Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/t-ynShrUjevdWoKMbNKbBzAbHDc.roa
File: t-ynShrUjevdWoKMbNKbBzAbHDc.roa (raw, json)
Hash identifier: FsHl/BW0MWA9LwToMpQJ1vJ3Ny5fkB261Jo04lj7yGs=
Subject key identifier: B7:EC:A7:4A:1A:D4:8D:EB:DD:5A:82:8C:6C:D2:9B:07:30:1B:1C:37
Certificate issuer: /CN=26862926a857491554bee94951bb5fa670207d9e
Certificate serial: 0185FE904C515DD1F88713CBB0177177AFE6
Authority key identifier: 26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/t-ynShrUjevdWoKMbNKbBzAbHDc.roa
Signing time: Sun 29 Jan 2023 17:25:47 +0000
ROA not before: Sun 29 Jan 2023 17:25:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205255
IP address blocks: 2a0c:ec00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fe:90:4c:51:5d:d1:f8:87:13:cb:b0:17:71:77:af:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26862926a857491554bee94951bb5fa670207d9e
Validity
Not Before: Jan 29 17:25:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7eca74a1ad48debdd5a828c6cd29b07301b1c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9d:9b:51:7e:a4:d6:66:20:20:d6:7c:d5:0b:
15:2a:a7:7c:3d:60:9f:a6:8b:62:39:ba:0c:3e:9a:
8f:08:83:c3:ce:4a:00:1f:54:df:76:fc:01:2f:99:
3c:97:99:61:fa:d7:fd:32:3d:2f:fe:06:9c:d6:4c:
0a:e6:fb:01:23:c3:a4:ef:d6:f3:61:60:f0:63:09:
5f:2c:e8:8f:69:aa:28:23:f2:fc:f2:4b:f9:74:b8:
d2:79:96:4d:5e:94:0b:bb:ba:9e:83:e7:19:04:24:
58:1e:95:fb:07:b6:49:3e:53:f6:cd:b6:f0:7b:5e:
90:1a:ca:ff:81:2b:35:19:bb:82:b1:0e:46:eb:13:
9b:bd:c8:f1:cd:ae:47:44:35:48:37:78:99:52:4e:
43:12:40:47:8c:82:da:86:7e:3a:85:59:15:5d:f4:
f4:47:45:81:ba:28:f3:0c:0d:46:c4:53:eb:44:a0:
c7:1c:32:89:5a:7a:98:43:07:0b:a4:3f:d5:41:06:
8f:40:da:de:9f:80:11:f4:05:3f:9d:ac:f3:71:17:
90:38:ec:66:d1:ca:ed:fd:27:e5:a6:b3:df:f2:a0:
30:d4:e0:d8:26:a1:d5:12:5c:a5:e4:32:9e:03:79:
f8:01:c4:64:97:8b:ce:5c:64:df:52:c7:35:3d:12:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EC:A7:4A:1A:D4:8D:EB:DD:5A:82:8C:6C:D2:9B:07:30:1B:1C:37
X509v3 Authority Key Identifier:
keyid:26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/t-ynShrUjevdWoKMbNKbBzAbHDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ec00::/29
Signature Algorithm: sha256WithRSAEncryption
44:5c:d1:e0:e0:98:32:bc:4c:ef:db:ff:55:5e:06:2b:43:9f:
f3:f4:22:a4:0f:d8:d2:1a:b6:79:34:bb:36:85:89:c6:79:92:
e9:e6:44:16:66:57:9d:b1:f1:97:90:a3:14:39:d6:88:a8:98:
ba:28:30:81:ac:ec:45:16:d5:49:60:db:e6:65:5a:35:0a:ea:
5f:bc:91:0e:db:d6:f2:79:0c:a3:6a:84:95:bb:30:63:c4:89:
c8:b9:51:86:98:5d:69:a6:99:ae:fa:64:52:11:d9:9b:5a:6c:
a6:26:7b:72:40:93:a4:ba:e8:f4:4a:32:97:5b:95:2f:89:de:
13:99:2c:15:63:56:70:50:bb:01:b9:eb:64:f1:6f:e6:99:b0:
7c:bc:9d:4f:2c:dc:29:b9:dd:0b:0d:f0:13:a2:3f:0e:93:1f:
32:8b:ec:e0:e5:be:5f:22:81:28:3e:37:81:23:f4:1b:26:60:
da:2b:32:8d:56:6a:00:1c:ed:23:f4:8a:0d:21:8c:c8:df:87:
4e:3c:41:10:39:2e:41:4f:fa:8e:e2:8c:64:f2:3d:53:1b:ff:
88:95:f5:cb:33:0d:ca:f9:24:69:74:18:0f:61:05:01:ef:a4:
2f:1d:c9:7c:fd:0c:25:9b:ed:fc:8b:f0:0b:d3:42:df:55:2a:
30:eb:bb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:20 2024 by rpki-client on console-fra.rpki-client.org