Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PuMlkZNfT8LOpN6A6MQYMgvvMEw.roa
File: PuMlkZNfT8LOpN6A6MQYMgvvMEw.roa (raw, json)
Hash identifier: QXzERa2neIlbID26lQiBdqBsErpi/ARN8ImXvuNqkHM=
Subject key identifier: 3E:E3:25:91:93:5F:4F:C2:CE:A4:DE:80:E8:C4:18:32:0B:EF:30:4C
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E3B9AC5131F4BDAE7010290573A4D
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PuMlkZNfT8LOpN6A6MQYMgvvMEw.roa
Signing time: Mon 02 Jan 2023 06:14:44 +0000
ROA not before: Mon 02 Jan 2023 06:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39792
IP address blocks: 2a0c:b641:1c0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:3b:9a:c5:13:1f:4b:da:e7:01:02:90:57:3a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ee32591935f4fc2cea4de80e8c418320bef304c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:6f:c1:6b:82:30:63:03:88:cf:a9:da:05:
7c:db:40:de:ea:45:e7:9b:91:67:89:5e:c6:b7:82:
c5:18:e1:b5:fe:ea:78:00:87:c9:5b:4c:21:0b:09:
bb:0c:0b:28:1c:15:32:6d:18:6f:33:85:00:d4:dc:
13:b6:ed:b2:de:4f:db:ed:13:73:71:2c:2e:8d:4d:
f1:04:d9:91:04:fe:0b:5d:6f:73:71:ec:77:a2:f2:
3f:41:ab:41:ff:6e:db:ad:51:74:78:93:60:ad:30:
0f:e2:cb:7d:57:f4:86:16:0b:c1:11:e3:85:17:92:
a9:b7:fa:68:fc:4a:91:0b:ba:3b:a9:e1:fc:a5:31:
a3:12:16:d1:54:6a:f8:1d:73:dc:7d:41:df:c9:4d:
05:d2:43:d5:a7:40:b5:cb:a3:3e:f8:07:70:31:65:
53:3a:48:b1:8e:b3:42:5c:c1:88:62:12:ac:79:46:
85:16:c8:77:13:6e:37:1b:ae:dc:1b:93:fd:34:5a:
04:d6:25:a4:b6:04:43:f7:ee:e1:48:ba:9a:c8:a6:
89:7b:67:6d:61:09:5f:6b:26:0e:34:f4:f1:44:84:
9b:0c:ae:fd:52:04:e2:80:6e:68:96:52:f2:95:69:
79:41:d4:80:98:1a:04:de:85:f6:7e:ba:86:9a:8c:
d0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E3:25:91:93:5F:4F:C2:CE:A4:DE:80:E8:C4:18:32:0B:EF:30:4C
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/PuMlkZNfT8LOpN6A6MQYMgvvMEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
87:23:1e:fc:35:a8:c1:6a:0a:e4:7f:a6:87:73:fe:2c:df:bf:
5b:ef:72:ea:84:f2:6b:aa:4e:a7:ba:ed:27:a6:c1:6e:e0:37:
8f:75:20:a7:20:f7:16:e0:11:c4:dd:4c:f4:4f:a9:bf:32:66:
c3:42:f9:43:23:a9:4c:0f:a6:ae:e1:07:bb:21:aa:34:42:e5:
ce:63:47:4f:7f:95:78:80:d3:54:93:16:77:51:c2:d1:8a:c9:
36:bf:d2:87:49:26:e4:ab:02:fc:d2:40:db:9d:21:a3:dc:68:
9a:79:27:55:ce:75:db:52:c7:3e:50:22:45:77:40:da:60:f4:
d6:b0:55:50:d6:2c:11:cc:d6:12:2a:ac:30:23:fe:0d:5f:47:
42:fe:bb:e3:68:29:8d:9b:91:7b:8b:48:03:3a:f4:cb:90:a1:
95:bb:9e:77:18:8b:63:e8:cc:4b:fc:b6:4f:54:0a:6b:f9:0b:
2c:f8:e5:e9:3b:d5:69:64:d5:72:67:6c:b8:ec:24:09:3a:08:
f2:f5:f5:77:c4:f8:e8:e1:93:2b:df:bd:aa:46:93:77:5d:31:
00:ba:53:2a:ce:da:58:69:8d:86:ec:5f:d0:3a:b9:f9:d5:4e:
7d:9d:32:13:2e:1a:da:f8:3a:0f:6e:a9:28:f5:39:e2:8b:67:
46:dd:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:06 2024 by rpki-client on console-fra.rpki-client.org