Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TS21MzUALXCwOSMKt_HgdrUewhs.roa
File: TS21MzUALXCwOSMKt_HgdrUewhs.roa (raw, json)
Hash identifier: 0W1skYoYClaWetkdE/Qaq2MIxgKoQ1lmqb78IhR+DJA=
Subject key identifier: 4D:2D:B5:33:35:00:2D:70:B0:39:23:0A:B7:F1:E0:76:B5:1E:C2:1B
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42D5EADEC3EEC68BE1AB2F8ED07029
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TS21MzUALXCwOSMKt_HgdrUewhs.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210707
IP address blocks: 2a0e:8f02:f03a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d5:ea:de:c3:ee:c6:8b:e1:ab:2f:8e:d0:70:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d2db53335002d70b039230ab7f1e076b51ec21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:a0:e3:46:d4:5e:28:d4:f1:50:11:fc:78:
3c:40:bb:c6:1d:c2:41:1c:1d:a7:10:0d:02:06:6d:
ff:e4:3d:16:4d:e5:4f:ae:79:b1:52:46:f3:3f:16:
81:c7:30:a8:16:b5:af:ba:63:a2:47:d5:7a:66:70:
6b:ba:14:3d:d9:a2:73:8a:87:96:48:f2:dd:d5:96:
80:02:3e:b3:29:24:ea:c8:0d:3c:de:42:bc:d7:13:
37:ee:0a:d0:f1:18:79:13:21:89:d0:08:9d:88:6e:
d2:98:0f:7b:d0:95:49:72:ce:b3:8e:9f:0d:55:ba:
ce:ce:75:01:68:32:4c:ab:cd:23:f0:76:89:27:1b:
eb:a5:8b:ab:58:c7:65:a3:62:58:ef:3d:8c:84:95:
60:14:f3:48:64:e1:ec:36:e5:35:3f:8d:92:b8:35:
7b:a1:03:d0:34:f8:20:75:f6:4c:80:9a:34:20:02:
dc:83:db:73:b5:c7:bc:39:90:c4:45:82:18:e8:80:
c8:ad:88:5e:5f:c3:d0:86:41:2b:83:a7:6c:40:57:
c4:c1:e6:e6:64:ef:a2:a5:c1:81:61:35:e1:16:f0:
cf:5b:6a:7a:29:72:c4:c2:b2:77:85:86:9d:37:20:
50:eb:6d:65:28:2b:4e:1d:35:18:4d:fa:4c:5d:c2:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:B5:33:35:00:2D:70:B0:39:23:0A:B7:F1:E0:76:B5:1E:C2:1B
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/TS21MzUALXCwOSMKt_HgdrUewhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f03a::/48
Signature Algorithm: sha256WithRSAEncryption
8d:47:9d:e0:42:fb:a1:3a:eb:92:0c:8b:27:de:b4:0a:b8:44:
d5:5b:d4:ac:f3:e6:c0:33:38:61:ac:b5:f4:14:fb:45:85:02:
48:b0:ce:16:59:26:6c:c2:e3:97:bc:d1:a9:d5:b3:a4:73:39:
0b:6d:09:be:4a:51:96:08:d1:c7:09:86:b3:b0:6f:9e:db:86:
5d:1f:dd:91:51:97:8f:6d:26:d4:29:74:b4:d0:30:db:76:fc:
0b:5e:17:38:84:6a:af:68:6a:e7:99:6b:10:b5:f5:e8:b5:5f:
7c:e7:48:d1:91:04:d7:46:44:35:73:1c:bd:6f:f6:fd:d7:eb:
39:3b:e6:dd:60:f5:ce:2e:bb:e4:80:23:13:c5:ea:13:b0:82:
40:2c:39:82:b5:f4:49:1b:dd:46:b2:d2:b4:05:91:45:50:1d:
b4:01:7d:12:c7:22:7b:0b:c9:80:db:cd:e7:b6:ee:33:59:ba:
1e:ae:6f:18:5b:64:3d:f9:43:72:24:78:1d:1e:cb:bf:f4:10:
c9:83:f3:6c:3c:3a:6c:d0:b2:12:99:d4:3e:31:31:ec:89:5c:
6a:ad:05:62:7b:83:a6:5f:2c:95:a3:ae:b1:c4:c0:ae:d4:7b:
48:11:98:9f:76:56:de:cd:1f:3a:ef:ce:49:35:17:dc:75:89:
f4:f5:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org