Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3sqZIxRfUO2ogPLqGiYhuu444xA.roa
File: 3sqZIxRfUO2ogPLqGiYhuu444xA.roa (raw, json)
Hash identifier: LZKUgboNZRXKFplWYST1Xbgt/naK4/2Q5chv208AX9M=
Subject key identifier: DE:CA:99:23:14:5F:50:ED:A8:80:F2:EA:1A:26:21:BA:EE:38:E3:10
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE7D1AA74E6C9D3C86DAF4EE6A9064
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3sqZIxRfUO2ogPLqGiYhuu444xA.roa
Signing time: Mon 02 Jan 2023 09:44:44 +0000
ROA not before: Mon 02 Jan 2023 09:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209178
IP address blocks: 2a02:afc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 15 Sep 2023 02:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:7d:1a:a7:4e:6c:9d:3c:86:da:f4:ee:6a:90:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deca9923145f50eda880f2ea1a2621baee38e310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:2e:7f:b4:53:5a:26:51:bc:f4:6b:f5:3c:
a4:ea:22:26:0e:8a:12:29:4e:94:e2:b5:1c:5d:ae:
d7:9b:e3:64:fe:c6:59:61:18:8f:87:da:f7:09:65:
d1:02:ba:e6:79:e4:27:ae:96:5f:57:8b:8d:f9:74:
12:61:0f:f5:4a:73:70:b1:a6:79:c4:73:06:aa:4b:
03:bd:e2:56:9c:2d:c6:6c:8a:78:82:54:8f:a0:82:
41:b7:8f:83:5d:2b:c9:a6:ca:9d:20:a4:66:3d:12:
52:e5:02:12:25:1a:55:22:51:75:3c:4e:5c:06:af:
2e:48:b7:51:9f:b2:83:74:1d:28:f3:d7:77:a1:d5:
8e:b9:cb:50:6d:4e:cd:81:07:5b:a9:56:bc:34:f5:
33:c7:cc:c5:74:12:30:04:7b:9d:97:3a:4f:41:b3:
0b:fb:58:7d:78:6e:eb:18:47:45:d8:23:cd:65:a1:
7b:b8:0f:4e:8e:62:e2:88:71:e9:e7:03:1f:8b:95:
46:86:d8:10:25:73:ae:e9:2d:ce:4f:3a:6e:d0:19:
88:76:91:d7:d9:1a:8d:9b:1a:19:2c:1c:95:48:40:
f1:0e:a4:09:e4:3f:ff:67:fd:24:5f:b4:35:f7:44:
cd:38:cd:59:4a:6c:a0:ae:35:09:15:db:a4:92:96:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:99:23:14:5F:50:ED:A8:80:F2:EA:1A:26:21:BA:EE:38:E3:10
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3sqZIxRfUO2ogPLqGiYhuu444xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:afc0::/29
Signature Algorithm: sha256WithRSAEncryption
91:84:86:0a:dc:14:69:3a:b3:fe:9b:3b:4f:ff:a1:76:7a:9b:
f6:a8:6b:95:d7:73:f0:27:ba:d9:05:a6:ff:40:8c:41:26:c5:
c8:df:4f:ea:7d:37:61:50:b2:a8:92:50:bf:1e:3d:c0:9c:12:
b8:82:c4:86:f5:2e:87:a4:44:26:44:3f:33:4c:a8:7b:92:dd:
46:9c:3f:5b:52:ac:f5:02:13:7a:1e:a8:da:ea:c4:33:90:91:
1e:e0:1a:c2:e1:69:09:36:7c:39:49:1b:2e:93:0d:c4:f8:1e:
f3:f9:92:6b:de:83:f3:59:e9:cc:85:e8:26:53:8e:02:03:da:
77:68:8b:99:30:26:74:4c:33:dd:bb:7c:4e:d2:5b:b0:46:be:
b8:4a:85:0b:48:06:a7:75:6b:6e:b6:96:b4:fb:98:90:5c:a6:
43:0f:42:b1:78:97:99:89:51:08:d8:65:27:96:61:73:2f:c5:
55:b4:a2:23:16:4e:7d:ad:9e:49:b3:33:21:8c:79:28:99:b3:
30:77:31:32:1a:f9:83:6b:f4:a4:f6:9d:99:2a:03:a2:e3:4d:
34:52:21:46:70:af:f4:4d:84:15:69:b6:1d:18:1d:39:37:9b:
5e:86:c3:ce:5c:de:dd:ed:09:44:e0:ea:6e:34:27:54:13:2e:
d8:8c:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:03 2024 by rpki-client on console-ams.rpki-client.org