Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/s4RbQWh17usz5sFc7XuE_JflNJ4.roa
File: s4RbQWh17usz5sFc7XuE_JflNJ4.roa (raw, json)
Hash identifier: uPVVGAKsy/BFbXr//aRRKKMgD+IVeMQX2p5pcKZCcCQ=
Subject key identifier: B3:84:5B:41:68:75:EE:EB:33:E6:C1:5C:ED:7B:84:FC:97:E5:34:9E
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CAF6236662D9729A2F97C4E09763B36A9
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/s4RbQWh17usz5sFc7XuE_JflNJ4.roa
Signing time: Thu 28 Dec 2023 07:44:58 +0000
ROA not before: Thu 28 Dec 2023 07:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200240
IP address blocks: 2a0a:280:3200::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:62:36:66:2d:97:29:a2:f9:7c:4e:09:76:3b:36:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Dec 28 07:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3845b416875eeeb33e6c15ced7b84fc97e5349e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:0e:7f:1a:d5:36:71:cb:f8:dc:d5:da:5b:
fb:d7:d4:cc:d6:97:34:9a:2f:72:7e:fc:5f:90:bd:
2e:8c:ba:a8:c9:fc:de:f8:b0:57:33:7d:34:2c:ee:
8e:4f:3d:be:1d:58:d9:48:83:9b:e1:f9:5c:d5:e4:
10:e1:5e:95:32:f4:2c:c1:c2:1e:85:b0:da:c4:f7:
6b:ec:12:c8:87:0e:61:80:54:e7:b6:28:40:36:8a:
6b:3d:76:5a:a6:e3:7d:19:f3:bf:60:29:79:1b:af:
ef:8a:df:7e:e8:db:66:48:b1:3a:03:31:8a:e4:05:
ed:33:41:ac:77:12:c4:0e:67:9b:c0:9f:f7:fe:0f:
59:1c:a9:6b:7c:33:04:5c:52:b2:7f:8b:fd:3b:37:
04:ad:1e:d7:2f:a7:3b:22:26:1d:a0:86:42:58:26:
b3:24:f2:7b:f6:74:0f:ea:20:56:ff:ec:e7:af:33:
ff:bb:c3:dc:09:65:90:b1:c7:fb:b7:d7:96:30:71:
75:7b:02:d7:ab:88:f6:73:ba:0a:1d:81:e1:8d:b4:
ab:4a:3b:bd:71:82:dc:20:4c:00:17:0c:dd:31:9b:
6f:fe:0e:3a:52:cb:b6:68:96:0c:a8:9c:c4:a9:79:
e3:7e:37:1b:73:8b:40:0c:f7:93:e8:b9:fc:62:a1:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:84:5B:41:68:75:EE:EB:33:E6:C1:5C:ED:7B:84:FC:97:E5:34:9E
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/s4RbQWh17usz5sFc7XuE_JflNJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:3200::/40
Signature Algorithm: sha256WithRSAEncryption
84:31:5d:6c:1e:3c:25:b6:98:8d:5b:08:50:be:98:6d:04:ce:
27:44:60:0d:c8:b1:e1:ba:5f:a4:5b:23:a7:05:cb:a5:95:fb:
87:fb:c4:7c:9e:43:1d:f9:63:87:c1:e4:4e:3a:96:6e:f0:91:
a8:37:a3:d1:a2:d9:a9:c5:1f:2f:3c:e3:c8:8b:0f:b6:69:03:
95:6f:9f:e5:8e:dd:a1:6b:d5:72:9e:7d:48:80:41:42:09:1d:
69:f0:d0:57:1f:32:fa:cb:16:39:dc:6e:23:a8:4f:ae:92:7a:
18:60:0b:01:86:ed:d4:84:33:48:38:0f:35:0e:6c:ad:41:29:
18:ce:ce:61:b4:9a:63:4f:65:fc:0e:bd:c3:7a:03:1b:fe:91:
4b:ad:3c:1b:a5:ce:ae:ba:ea:f4:ba:02:ba:f9:74:2d:9a:c7:
5f:4f:d4:67:72:b6:a4:22:09:04:2c:7a:d8:62:f8:c9:ee:82:
cc:8e:9c:69:69:c1:86:15:6f:bf:96:80:72:93:16:2f:39:33:
6e:45:a8:15:78:d7:f9:ed:53:74:66:d8:77:90:2a:ca:03:9d:
e9:c1:fe:66:75:d5:42:9a:58:ba:23:fb:d1:74:2e:13:0b:88:
0e:d1:e6:5c:ea:7b:25:b5:22:2a:f4:61:0e:1a:2b:6a:ab:21:
a5:99:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:22 2024 by rpki-client on console-fra.rpki-client.org