Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4yZMFIGjIw9X1oJdeXoKdoM7r4Q.roa
File: 4yZMFIGjIw9X1oJdeXoKdoM7r4Q.roa (raw, json)
Hash identifier: YjlRo1oYIRwzyFvQH+69GdOCjBjgVd4OsdPksokFffI=
Subject key identifier: E3:26:4C:14:81:A3:23:0F:57:D6:82:5D:79:7A:0A:76:83:3B:AF:84
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018C8C20F0F0AD861B6F14D1C7E5AF5140DD
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4yZMFIGjIw9X1oJdeXoKdoM7r4Q.roa
Signing time: Thu 21 Dec 2023 11:26:58 +0000
ROA not before: Thu 21 Dec 2023 11:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215829
IP address blocks: 2a0e:8f02:f062::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:20:f0:f0:ad:86:1b:6f:14:d1:c7:e5:af:51:40:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Dec 21 11:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3264c1481a3230f57d6825d797a0a76833baf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:77:3b:ff:c7:f5:06:72:1a:b4:11:64:c7:
09:95:ff:af:41:27:72:2c:99:4a:ad:71:86:fe:74:
63:7a:5a:d2:0a:d7:4a:25:59:91:e5:ac:f2:43:cf:
6e:93:6a:79:74:b7:7b:d7:dd:2e:54:bb:7a:6c:92:
db:00:38:d9:03:66:10:67:b9:12:53:71:1b:f3:42:
2d:ed:2d:fe:46:5f:4b:c3:ae:c4:9c:61:35:4b:c8:
64:86:df:35:16:22:3e:4c:84:37:da:c1:44:c0:f2:
d8:1d:48:4f:50:aa:4d:d1:bb:b3:24:ef:47:37:b9:
84:da:09:74:f2:28:b5:01:cd:96:47:05:a9:ec:b3:
4f:3b:03:9c:65:44:af:03:f0:ff:05:11:37:14:3e:
60:26:b6:63:80:66:00:f3:fd:be:72:d9:f2:8f:04:
82:6d:41:64:f8:bd:3c:7e:f8:d4:4a:4e:5c:dd:23:
06:d3:e0:40:a2:75:b8:b9:de:18:ba:0c:2c:f9:3f:
a2:4e:73:b6:1d:83:c3:1d:0d:79:99:4d:07:64:38:
46:12:c2:a4:b9:3d:83:81:b0:1a:aa:50:74:ee:ac:
e0:1b:bd:4a:5b:03:f2:5c:b3:c0:83:e5:b5:16:17:
8c:cf:dd:61:62:c0:81:46:c0:4f:4a:2b:03:84:69:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:4C:14:81:A3:23:0F:57:D6:82:5D:79:7A:0A:76:83:3B:AF:84
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4yZMFIGjIw9X1oJdeXoKdoM7r4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f062::/48
Signature Algorithm: sha256WithRSAEncryption
0e:22:25:cd:04:77:00:4a:36:6a:78:b7:2c:a6:51:0e:bd:e7:
42:90:36:6c:78:19:1a:2c:6c:0d:6a:15:d8:00:7b:73:2a:b4:
2e:59:a3:24:6d:85:d6:59:15:da:94:75:7b:1c:fc:3d:84:b9:
8a:d4:92:5a:7a:2b:f8:ec:31:af:e7:aa:51:79:d4:a2:09:e1:
b5:bf:3f:40:38:cf:b1:2a:75:ac:05:e0:93:a5:b1:d1:54:61:
fc:7f:14:3c:85:e2:d0:ae:0c:cc:11:a7:90:9d:e7:9f:a1:f5:
1e:64:29:bb:f1:a2:66:37:ad:4d:a0:06:1f:68:f9:1d:18:e4:
1a:bf:b8:05:7e:4a:f8:15:79:b3:fc:a5:bb:0e:f2:4d:0e:b2:
74:71:95:0d:02:0b:59:2f:f4:d9:0a:c5:c3:73:da:6d:6d:98:
2d:44:72:ad:22:7d:86:1a:22:ad:d3:7b:fa:95:f9:2a:13:95:
43:3c:26:2e:05:30:e5:dc:1a:c7:2c:4f:32:c1:7e:7f:3b:39:
88:84:23:a7:5f:74:8b:57:bc:cd:2e:78:24:3b:af:20:9f:1d:
2d:8b:cf:a7:86:03:de:f2:7a:77:15:08:dc:b1:ee:70:fa:2d:
7f:2a:83:46:8f:af:bc:60:42:06:03:d7:0a:f9:01:15:6f:c6:
6e:81:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org