Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/anPcakXMV3wNIKv-nCth5K0hiTM.roa
File: anPcakXMV3wNIKv-nCth5K0hiTM.roa (raw, json)
Hash identifier: 0jhsYBbS+MErfhVOnxEQPdZYNHtTKofkM2xzZdHK/gU=
Subject key identifier: 6A:73:DC:6A:45:CC:57:7C:0D:20:AB:FE:9C:2B:61:E4:AD:21:89:33
Certificate issuer: /CN=99fad2527eafa95215a8fed67a27fad3cfb2d37f
Certificate serial: 01878F43921C0DAE0BAF2022DE73450CD9B9
Authority key identifier: 99:FA:D2:52:7E:AF:A9:52:15:A8:FE:D6:7A:27:FA:D3:CF:B2:D3:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfrSUn6vqVIVqP7Weif608-y038.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/anPcakXMV3wNIKv-nCth5K0hiTM.roa
Signing time: Mon 17 Apr 2023 12:49:42 +0000
ROA not before: Mon 17 Apr 2023 12:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a05:7480::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 21 Sep 2023 19:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:43:92:1c:0d:ae:0b:af:20:22:de:73:45:0c:d9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fad2527eafa95215a8fed67a27fad3cfb2d37f
Validity
Not Before: Apr 17 12:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a73dc6a45cc577c0d20abfe9c2b61e4ad218933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:b2:16:4c:00:a4:17:7c:9b:69:82:cc:de:
d2:84:4a:e2:cd:1b:25:67:f0:89:4c:15:96:fb:71:
c3:58:53:a7:10:5a:c0:f1:0f:88:11:6b:03:66:0b:
fe:ae:12:ce:7a:dc:4e:e1:4b:88:21:d6:52:0f:03:
8d:a3:80:bb:e0:43:11:e2:61:1e:47:de:2e:b1:fe:
20:d3:78:0b:17:04:98:b5:ef:dd:cd:a2:b0:62:34:
67:13:92:85:a8:e0:e5:6a:b2:b5:69:5a:a0:04:51:
83:50:e6:0c:1a:c0:5b:ca:59:7e:ac:35:74:c5:fb:
8d:02:25:7d:fb:90:95:78:4d:77:dd:75:91:e5:db:
d0:9d:cf:95:ee:50:c6:b2:c1:05:b2:1d:bb:37:53:
eb:bd:4f:d5:70:00:18:c1:02:33:58:f1:0f:b4:e7:
e3:6c:0d:8b:b0:da:ec:c7:89:6c:d4:eb:56:98:93:
db:80:83:9f:fb:c9:4b:18:03:ea:2d:f1:da:de:ed:
e0:b2:c6:31:52:d5:39:41:50:cf:3b:cf:9b:48:c3:
d0:f9:f5:e0:cf:5c:d0:4e:68:9a:02:78:91:9c:20:
2a:c0:ac:25:0e:75:c4:15:f5:1a:ed:26:e9:c3:f6:
0b:77:80:44:10:f7:12:23:0a:8d:23:70:1c:47:0f:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:DC:6A:45:CC:57:7C:0D:20:AB:FE:9C:2B:61:E4:AD:21:89:33
X509v3 Authority Key Identifier:
keyid:99:FA:D2:52:7E:AF:A9:52:15:A8:FE:D6:7A:27:FA:D3:CF:B2:D3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfrSUn6vqVIVqP7Weif608-y038.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/anPcakXMV3wNIKv-nCth5K0hiTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/mfrSUn6vqVIVqP7Weif608-y038.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:7480::/29
Signature Algorithm: sha256WithRSAEncryption
6f:46:16:40:e0:e1:0b:27:5d:e0:6f:d3:2f:8e:17:68:2e:e8:
07:2d:9d:75:df:55:50:d1:bd:0f:85:e2:33:94:c1:d3:69:2b:
8f:c1:43:b5:13:35:d4:47:f6:39:39:52:43:bf:07:64:78:dc:
b2:dd:5e:8e:77:d0:9b:f4:ef:ca:18:ab:7f:9a:8d:11:89:23:
bd:ca:aa:9c:1e:18:ec:16:64:bd:42:db:f4:79:a9:cf:3b:72:
24:1c:69:89:bb:1e:fb:67:80:87:a0:d3:2d:6e:7a:2b:85:9f:
8c:a0:55:56:d4:ae:a8:b5:c0:d1:16:03:f0:47:74:e8:01:86:
8d:eb:46:d2:9b:4a:9f:e5:c7:2f:f1:68:15:e4:be:47:4b:7a:
de:16:3b:5a:d1:b0:35:5e:84:ac:59:bc:ec:1a:2a:48:69:37:
e0:68:cf:24:05:59:51:5a:00:30:84:1a:af:e6:e2:6b:a5:30:
b2:95:55:e4:02:cc:a1:ce:54:7f:72:1a:13:82:90:aa:7e:02:
26:57:9d:bc:3d:e5:9d:05:2d:92:29:f5:45:a9:55:e3:1e:b4:
56:10:42:58:44:68:ce:ba:04:46:d4:77:c7:bb:68:dd:a5:b3:
17:86:df:96:3a:55:28:0d:94:b2:1c:19:63:7f:a4:03:4b:69:
22:a5:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org