Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/DgZF77R560aqPCgYhonjpn8XXno.roa
File: DgZF77R560aqPCgYhonjpn8XXno.roa (raw, json)
Hash identifier: SA5GxrQl378KmVxg+oOSfUevfZ9ccgLbBfKGz5logeg=
Subject key identifier: 0E:06:45:EF:B4:79:EB:46:AA:3C:28:18:86:89:E3:A6:7F:17:5E:7A
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 0185701502075B972D7C0B69FCF220089960
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/DgZF77R560aqPCgYhonjpn8XXno.roa
Signing time: Mon 02 Jan 2023 01:25:02 +0000
ROA not before: Mon 02 Jan 2023 01:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59441
IP address blocks: 2a13:3e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:02:07:5b:97:2d:7c:0b:69:fc:f2:20:08:99:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Jan 2 01:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e0645efb479eb46aa3c28188689e3a67f175e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1d:94:66:48:95:d8:e4:97:ef:c8:e3:df:1a:
c5:e3:d7:ae:a4:ae:ba:b9:e4:c1:eb:2f:fb:d4:07:
da:60:c5:12:11:a9:f7:23:0c:fa:a2:79:b2:b9:ad:
4b:bf:ec:c0:cd:af:35:b1:e5:01:e1:b2:05:89:50:
e7:95:03:37:18:f4:73:e8:15:c9:b9:dc:25:53:59:
84:84:69:09:19:ee:06:e9:4f:eb:d7:22:88:7c:13:
3a:d5:69:ab:11:f7:c8:48:03:b5:9d:67:18:00:90:
6e:c6:5e:68:80:b0:cc:98:ab:52:70:80:e2:fa:c9:
ab:d1:ba:0d:72:2c:08:ce:62:82:bf:53:29:57:31:
80:ce:78:43:81:87:44:a1:db:9c:0c:74:b9:ae:c1:
19:b0:4a:23:54:ed:64:3d:9c:47:18:35:7e:fc:a4:
17:84:9c:73:43:15:65:c8:9f:5b:22:12:57:b0:40:
e6:05:f4:6d:a9:f3:d0:48:06:03:8b:c2:ad:ea:32:
8d:f0:da:4a:95:62:2f:b0:20:f8:e4:3e:83:c0:ee:
1b:3a:dd:19:76:30:2b:4a:c1:43:d8:41:c7:97:c8:
8a:49:a0:da:90:48:cb:45:16:20:2a:e4:9e:4d:ae:
f4:95:a5:9d:78:64:e5:9d:27:a3:61:ba:eb:46:26:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:45:EF:B4:79:EB:46:AA:3C:28:18:86:89:E3:A6:7F:17:5E:7A
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/DgZF77R560aqPCgYhonjpn8XXno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3e40::/29
Signature Algorithm: sha256WithRSAEncryption
17:d7:03:b2:02:11:5f:6c:53:04:6e:59:a1:6a:8b:0b:b4:87:
af:c3:c9:b9:57:8e:cb:a0:b9:4f:3c:9d:57:4a:2a:13:db:eb:
0c:6e:eb:75:a5:8b:f3:75:45:47:bf:e5:2c:7d:74:e1:0f:63:
e6:28:c4:ff:3a:db:0d:73:2e:4b:5b:d7:4e:85:4a:d5:41:e7:
68:36:f2:49:7c:7d:da:51:11:7a:e8:d8:8a:a5:f5:8d:51:0b:
3d:24:c2:f8:b5:03:cb:db:e1:d3:90:23:96:f5:95:df:2c:4b:
22:95:a1:20:80:e1:08:c1:e8:34:b9:61:3f:36:ea:e8:a4:72:
6a:fa:49:31:af:46:de:f2:f3:73:53:0a:8e:25:36:f1:79:2e:
a5:74:bf:30:d4:34:81:3d:35:08:98:74:6e:bf:92:89:a6:3d:
72:d0:80:9a:c4:f7:5b:d0:43:dd:55:e8:3f:84:38:97:7b:86:
57:1f:87:c5:ed:4a:4b:46:b4:e5:65:0f:83:b0:4e:99:37:62:
61:87:44:10:1a:46:d9:1e:d8:26:57:bf:fd:d2:0d:6c:2a:55:
cc:15:ed:d3:29:d9:00:2c:0f:4b:06:87:a5:46:9e:a7:a1:71:
eb:9f:20:5f:97:d6:6c:a7:9c:91:1f:81:24:99:1d:ba:b2:09:
03:8c:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:44 2024 by rpki-client on console-ams.rpki-client.org