Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/axZjzjMjziz2R4U5qUVzXe491-U.roa
File: axZjzjMjziz2R4U5qUVzXe491-U.roa (raw, json)
Hash identifier: dtdt9zdRA9Nb8bUdfIZHusihgBIw27OPX4SHvdHA/MA=
Subject key identifier: 6B:16:63:CE:33:23:CE:2C:F6:47:85:39:A9:45:73:5D:EE:3D:D7:E5
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018F77F489CF3B82C70410C68BFDFBA19191
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/axZjzjMjziz2R4U5qUVzXe491-U.roa
Signing time: Tue 14 May 2024 16:34:25 +0000
ROA not before: Tue 14 May 2024 16:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a06:b3c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 11 Jun 2024 19:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:77:f4:89:cf:3b:82:c7:04:10:c6:8b:fd:fb:a1:91:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: May 14 16:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b1663ce3323ce2cf6478539a945735dee3dd7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:74:13:c7:00:3a:d2:5a:b2:1d:a5:1c:e0:
a7:85:46:fa:35:30:ae:bb:df:89:a8:5c:4c:9a:81:
97:f0:19:58:35:43:6f:d1:75:f1:d5:3d:0f:79:b0:
b9:6c:30:fb:25:17:d3:5e:5c:58:58:f0:5b:6e:1a:
40:24:fc:ee:da:f5:a2:a5:75:7b:b6:63:f8:56:05:
3b:74:fd:a3:54:0d:55:1f:bd:96:a6:59:66:42:7e:
45:5d:b4:c9:aa:a7:57:c7:c2:4a:b6:92:42:8a:94:
f9:3e:02:f3:3b:a6:e0:d3:f3:a0:9c:45:5e:5e:a9:
6d:92:1b:3a:2c:b9:07:cf:d8:a5:bd:73:f5:8a:bf:
14:22:fe:94:90:d9:14:5b:a3:bd:c5:d6:7d:bb:cf:
62:62:a3:8a:00:60:ee:1d:b1:1a:db:06:b6:4f:41:
f1:f8:c0:2d:6e:ec:24:e8:14:8d:93:94:55:98:08:
75:95:a6:ce:98:ff:57:b2:bb:eb:f4:8f:85:3b:84:
0a:e3:b7:a7:9b:2f:85:94:d2:03:e1:de:19:1f:8c:
16:56:bd:6a:fb:85:fa:7b:c5:70:6f:ab:57:dc:d6:
c3:1a:5f:57:b4:b0:f6:32:16:e4:47:40:4c:20:62:
7c:f1:47:a5:61:f2:45:e3:83:c5:c7:86:53:e7:04:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:16:63:CE:33:23:CE:2C:F6:47:85:39:A9:45:73:5D:EE:3D:D7:E5
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/axZjzjMjziz2R4U5qUVzXe491-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:fa:da:09:f1:76:18:4e:e5:93:9d:e6:2b:d6:d1:49:a7:3a:
40:95:c6:00:4e:f6:ca:3f:00:91:af:de:49:3b:ef:db:f7:b6:
a5:ef:cd:d8:c3:ac:c3:5c:53:bd:4a:a2:bf:a4:d7:5d:ba:a1:
88:10:79:67:d3:91:c9:e9:4c:16:11:46:8c:c5:02:f5:c3:96:
42:f2:cf:f1:f8:ed:86:39:fb:0b:e6:d0:6d:83:4a:f1:8e:bd:
68:55:94:f2:5a:d5:19:11:3c:76:93:78:c6:f2:07:21:69:92:
f8:44:1d:39:7d:82:0d:48:e9:b4:b5:2d:26:9f:cb:92:22:f1:
b5:cf:af:8e:d4:0a:57:5a:3a:09:3b:3c:0f:c5:e5:0a:a3:9f:
ca:5f:67:d6:22:c8:21:ed:b2:04:0a:27:90:35:c2:64:06:fd:
cd:44:86:ff:f1:45:ca:5f:d1:71:8d:1f:1c:54:32:36:96:ff:
42:4a:3d:db:02:9e:c7:b0:a5:a6:23:51:53:44:0d:2a:49:6a:
54:98:45:9e:f8:27:8b:22:a4:46:e6:01:e9:6a:37:24:4b:a3:
e6:c1:0e:39:4c:39:b0:08:12:d3:7a:af:da:7c:04:fc:3f:9c:
85:50:70:ad:86:01:41:44:11:48:4f:5a:a2:4a:42:bc:69:94:
c3:2a:7c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 21:29:58 2024 by rpki-client on console-fra.rpki-client.org