:66:77:bb:22:02:96:17:76:b7:f8:47:fd:28:
dc:cc:ec:8f:f8:66:4d:98:d5:28:07:11:88:7b:12:
00:2f:35:94:e7:68:57:f4:0b:3b:1a:24:8b:2a:cc:
ef:5c:55:68:ea:91:32:0b:d7:ba:b4:39:55:91:72:
f8:e6:a8:fb:59:a9:ad:b5:3a:f9:00:f8:e0:d9:3a:
d9:f3:4a:90:c5:db:27:47:6e:5e:b6:77:c7:6c:d6:
d6:09:41:2d:97:7c:22:aa:f7:47:63:93:ab:4a:1d:
15:f5:a4:6f:a7:aa:c3:3e:ba:cb:2a:37:79:3f:58:
17:a9:26:f8:17:bf:c1:d2:75:8c:d2:5f:23:80:7c:
1c:2d:6d:fa:e4:61:b0:59:01:a8:45:1a:2f:57:b6:
c8:ac:d6:17:a2:91:23:0e:e7:15:e5:ed:40:5b:66:
94:90:b2:df:4c:cd:49:12:c7:f4:b9:f0:e0:88:37:
14:3d:55:d5:e7:f6:91:32:ce:47:5e:dc:3d:43:a5:
d8:49:cf:6b:af:6c:32:7b:fa:3f:f7:bc:2c:a2:4c:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CC:B2:76:BB:EC:59:12:7C:EA:61:4E:28:4D:40:67:38:E2:BC:2D
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ScyydrvsWRJ86mFOKE1AZzjivC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
16:07:0a:49:80:75:0e:cc:d3:f5:f1:dd:d5:8e:34:f0:70:d4:
0f:1c:c7:c8:83:48:16:ab:5a:02:b8:23:73:62:4c:25:a1:cd:
a1:de:7d:53:29:5b:3a:4d:7e:ba:98:1a:ca:36:a2:9a:b1:12:
3e:72:dd:e1:65:33:f0:9c:79:6b:b0:c5:1b:65:a9:4b:ee:a5:
72:e8:74:91:d3:b5:3c:ff:f6:4c:57:88:6b:22:68:58:f6:a9:
d9:32:41:f9:57:69:02:91:1f:d7:80:de:b0:96:e8:72:fe:f1:
2a:af:90:c6:5c:93:68:e5:9e:23:5f:58:dd:c2:94:c8:87:f1:
2e:43:91:38:31:4e:29:81:0d:a6:9e:ea:28:04:63:46:b3:2f:
f6:fe:22:96:ce:11:e9:ac:3c:f6:fe:9a:f5:0a:4e:88:02:48:
fc:b8:42:dc:e0:11:86:8b:2a:6a:a3:fe:5a:82:09:b9:a3:bb:
e4:a8:49:fb:9c:54:6b:27:c5:1f:ab:b7:bd:17:57:1f:28:5c:
83:1e:44:7e:0d:e0:86:64:fb:4a:93:87:5c:94:44:72:cb:d3:
57:84:6b:1e:6a:e6:cf:66:69:cc:8f:ff:59:73:13:58:a0:84:
d2:3d:1e:b7:32:f4:cd:1e:e2:0e:04:21:76:82:72:92:02:73:
48:28:9b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org