Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/3I4WyVyVc1jOptvdhexYEk6MAwo.roa
File: 3I4WyVyVc1jOptvdhexYEk6MAwo.roa (raw, json)
Hash identifier: jucc+nXtJSpFUzv+eLEiGW3YM7+3VIl13yU36vJ91qc=
Subject key identifier: DC:8E:16:C9:5C:95:73:58:CE:A6:DB:DD:85:EC:58:12:4E:8C:03:0A
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01856CCAE7BC01C579AB8315C48113D27956
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/3I4WyVyVc1jOptvdhexYEk6MAwo.roa
Signing time: Sun 01 Jan 2023 10:05:14 +0000
ROA not before: Sun 01 Jan 2023 10:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209018
IP address blocks: 2a0e:800:ff10::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e7:bc:01:c5:79:ab:83:15:c4:81:13:d2:79:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 1 10:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc8e16c95c957358cea6dbdd85ec58124e8c030a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:7b:f5:6b:2b:c1:a7:ca:08:b1:f7:3b:52:
1b:fa:a0:69:96:ff:46:6b:32:d8:1d:e3:37:71:32:
be:c5:19:e4:5d:7b:64:0b:38:33:cb:d1:c5:e3:a2:
0d:0b:ae:10:76:96:66:65:43:0c:7d:b4:98:12:6f:
8b:60:5b:d8:2f:a6:92:22:52:f2:8e:ee:91:47:b3:
2d:21:04:0a:fb:22:aa:bf:42:76:31:ee:3e:78:d4:
54:6d:a5:7f:05:4c:71:8e:a5:48:7f:6f:a0:d9:10:
cd:45:5d:99:af:d7:d4:dc:0a:0f:70:be:0d:65:82:
47:64:62:93:ac:d2:8b:bb:55:7d:eb:5d:01:20:b2:
a2:a0:b1:e0:e3:e6:68:28:53:46:14:e8:1a:2e:d4:
38:9d:5a:78:31:c4:a6:d5:73:34:0c:e5:8a:9b:e2:
ad:04:76:2e:10:3d:8a:d1:14:fc:08:87:cf:fd:50:
19:90:25:b3:65:16:68:98:cf:4b:a2:bd:c0:a4:72:
5c:0e:82:5e:cc:98:42:9a:6e:9f:da:9f:de:08:4a:
c4:c7:da:a6:d2:3d:d3:eb:e8:27:36:73:79:a0:eb:
f9:67:b8:81:fe:d4:7b:46:38:67:d8:4e:f9:b0:60:
74:4a:fa:91:7c:93:f0:2c:75:29:7b:10:db:33:d2:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:16:C9:5C:95:73:58:CE:A6:DB:DD:85:EC:58:12:4E:8C:03:0A
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/3I4WyVyVc1jOptvdhexYEk6MAwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:800:ff10::/44
Signature Algorithm: sha256WithRSAEncryption
a9:ca:85:b6:33:de:e2:65:2e:14:27:f7:45:14:86:39:57:3e:
cd:09:f0:73:46:54:c5:01:be:c9:d5:9c:5b:8d:fb:41:77:94:
7f:e0:a4:e0:37:08:24:6a:d1:b4:23:25:8f:c4:f8:b4:a0:68:
56:53:4f:0f:ca:91:30:dc:2c:db:ab:f3:63:37:02:0c:df:12:
43:4d:c2:92:04:41:1b:28:00:a5:ff:c8:04:16:5d:3f:16:53:
02:e4:d6:09:c6:3a:c0:62:9b:c6:f7:67:8c:dd:d5:03:1f:e8:
54:a7:37:97:84:f8:21:c2:af:67:f3:23:19:9c:22:46:5c:8b:
b9:6b:bc:ff:f4:c7:9f:0e:e7:b7:19:18:f0:94:0b:2d:ce:f2:
56:2e:5c:bc:5b:9a:b1:e9:ca:31:0d:83:95:a3:ef:8b:65:27:
73:74:4c:45:dc:ca:a3:af:80:b9:a5:3e:83:bf:f9:d5:b0:52:
26:b5:2a:70:1a:3b:8b:fb:40:d3:9e:a0:04:a6:02:50:80:41:
ea:76:a2:4d:81:50:c3:82:1f:0a:8a:df:67:80:17:ed:52:1d:
f3:eb:47:79:96:00:43:68:b8:9c:cb:58:93:30:da:a5:9f:cb:
31:a7:c8:c3:70:cb:74:aa:c7:4e:93:13:80:cc:72:77:9c:4b:
bc:6b:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org