Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/3MjR3Gj-kyqKyUp0rMB8RXnwGK0.roa
File: 3MjR3Gj-kyqKyUp0rMB8RXnwGK0.roa (raw, json)
Hash identifier: g4UplF4RDzkQGSm8JNocg/QgiCJKB7a08Vm409R5e5I=
Subject key identifier: DC:C8:D1:DC:68:FE:93:2A:8A:C9:4A:74:AC:C0:7C:45:79:F0:18:AD
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018B91877A94CF665B1197941C2F2AC53F09
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/3MjR3Gj-kyqKyUp0rMB8RXnwGK0.roa
Signing time: Thu 02 Nov 2023 19:34:16 +0000
ROA not before: Thu 02 Nov 2023 19:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216398
IP address blocks: 2a05:b0c6:a600::/39 maxlen: 39
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:87:7a:94:cf:66:5b:11:97:94:1c:2f:2a:c5:3f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Nov 2 19:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcc8d1dc68fe932a8ac94a74acc07c4579f018ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:f7:03:6a:b9:00:a2:34:05:7d:88:ed:45:
6f:89:be:7b:1c:73:56:0a:81:af:4a:33:13:5a:21:
2d:2b:2c:26:9e:53:92:4d:a2:c7:6a:07:57:d3:05:
35:c1:74:0f:9c:61:2f:35:42:55:42:1a:af:c5:91:
60:65:5e:1b:1a:67:43:c4:25:30:b1:ff:67:8f:b4:
b7:53:cd:74:b4:1a:68:96:18:dc:5c:b5:59:29:c5:
3c:29:e3:98:ae:d3:a2:a7:0a:6a:7e:95:d9:ef:cb:
82:3d:f1:f8:ec:9a:dd:da:f7:0e:30:c9:39:6d:5d:
d7:fa:52:54:75:57:be:f9:5f:05:c0:12:c6:21:ee:
19:df:2d:df:86:c8:a3:6a:9b:5f:05:45:69:3d:f7:
57:09:7a:68:45:eb:26:6e:ce:da:56:c7:63:df:76:
b2:5e:3b:18:fb:95:56:0f:92:13:8a:a6:3a:a5:fd:
7f:7f:b8:88:16:4d:f4:37:45:e7:23:a2:9f:ec:ff:
8b:cf:ff:0e:b2:21:ef:0b:00:01:bb:de:b8:41:ff:
76:98:e0:36:c4:ce:e0:49:f8:b0:51:26:fb:7e:c2:
75:99:56:49:21:5a:5f:ba:90:21:64:1b:2c:a0:d7:
5a:86:e4:55:0c:e0:83:73:be:b5:e6:0f:4e:82:0f:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C8:D1:DC:68:FE:93:2A:8A:C9:4A:74:AC:C0:7C:45:79:F0:18:AD
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/3MjR3Gj-kyqKyUp0rMB8RXnwGK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:a600::/39
Signature Algorithm: sha256WithRSAEncryption
66:df:c6:90:79:6c:bc:4e:b7:9b:17:db:69:55:fa:4e:85:c3:
fe:37:a9:cd:a8:b4:7c:5b:45:2a:ea:54:95:77:54:33:15:de:
53:6d:5a:c0:e7:cd:58:3e:01:79:1f:c0:06:c4:98:6a:71:9f:
67:69:54:1e:1b:ca:7b:8a:ee:b6:d7:96:e6:42:10:2d:ef:13:
98:d5:da:df:66:ae:2b:fd:99:d3:df:22:19:a7:c5:e0:9f:b4:
50:ec:12:c0:91:ff:7c:9e:cd:9f:94:7d:0a:6f:0e:ae:c5:d5:
fe:fd:d6:5c:c8:6a:b8:02:ce:81:cb:04:af:35:19:90:9f:7a:
2f:86:3d:5d:db:bf:f6:78:a4:08:bc:9d:86:41:0a:3b:e7:ec:
b4:74:4b:7c:ad:99:f5:f7:f4:48:41:7b:e4:a1:20:33:f2:48:
cd:fc:db:16:f2:59:28:a5:be:9c:f2:72:12:87:48:9b:7b:84:
41:21:f5:62:ac:b1:e3:cc:f6:a3:0a:a2:cc:8b:ee:32:be:02:
83:b8:34:56:2c:99:72:88:da:20:a6:37:71:fd:f5:be:f0:c5:
a3:18:5a:21:74:ec:ca:09:86:45:80:68:f5:60:0d:a1:04:bd:
70:cc:83:a3:86:de:39:fb:3f:5d:ed:5d:de:d5:94:00:d1:df:
2d:11:b0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:21 2024 by rpki-client on console-fra.rpki-client.org