Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OMmLEnLzDE7nZsPFUGHT_bDjFFE.roa
File: OMmLEnLzDE7nZsPFUGHT_bDjFFE.roa (raw, json)
Hash identifier: w41hkOoBevYXXtcVuxEZRI5e+6r02ME60Ys+si++j+4=
Subject key identifier: 38:C9:8B:12:72:F3:0C:4E:E7:66:C3:C5:50:61:D3:FD:B0:E3:14:51
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42DBF7628350EFA1AE19EDD13B84FA
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OMmLEnLzDE7nZsPFUGHT_bDjFFE.roa
Signing time: Sun 01 Jan 2023 21:35:30 +0000
ROA not before: Sun 01 Jan 2023 21:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211479
IP address blocks: 2a0e:8f02:f022::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:db:f7:62:83:50:ef:a1:ae:19:ed:d1:3b:84:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38c98b1272f30c4ee766c3c55061d3fdb0e31451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:ee:85:74:79:26:0e:d2:d2:ba:53:7f:51:
8e:0a:f8:e3:9a:1e:06:6f:19:10:c6:8b:70:c2:22:
2c:5e:a4:b3:f4:78:83:dc:f3:54:f6:c2:50:e1:44:
aa:fe:cf:51:34:f0:49:ac:bc:11:3e:d9:ff:5d:89:
ee:5d:cf:f2:c4:b3:c6:bc:0b:7f:1a:6e:26:52:80:
b1:68:6f:0f:4d:45:05:c7:54:17:cf:cd:36:1c:c1:
a0:ba:67:6d:1d:12:e1:db:07:3b:23:05:17:ce:d8:
e5:9a:5f:4d:c6:96:ad:16:28:cd:e5:d1:47:80:e9:
0c:09:2b:3a:23:27:18:2d:4e:d6:40:d9:be:fb:80:
e7:6c:92:da:b0:23:d4:af:e7:09:33:3b:39:65:a4:
90:d8:d7:3f:30:6b:af:1d:e2:84:e1:fd:f3:d7:f8:
f6:c7:4a:61:cd:0d:54:e5:ed:8b:43:0c:21:5c:d8:
e1:1f:a1:be:f3:fa:5f:7b:83:a5:cf:f9:ae:6c:a4:
2f:1f:99:d2:40:8f:7f:7a:da:62:a1:7b:8f:d6:13:
b3:26:8f:b1:9f:7b:63:62:1d:24:de:a9:27:39:4e:
76:51:6b:17:83:34:3d:02:61:e9:7a:9b:75:7b:b4:
0d:16:1d:69:21:17:72:09:96:e8:f9:69:0b:22:8d:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C9:8B:12:72:F3:0C:4E:E7:66:C3:C5:50:61:D3:FD:B0:E3:14:51
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OMmLEnLzDE7nZsPFUGHT_bDjFFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f022::/48
Signature Algorithm: sha256WithRSAEncryption
7a:5d:f0:3f:fb:0c:eb:4e:d1:07:65:41:e9:28:5a:c1:ba:2c:
da:05:d0:40:8f:66:16:84:b5:1e:2d:96:66:13:9d:31:1c:b9:
03:b2:1f:ea:c1:68:39:d5:6b:71:8e:1e:9c:53:69:ab:9d:15:
d1:45:73:78:b1:93:58:00:91:96:f1:64:5a:b6:02:f6:1f:dd:
9b:ea:41:c6:35:b0:94:47:31:ad:56:19:e8:48:f3:c6:1e:4e:
91:cc:a5:14:b3:57:7c:d8:26:e8:a6:55:78:89:8d:fe:33:a2:
e7:27:8b:89:79:f2:b5:15:29:e7:2d:bb:06:87:aa:25:50:af:
9e:d0:2f:81:64:70:51:22:da:90:4c:ef:11:c2:7b:94:cd:33:
ec:ce:70:8c:3d:ee:a6:00:3c:35:f9:37:1a:4a:a8:e4:ce:3b:
22:7f:c2:e9:93:0f:47:cc:53:88:6a:17:04:b1:dd:79:67:e0:
ec:4d:d3:b8:6c:21:c9:31:a1:3d:f4:09:e2:6e:e0:cb:a6:65:
1e:7a:fd:b5:05:4e:3d:fe:da:af:b6:ca:88:f9:5a:88:a3:07:
69:77:35:b8:d0:6c:31:51:64:c9:42:a0:11:a2:94:72:12:5d:
e1:50:df:3a:ca:fe:66:28:a2:d5:d9:1d:b8:7e:c8:64:00:97:
35:06:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org