Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OEXbpB-RJw_BIOq1IZ3IKGsvg6M.roa
File: OEXbpB-RJw_BIOq1IZ3IKGsvg6M.roa (raw, json)
Hash identifier: fnsM00k7vgePM/m9Pcr3Xifjs18ipNQmzSpgcPLad+U=
Subject key identifier: 38:45:DB:A4:1F:91:27:0F:C1:20:EA:B5:21:9D:C8:28:6B:2F:83:A3
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0188424A98A13F8FA690FD4EA64FFE8518CA
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OEXbpB-RJw_BIOq1IZ3IKGsvg6M.roa
Signing time: Mon 22 May 2023 07:09:24 +0000
ROA not before: Mon 22 May 2023 07:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198797
IP address blocks: 2a0e:8f02:f05b::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:4a:98:a1:3f:8f:a6:90:fd:4e:a6:4f:fe:85:18:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: May 22 07:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3845dba41f91270fc120eab5219dc8286b2f83a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:31:67:1f:46:18:86:74:4a:e3:b4:93:40:ee:
26:9d:9b:63:55:95:7a:82:2d:1e:9e:6f:2c:89:a3:
da:0c:91:4d:95:89:ec:e5:76:74:4d:25:bb:1e:de:
27:db:f1:92:a6:4d:a4:7c:ea:ac:ad:b1:26:a7:61:
ac:1b:fe:60:77:8b:df:b5:04:b5:fc:45:cf:df:16:
63:1d:aa:50:26:c3:2c:d7:d8:92:70:af:ca:d3:06:
e7:69:de:0c:ae:84:6a:9b:d4:e5:d4:3c:23:7d:9f:
8e:6f:0a:62:4a:02:99:06:9f:1f:4c:ce:48:65:55:
59:73:1c:9e:50:10:ed:ef:dd:b3:a1:02:e6:a2:26:
26:6a:af:ca:9f:42:67:89:58:f9:9b:41:c0:4f:fe:
9f:6a:02:8c:1f:67:7d:c9:2e:2a:81:3c:c6:2e:8c:
b3:69:a6:e0:03:c4:9c:41:69:9d:ac:21:8b:53:fd:
7e:89:4c:82:7b:5c:52:d1:c0:e3:6b:f4:c8:99:13:
d6:03:16:42:e2:a6:87:b0:d2:08:d8:74:3f:3c:77:
4d:94:96:55:a6:3b:c2:2b:bb:ab:f1:01:60:53:f4:
71:9f:cf:b1:4f:b7:d0:ac:f9:e1:d0:58:d0:dc:86:
5c:2d:05:c1:05:97:e5:03:8e:11:0c:40:b7:ac:df:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:45:DB:A4:1F:91:27:0F:C1:20:EA:B5:21:9D:C8:28:6B:2F:83:A3
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OEXbpB-RJw_BIOq1IZ3IKGsvg6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f05b::/48
Signature Algorithm: sha256WithRSAEncryption
52:86:fc:ad:59:d9:b4:b3:f6:82:d9:3f:22:2a:8b:2f:74:a1:
53:54:6e:a0:45:71:ed:ed:91:d5:05:d1:8d:6f:86:ba:75:70:
0d:4b:5c:aa:dc:60:a1:26:92:68:c8:1d:c0:20:38:bc:a4:3d:
80:87:c0:f9:49:fa:f7:a7:99:a5:1c:b4:0a:85:30:1c:69:19:
62:2b:4f:37:13:92:5d:d2:00:c7:47:4b:09:c4:80:4a:16:0a:
c3:1d:a0:b8:7f:ab:cb:d4:28:97:0d:fe:04:55:5c:9a:ca:c3:
76:e9:f1:a3:a1:34:c8:a6:b7:9e:b3:be:45:9e:cc:e9:91:0b:
b4:48:57:42:3a:e8:8c:da:f0:31:31:00:99:33:32:b0:44:20:
e6:c8:cd:a8:f0:3f:df:b1:12:09:52:ce:25:ed:89:ec:66:e9:
b0:97:9f:de:44:98:cb:6b:bc:d0:43:36:19:81:f8:05:a6:5a:
c7:08:ee:c8:33:02:15:0d:91:94:79:c9:45:0f:4e:4a:5e:77:
9a:3a:af:39:7c:65:76:09:0b:d6:fe:f5:60:21:24:38:7e:cc:
be:7c:d4:18:60:de:11:25:13:94:51:a0:88:27:55:1b:8e:26:
4c:27:a5:ca:9c:c2:15:c4:bc:c7:b9:b2:97:68:3b:dc:fb:10:
25:aa:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org