Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/82aEckbGPu3oWUhVKspIqa4s2ac.roa
File: 82aEckbGPu3oWUhVKspIqa4s2ac.roa (raw, json)
Hash identifier: PuG8aBFuVipK7nc41xdVg/Qh02q1nucs95nawdx1SiU=
Subject key identifier: F3:66:84:72:46:C6:3E:ED:E8:59:48:55:2A:CA:48:A9:AE:2C:D9:A7
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 0189EF534268B442569D3B0A625CE9DF40B2
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/82aEckbGPu3oWUhVKspIqa4s2ac.roa
Signing time: Sun 13 Aug 2023 14:35:58 +0000
ROA not before: Sun 13 Aug 2023 14:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4427
IP address blocks: 2001:67c:978::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 13 Aug 2023 15:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:53:42:68:b4:42:56:9d:3b:0a:62:5c:e9:df:40:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Aug 13 14:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f366847246c63eede85948552aca48a9ae2cd9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:ed:4d:4a:97:4b:83:c4:0c:9c:56:b9:96:
8f:5b:6e:18:5c:21:c0:03:af:55:3c:aa:59:f8:1b:
0b:59:51:f8:88:4a:34:c1:5e:78:2a:89:6f:bd:77:
5e:08:21:ea:35:76:6e:33:62:00:3f:06:e9:fe:1a:
70:dd:30:ca:7d:ab:19:83:56:5b:72:78:74:f9:79:
17:ce:75:49:9d:40:8c:db:64:7d:eb:2a:67:a7:ee:
b4:d3:66:49:cd:17:c0:65:e2:10:ac:e8:f2:b1:21:
f3:04:48:d6:95:c4:b0:a3:c7:81:26:84:98:45:e5:
3e:84:36:ff:f0:e0:28:83:a2:2b:ab:bc:da:3b:f1:
9e:e2:12:1e:c3:53:a0:88:9f:c2:33:1a:7d:a9:20:
1d:35:e2:b2:0f:4c:d6:fe:a7:a8:9e:31:2a:7a:83:
ee:a4:47:df:3c:f8:a1:fe:20:90:e3:a4:1c:8c:f0:
73:19:a4:af:f5:8c:54:46:af:0e:fb:1c:1b:49:58:
cd:4d:37:7b:a9:4e:26:61:49:68:be:8d:07:8c:dc:
ae:b5:cc:67:90:07:aa:33:7a:23:3e:d6:07:07:da:
f6:2f:10:da:45:50:88:d2:10:8a:3b:2a:5b:e0:dc:
57:59:e0:77:9b:ae:7d:91:52:c1:3f:7a:51:83:e1:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:84:72:46:C6:3E:ED:E8:59:48:55:2A:CA:48:A9:AE:2C:D9:A7
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/82aEckbGPu3oWUhVKspIqa4s2ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:978::/48
Signature Algorithm: sha256WithRSAEncryption
46:05:a6:8c:f6:5c:93:89:24:9f:93:85:b9:e0:14:97:33:79:
78:8e:57:c6:c0:5b:31:d7:e0:f2:f2:1c:f3:89:0a:f0:1b:e6:
99:33:b7:2c:a3:ec:e5:8b:0c:3e:75:24:0b:7c:0c:81:d7:a5:
cb:25:c8:53:9d:5c:19:ec:31:10:aa:09:9e:f4:0f:ca:f7:e7:
94:89:4d:8b:69:eb:94:36:95:0c:50:08:a1:87:b7:44:13:7e:
90:fa:d0:d6:2e:c3:17:4d:92:43:6c:67:6c:7f:fb:8e:c5:3f:
ea:af:84:41:34:0b:9e:d2:21:61:95:eb:92:19:7f:13:e8:3c:
ad:ff:e7:c6:e7:1d:c8:08:3a:0c:c6:1d:2f:c7:4f:0b:15:a4:
51:9a:68:df:d4:cf:d5:b4:51:a7:f8:0c:fd:3b:a4:51:41:ed:
ee:e3:ed:fc:1c:4e:7b:cb:bf:a6:8b:cb:ff:b6:e8:50:6f:7d:
d5:4d:a7:ea:a6:be:da:e3:75:1f:5e:2b:ab:07:31:39:da:93:
c5:88:fe:0b:3e:be:e7:0d:cc:3e:f2:fe:15:d7:88:36:b1:ba:
f5:02:eb:3f:46:9b:4e:5e:9b:f6:3f:78:0b:e6:f5:c6:f6:7d:
3b:b2:ec:1c:af:be:9e:be:d6:3b:f6:ab:1c:cd:e9:e4:c6:4c:
2a:b9:57:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:40 2024 by rpki-client on console-fra.rpki-client.org