Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/ndXhAP-yvkMjkxjLrA9HdTV-1Eo.roa
File: ndXhAP-yvkMjkxjLrA9HdTV-1Eo.roa (raw, json)
Hash identifier: jH+n+tIu3R2OUs77GEKNOtIqHUxQ3DM64ULl4EYA9Tc=
Subject key identifier: 9D:D5:E1:00:FF:B2:BE:43:23:93:18:CB:AC:0F:47:75:35:7E:D4:4A
Certificate issuer: /CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
Certificate serial: 01856F66DC19A7ABC45781350B296DBF0758
Authority key identifier: 53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/ndXhAP-yvkMjkxjLrA9HdTV-1Eo.roa
Signing time: Sun 01 Jan 2023 22:14:49 +0000
ROA not before: Sun 01 Jan 2023 22:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41737
IP address blocks: 2a0e:9b80::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:dc:19:a7:ab:c4:57:81:35:0b:29:6d:bf:07:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
Validity
Not Before: Jan 1 22:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd5e100ffb2be43239318cbac0f4775357ed44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:11:65:56:7e:b4:b7:e3:13:6d:f8:5c:2f:
27:10:ce:56:60:e7:d7:7c:ed:5c:5e:a2:00:17:45:
de:70:4a:27:d3:97:97:08:31:a8:cf:60:04:40:69:
8c:a8:2e:5d:f2:f4:b2:8f:84:4d:e1:55:66:8b:c5:
97:27:7a:c9:ba:41:92:f5:64:04:bf:66:e7:e3:f6:
47:76:b4:6f:af:d0:d9:47:79:18:72:6d:92:d2:76:
06:02:6d:35:1d:a1:5d:ac:23:7f:48:1b:05:2a:0a:
b8:24:fd:89:88:13:16:7a:b9:57:91:9b:2a:96:dd:
d2:d7:9a:4e:a4:f7:e2:ab:3b:e8:a8:03:fa:2d:54:
02:c3:b1:85:52:73:a0:0f:54:76:bd:9c:11:9c:65:
f7:e1:e3:7a:56:be:2f:3b:f3:15:d8:5c:03:03:fd:
4f:1a:c3:5d:29:09:52:ff:cd:82:d9:8d:cd:b1:36:
9c:26:f4:34:a8:cb:f8:83:9a:2c:6c:6f:d9:46:5c:
f4:70:07:64:ef:3a:1e:10:24:61:cc:7b:18:60:57:
6a:13:3d:06:63:eb:da:f0:c3:91:8c:c1:04:44:da:
75:c1:cc:19:25:4c:80:ad:49:04:7e:a2:d1:da:a3:
34:f0:e9:32:2e:67:de:2a:97:1f:b5:16:de:93:67:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D5:E1:00:FF:B2:BE:43:23:93:18:CB:AC:0F:47:75:35:7E:D4:4A
X509v3 Authority Key Identifier:
keyid:53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/ndXhAP-yvkMjkxjLrA9HdTV-1Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9b80::/29
Signature Algorithm: sha256WithRSAEncryption
80:99:87:ee:80:73:5e:a7:ad:20:7a:f3:9a:89:96:d2:e6:92:
91:f0:46:91:9b:15:5a:4c:cd:9c:71:db:b7:9c:6d:81:75:de:
72:f3:d4:5f:1d:09:d8:17:1d:41:8e:e1:2a:fa:e7:89:34:eb:
21:a9:d4:32:20:fc:2a:72:f9:26:ca:50:04:2b:17:b7:f7:74:
ec:18:5f:09:fc:ce:55:1f:65:bc:f1:54:dc:6c:07:c7:cd:17:
6f:d2:0e:94:ef:28:16:cd:2f:74:71:b4:b1:1e:2f:cc:96:2b:
58:34:9c:d6:37:ed:82:38:e2:15:a1:0e:1e:cc:a2:98:74:a7:
1c:31:a8:8c:e9:93:58:06:48:89:a9:41:08:9f:e4:34:8c:7f:
22:0a:a1:11:73:bc:f6:3a:c3:44:4f:a5:33:56:1a:62:30:a2:
6f:d1:5c:dd:af:1c:c8:be:7d:2f:d7:a3:ad:06:cb:fa:0a:31:
8d:49:30:c1:36:1b:03:a8:b1:5d:dc:7e:0b:23:15:e0:c0:d7:
db:72:f5:ab:a5:40:db:44:b8:d7:69:c0:ff:b3:93:5d:69:00:
e0:e2:6a:3b:ad:4c:0e:1c:97:f9:88:41:1e:aa:92:f1:ac:3e:
c4:bb:21:70:d5:ee:68:e9:65:44:2d:b2:3e:5b:6e:5a:5c:94:
42:03:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:15 2024 by rpki-client on console-fra.rpki-client.org