Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/DKXYcvlVtoRxXvDfPsBHQ944I-Y.roa
File: DKXYcvlVtoRxXvDfPsBHQ944I-Y.roa (raw, json)
Hash identifier: zPylWDCadraETz1/IO8PNjyFdlqmmwFbtLgnueyNfa0=
Subject key identifier: 0C:A5:D8:72:F9:55:B6:84:71:5E:F0:DF:3E:C0:47:43:DE:38:23:E6
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 0189995C40E0698C12CB639CF2F32DD48196
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/DKXYcvlVtoRxXvDfPsBHQ944I-Y.roa
Signing time: Thu 27 Jul 2023 21:58:27 +0000
ROA not before: Thu 27 Jul 2023 21:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200373
IP address blocks: 2a07:db81::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 04 Oct 2023 19:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:99:5c:40:e0:69:8c:12:cb:63:9c:f2:f3:2d:d4:81:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Jul 27 21:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ca5d872f955b684715ef0df3ec04743de3823e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:32:b5:5d:22:22:ba:17:d5:c3:96:59:e2:
83:f0:9e:18:fc:1f:54:8a:ab:c8:a1:50:90:97:ba:
4b:f0:23:21:f8:c5:25:75:34:d6:b4:f9:0f:27:5d:
68:6a:9f:b4:56:20:fd:bd:22:e6:c9:41:c7:c8:87:
cf:0c:2a:b9:00:07:75:ca:81:a4:06:96:de:4a:c3:
4f:e1:40:08:41:2b:c2:17:ae:5d:ae:a6:b9:30:8f:
4c:4c:d9:b7:3c:44:71:98:30:28:99:fd:64:e7:b2:
fb:34:39:8b:af:0a:a3:79:71:3d:88:ef:3e:a6:2e:
39:60:36:4e:03:f9:54:4d:cd:d6:bc:59:34:84:46:
75:18:c6:5a:0b:5a:15:ad:20:5f:cc:87:9a:f5:1f:
24:81:26:b5:fd:49:26:b0:70:15:34:ba:38:23:ba:
ba:ae:c4:36:c8:6f:48:e0:a1:ba:19:23:5e:47:b2:
48:2c:69:e8:fb:ba:97:97:68:77:a6:05:44:69:f2:
74:71:e6:70:3a:6f:9c:df:57:23:fd:55:68:17:76:
9c:67:a2:95:d6:f1:dd:12:02:49:f3:d2:01:58:16:
2a:98:4c:24:d0:92:59:61:29:f1:c9:64:18:9f:ed:
2b:73:5a:ea:bd:b7:dc:46:1d:8e:78:72:d8:dc:f5:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A5:D8:72:F9:55:B6:84:71:5E:F0:DF:3E:C0:47:43:DE:38:23:E6
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/DKXYcvlVtoRxXvDfPsBHQ944I-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:db81::/32
Signature Algorithm: sha256WithRSAEncryption
01:a4:f8:f8:41:c1:7f:35:fe:4b:ff:81:4a:dc:bb:83:c5:05:
39:5e:ec:45:a2:9a:c8:f0:d2:0b:ad:96:9b:50:2e:bc:24:ae:
17:ef:b7:3e:01:5e:7e:ae:9c:72:ad:63:07:74:f3:2e:88:78:
ed:a2:0e:ed:0f:56:a7:d2:a4:c4:bc:86:36:e8:fd:5a:56:20:
67:68:b5:f1:ee:cf:01:95:b9:8a:02:11:e1:32:c4:df:98:f3:
c4:9c:bf:09:e9:48:69:47:f4:e2:d7:04:23:a7:bd:a5:64:d4:
20:c2:4a:69:ca:ec:c2:b8:10:28:92:23:39:16:6c:b7:84:50:
53:03:dd:69:aa:3e:1c:2e:e5:f6:99:03:d9:c7:18:a8:3f:2f:
6c:06:84:26:12:ef:1c:ed:7d:81:35:9d:ac:4e:4c:c3:ee:bc:
a7:a5:9d:dc:92:fa:29:17:a0:70:1e:25:6b:36:79:4c:07:a8:
c8:ec:f8:5e:b5:0d:af:32:af:0d:90:bb:bc:33:54:29:01:58:
d0:7a:99:b4:4f:d3:c8:b2:fb:96:6b:53:51:9d:dc:56:3d:2b:
d2:25:e1:69:91:2b:ed:3f:4b:de:0a:5a:14:d9:00:b9:f5:b7:
54:0d:11:ea:f5:77:4b:00:a9:ad:78:3e:c0:33:3d:36:ff:ee:
72:01:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:11 2024 by rpki-client on console-ams.rpki-client.org