Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/nhaZ6i1r6d_aS-VP_OV53d_F3CQ.roa
File: nhaZ6i1r6d_aS-VP_OV53d_F3CQ.roa (raw, json)
Hash identifier: D7cr2HfVO+ecckIFNdQVTUoej3LlQswHGbfJt1twRv0=
Subject key identifier: 9E:16:99:EA:2D:6B:E9:DF:DA:4B:E5:4F:FC:E5:79:DD:DF:C5:DC:24
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42E6F3923452058A389A242493F613
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/nhaZ6i1r6d_aS-VP_OV53d_F3CQ.roa
Signing time: Sun 01 Jan 2023 21:35:33 +0000
ROA not before: Sun 01 Jan 2023 21:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212191
IP address blocks: 2a0e:8f02:20b0::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e6:f3:92:34:52:05:8a:38:9a:24:24:93:f6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e1699ea2d6be9dfda4be54ffce579dddfc5dc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:19:41:1a:1b:8a:a5:5b:fb:a9:65:15:37:
59:19:21:d7:a3:2d:1c:8e:91:1a:6e:89:7c:c3:d8:
52:dd:4e:30:03:01:6a:c1:8c:db:a0:ea:62:df:82:
c6:49:05:24:3f:c5:23:9b:a9:86:90:e3:db:20:67:
2a:ea:bc:cb:f5:0c:fc:c7:a7:ba:fd:59:ff:ef:68:
41:3d:96:cb:01:5d:58:44:23:43:20:a4:04:20:e4:
fd:d6:66:51:f5:2f:3b:eb:ab:8f:b0:b2:33:90:87:
e7:43:f4:28:02:9e:04:35:75:38:68:b6:c7:12:8d:
d2:90:18:9a:fb:30:8f:a1:63:cc:0a:e7:47:07:45:
3f:85:6f:aa:4b:82:47:5a:8a:e9:f5:d8:96:b8:52:
29:77:f0:a6:2d:f6:c3:e7:01:13:54:62:75:2d:7b:
78:c2:6d:16:e9:45:a3:0a:ac:01:a2:c6:17:13:5e:
43:14:6a:c4:12:f2:de:e8:42:60:95:eb:ae:c7:7d:
ec:60:a4:43:14:59:f5:00:fb:b0:a0:c2:be:19:3b:
33:c1:2c:29:bb:a7:f7:a0:45:22:00:38:db:0d:61:
74:8f:07:aa:c9:bf:34:9a:1b:ef:99:00:cf:fd:e8:
52:36:e8:b7:78:1a:ce:69:52:ee:03:fb:eb:c5:b2:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:16:99:EA:2D:6B:E9:DF:DA:4B:E5:4F:FC:E5:79:DD:DF:C5:DC:24
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/nhaZ6i1r6d_aS-VP_OV53d_F3CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:20b0::/44
Signature Algorithm: sha256WithRSAEncryption
7b:09:61:85:fd:7a:8d:ed:2b:18:ea:3b:68:63:d5:fd:3d:72:
f5:5a:39:a0:8a:63:0d:93:33:8e:8c:53:21:3f:6a:6c:98:19:
3a:75:78:4d:6f:47:94:25:3e:6e:c0:77:f6:96:14:8e:54:5a:
78:cf:50:f4:b2:5e:af:f2:56:60:bc:62:bb:da:16:58:9f:88:
1a:cb:42:4f:e6:b1:ef:c8:f7:e5:9e:8d:60:d3:96:cf:22:8c:
0f:e6:e4:e0:2e:03:0e:6a:20:e1:b3:09:ff:1e:d2:7f:39:5b:
14:4c:63:54:a8:5f:1a:ff:0b:d1:9c:4a:e3:71:47:36:61:78:
e9:37:96:86:70:1a:c2:7c:0e:ce:a2:af:52:b1:16:97:b7:ac:
ed:20:ce:36:1f:55:70:7a:24:ab:69:72:0d:1e:02:4b:c4:0c:
8a:b8:12:e6:d4:49:b6:45:46:1c:0c:8c:38:7b:8f:fb:2b:32:
37:25:3f:a3:69:4d:d8:c2:35:9c:2a:a8:26:07:2b:c4:42:66:
b4:88:07:29:3c:a5:96:03:5d:c4:f3:b7:49:0f:4e:b0:09:9b:
b7:19:77:18:13:11:a7:2c:19:12:0c:d1:84:bf:c7:9f:fe:2a:
dd:56:46:d5:af:63:aa:b2:b1:ec:fe:e7:e4:4a:13:c6:12:28:
4e:2e:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org