Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/vNo70oWUWGhcChvhWX26ajCRNeY.roa
File: vNo70oWUWGhcChvhWX26ajCRNeY.roa (raw, json)
Hash identifier: 5V64UDxxmP2U9EY1CzxEkFz/BNr5l1WmPq8Ho0txu2c=
Subject key identifier: BC:DA:3B:D2:85:94:58:68:5C:0A:1B:E1:59:7D:BA:6A:30:91:35:E6
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 01856EF8E813B15AB072C73E338054B5EDBB
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/vNo70oWUWGhcChvhWX26ajCRNeY.roa
Signing time: Sun 01 Jan 2023 20:14:44 +0000
ROA not before: Sun 01 Jan 2023 20:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210616
IP address blocks: 2a0e:3247:8001::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f8:e8:13:b1:5a:b0:72:c7:3e:33:80:54:b5:ed:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jan 1 20:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcda3bd2859458685c0a1be1597dba6a309135e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:96:66:ae:7b:05:8d:c2:d4:b8:81:58:ff:
be:c4:13:70:d2:d1:5c:9f:3e:61:d5:fa:f1:34:9e:
dc:90:d7:94:b3:13:57:27:ed:94:ff:fc:1e:b4:97:
22:81:31:3d:66:62:06:78:c1:1a:64:48:dc:e2:db:
4d:74:d4:90:d4:c3:b3:2a:65:8a:b4:05:b4:e5:cd:
34:27:89:77:ca:07:37:e1:8c:82:44:64:9f:fd:e7:
1e:25:18:b5:60:6c:8a:14:f7:22:b7:41:2c:fb:7c:
48:d6:ad:5b:30:2f:a2:6d:4f:eb:8e:56:c5:08:af:
39:37:5e:ef:46:f3:37:53:72:67:44:f7:af:6b:da:
a3:4b:26:e8:6c:50:62:f1:7c:59:51:23:86:80:0f:
80:a6:5c:f3:a9:f2:a3:9c:9d:3d:f1:d4:91:9d:0f:
9d:ee:bf:4a:eb:7c:0c:e7:e6:89:70:05:8f:ff:25:
c3:6c:69:0d:5d:39:50:cf:ea:0a:c7:17:70:d3:95:
75:29:17:c4:58:34:17:ab:7c:05:30:85:c0:ff:b1:
7c:86:b8:cf:57:09:a9:71:2d:bd:84:1e:db:23:4f:
82:72:40:e7:31:e9:f0:36:af:6b:12:54:fd:af:7d:
12:04:40:2f:3f:18:83:2f:06:84:32:49:28:5a:8c:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DA:3B:D2:85:94:58:68:5C:0A:1B:E1:59:7D:BA:6A:30:91:35:E6
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/vNo70oWUWGhcChvhWX26ajCRNeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3247:8001::/48
Signature Algorithm: sha256WithRSAEncryption
19:d8:77:64:65:8d:2f:0f:75:9d:72:50:0e:1a:bb:47:a3:5d:
b5:09:8f:ce:3b:b1:7d:69:70:9f:20:74:99:4a:b8:34:49:d7:
1a:cc:ed:c4:d1:8e:06:60:5b:2c:af:f4:c1:bf:b0:1a:4a:2d:
58:d7:83:2f:80:8b:75:ac:c4:b8:19:08:b1:23:3a:c1:a9:a1:
cd:e1:8b:73:70:d6:ad:46:93:b4:cc:44:78:3c:54:61:21:19:
bf:f8:e0:f4:2d:e1:07:61:c2:7d:48:68:2b:35:6e:47:f9:1a:
48:12:66:7b:9e:9c:84:a7:af:81:6e:e4:5e:ec:e9:4f:9a:a4:
2b:1d:c5:be:ba:14:0f:28:4d:30:4c:4a:ee:66:de:18:32:6a:
60:cf:19:1e:40:96:5b:e3:95:2c:11:71:ed:2f:fd:42:d8:81:
20:78:a2:7b:87:2d:56:06:73:29:58:af:67:05:66:20:21:79:
e1:24:aa:c1:ef:63:9f:7c:ae:aa:49:35:40:af:b6:52:f1:5c:
fe:f5:59:1c:84:6f:55:f8:9b:28:48:68:33:64:2a:15:21:41:
b3:1e:00:77:05:45:f9:25:34:d5:e8:08:2f:13:0f:36:38:de:
5c:70:4f:84:96:f1:84:a0:22:4a:42:3e:64:35:0f:76:50:51:
46:83:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org