Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/JisZfdGYTjXeD4257Q0Wsjjz4-M.roa
File: JisZfdGYTjXeD4257Q0Wsjjz4-M.roa (raw, json)
Hash identifier: I08Czg0q5Uf1GUiXGyUiuVz65uG0v2l7VD446t5z3Sg=
Subject key identifier: 26:2B:19:7D:D1:98:4E:35:DE:0F:8D:B9:ED:0D:16:B2:38:F3:E3:E3
Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial: 018572C3588CFD2DB379E5E0BF8C993C234D
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/JisZfdGYTjXeD4257Q0Wsjjz4-M.roa
Signing time: Mon 02 Jan 2023 13:54:42 +0000
ROA not before: Mon 02 Jan 2023 13:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3549
IP address blocks: 2a05:6744::/46 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:58:8c:fd:2d:b3:79:e5:e0:bf:8c:99:3c:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
Validity
Not Before: Jan 2 13:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=262b197dd1984e35de0f8db9ed0d16b238f3e3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:34:3b:ff:96:6a:00:5e:02:f4:7c:f5:36:
40:8b:e0:fa:76:63:82:96:75:f4:bd:a7:a9:90:ab:
dc:c9:73:77:ab:29:5d:da:95:a4:08:a9:1e:5b:13:
d3:d9:4e:d7:66:63:94:cf:bd:1d:65:70:d9:71:b8:
b7:71:31:81:48:00:8c:4b:2e:9f:11:ec:e6:ad:73:
78:96:2a:94:57:1c:0c:5e:3b:f0:e8:7d:6a:6a:08:
cf:22:80:53:03:4f:53:51:fb:d3:ad:15:00:39:3c:
c3:70:a9:5f:63:5c:b8:c3:2e:9c:af:3d:05:cd:93:
7d:7d:0c:a9:53:96:df:52:23:0b:8f:8a:86:39:eb:
99:df:01:ef:33:66:9a:7a:fd:fd:5d:79:cd:2a:1e:
a0:0a:1b:d4:a5:81:9c:f7:62:bf:af:34:17:bf:14:
8f:26:3d:1e:61:4e:22:49:50:f8:1e:73:18:ab:39:
5c:dc:4d:4d:c7:c4:3f:cb:a8:cf:1d:cf:7c:cc:b7:
06:0c:62:6e:dc:92:ae:c1:83:41:d4:0b:a2:9f:21:
42:b0:6d:92:b1:28:45:04:d7:32:1c:e3:47:ef:f5:
12:8f:c1:d9:10:74:86:30:8b:2d:b7:1f:b6:60:c9:
ea:fe:63:42:1c:e1:24:d1:1a:f3:bc:62:e8:4c:78:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:19:7D:D1:98:4E:35:DE:0F:8D:B9:ED:0D:16:B2:38:F3:E3:E3
X509v3 Authority Key Identifier:
keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/JisZfdGYTjXeD4257Q0Wsjjz4-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:6744::/46
Signature Algorithm: sha256WithRSAEncryption
4f:87:12:31:0b:57:79:06:fe:64:2c:62:6c:47:bb:d7:3b:f4:
d6:05:eb:1e:93:96:cb:f3:ce:93:35:32:bb:4b:39:07:12:f6:
af:37:25:4f:c1:e3:ba:d9:45:46:60:e9:01:ad:c4:91:a5:d6:
7c:96:cc:81:2e:bc:d7:2e:19:33:26:86:9d:33:80:ec:54:90:
16:c9:6f:51:ab:8e:71:1b:2b:43:e5:59:c5:5f:34:25:3f:31:
52:98:38:27:8f:b4:2f:6b:d7:b6:03:2e:a2:ed:6c:55:b5:06:
ca:bd:85:48:20:8a:31:11:a1:73:b0:13:87:01:18:e7:fc:7d:
12:c9:4e:3b:80:6a:b4:39:0b:b1:74:c2:c8:17:d4:ac:f8:7b:
20:ab:81:73:38:67:a7:ba:77:85:06:ae:b4:23:67:bb:cf:0e:
c6:72:b0:a1:f9:f5:33:4b:03:bb:fd:7a:87:21:c2:c9:f8:35:
68:b8:31:06:8b:c3:e9:fa:7d:49:40:e2:f8:9e:42:53:b4:19:
76:e0:88:8a:7d:1d:5f:e4:05:c1:c6:34:ad:a7:33:e5:be:cd:
ee:28:5c:3e:f0:02:35:87:53:6d:72:16:aa:33:7b:34:a5:9e:
aa:80:fc:b2:38:f9:8f:6c:85:9c:82:ad:e3:ae:9a:c3:e1:10:
9c:bf:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:01 2024 by rpki-client on console-fra.rpki-client.org