Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/_Teeq6stwTRkPy0dZuo83I-FqYo.roa
File: _Teeq6stwTRkPy0dZuo83I-FqYo.roa (raw, json)
Hash identifier: w5IvYoDl1AiGDxwwOJEho4VI3UJL+9l78O4v1Lq71No=
Subject key identifier: FD:37:9E:AB:AB:2D:C1:34:64:3F:2D:1D:66:EA:3C:DC:8F:85:A9:8A
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 01856D53C19087A5CA70A5E4E8DE3536E58D
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/_Teeq6stwTRkPy0dZuo83I-FqYo.roa
Signing time: Sun 01 Jan 2023 12:34:43 +0000
ROA not before: Sun 01 Jan 2023 12:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41320
IP address blocks: 2a0c:3a81:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:c1:90:87:a5:ca:70:a5:e4:e8:de:35:36:e5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Jan 1 12:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd379eabab2dc134643f2d1d66ea3cdc8f85a98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:ae:9b:21:40:56:43:5d:9e:ed:62:4b:79:
ee:16:01:89:57:0c:ef:95:c1:da:7a:9f:c8:5f:71:
93:dc:b7:1b:ab:d4:89:74:50:09:bb:3e:b0:3b:9f:
a4:af:9c:54:34:f3:3a:b6:fc:04:f3:7c:8f:9e:26:
8b:44:5d:74:81:6b:0f:f7:56:de:a4:80:86:fa:c6:
34:1c:64:8c:35:2f:2d:99:79:d0:31:9a:e1:a0:48:
23:f9:8f:b6:1a:07:97:d0:c6:1b:86:ef:6a:1a:5b:
20:e4:7b:0d:34:36:3c:60:64:96:c1:d9:f9:0b:fd:
c0:d0:66:d8:46:3a:1b:59:19:f8:bc:7e:bb:03:3d:
05:a3:46:7d:36:03:62:3a:53:96:bb:e2:d9:80:c0:
13:dd:fc:ca:06:c2:3e:30:49:e0:2f:c1:ae:86:34:
e3:f5:c7:40:34:37:f6:5e:bc:2f:a1:c4:98:1b:84:
df:29:7e:d3:5c:c6:cb:81:05:1d:ef:e3:3a:77:61:
c4:bc:0b:9f:f7:c0:21:da:e1:90:03:5c:71:a7:47:
43:17:14:89:36:a4:63:c9:d4:24:16:48:bf:4d:c6:
d9:49:a9:3c:0e:b9:50:01:55:ae:97:c6:3d:0d:b7:
b2:97:19:80:4e:a1:91:03:25:63:bd:17:af:14:04:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:9E:AB:AB:2D:C1:34:64:3F:2D:1D:66:EA:3C:DC:8F:85:A9:8A
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/_Teeq6stwTRkPy0dZuo83I-FqYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3a81:100::/40
Signature Algorithm: sha256WithRSAEncryption
96:a0:8e:80:38:82:26:5f:c2:b8:2b:0b:78:b0:8c:6a:6e:06:
6c:37:cd:d1:a6:e3:91:99:7c:9b:c0:09:d6:77:02:c4:4c:ef:
90:51:61:a5:5b:9f:89:ae:d7:af:43:94:64:15:4e:db:cd:73:
01:00:5c:e4:32:23:c5:c9:1e:c6:2b:1e:37:1e:08:c3:6d:2b:
88:29:2f:e5:c0:54:5b:99:b2:c7:0b:bd:98:a8:3c:8c:06:35:
14:0c:17:54:53:cd:5e:f6:ed:6f:a6:cd:95:3c:92:2d:ba:87:
a4:86:e7:cf:66:43:90:7b:01:80:1f:a4:cf:5b:e9:30:3d:5a:
f7:a5:32:6a:f7:9c:9a:71:e2:0a:0f:f1:39:f6:d1:10:b4:ab:
8e:4c:8d:00:04:56:d5:05:9e:e0:94:f6:a2:1a:b6:94:f3:e5:
99:7b:fc:b3:b6:df:6e:a5:22:1e:a3:39:9a:54:21:71:b9:ee:
49:05:e2:17:cb:31:38:d2:49:b6:e4:20:cb:b3:d9:22:e0:45:
ea:04:7c:f1:5c:f4:d2:98:92:b8:42:c8:6f:7c:8b:91:3b:e5:
29:ac:f2:29:e4:56:f2:10:d1:86:9c:ec:67:f0:5d:01:87:d1:
a5:6c:2b:97:6b:cc:3e:1e:3e:31:7b:a0:c2:71:48:33:77:e0:
dd:93:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org