Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/tuPVD_kVaebL5b1zH5SLNpwZb3A.roa
File: tuPVD_kVaebL5b1zH5SLNpwZb3A.roa (raw, json)
Hash identifier: sEAlKlPkInks1ViXqeHwFLW9RNgcpxanqHEJUORDPT8=
Subject key identifier: B6:E3:D5:0F:F9:15:69:E6:CB:E5:BD:73:1F:94:8B:36:9C:19:6F:70
Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial: 01856D81AC62C05C0FD4C1074A39475D5DB3
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/tuPVD_kVaebL5b1zH5SLNpwZb3A.roa
Signing time: Sun 01 Jan 2023 13:24:52 +0000
ROA not before: Sun 01 Jan 2023 13:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213027
IP address blocks: 2001:678:f70::/48 maxlen: 48
2001:678:f74::/48 maxlen: 48
2a11:a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 30 May 2023 08:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:ac:62:c0:5c:0f:d4:c1:07:4a:39:47:5d:5d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Validity
Not Before: Jan 1 13:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6e3d50ff91569e6cbe5bd731f948b369c196f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:9f:55:78:98:b5:e7:b9:88:cd:77:fa:b2:
50:90:91:d0:3b:a5:06:1e:ab:41:fe:b6:d9:8f:9a:
f5:95:c7:48:6d:71:3e:43:2c:5d:87:e6:61:fd:91:
6c:bd:50:c0:28:c7:bf:c1:be:b5:3d:e2:4c:3f:3c:
dc:a7:c1:f9:d5:a0:05:d9:4a:33:61:f3:a4:32:d1:
ad:67:cf:f2:a4:38:6c:e6:7b:11:9c:0e:c9:c5:c6:
44:a9:49:f6:e7:ed:3c:90:b9:e8:24:b7:2d:77:34:
54:81:ea:8f:c4:10:e9:47:57:17:c2:0e:cb:fc:c5:
34:36:53:7d:a4:89:96:36:57:8c:13:9f:66:b7:9a:
0d:26:a9:0e:fc:48:8e:80:e7:ac:e2:87:f4:24:f2:
12:4a:ad:54:43:21:d5:e1:75:da:0e:be:f5:52:c0:
a1:f3:27:5e:76:89:9e:4f:3e:a8:c7:47:4e:16:27:
c2:14:34:aa:df:14:82:f5:fc:d8:10:e9:5a:38:94:
e4:ea:22:36:59:d0:d8:f5:b6:5b:08:9b:cc:a4:28:
37:83:4f:08:5a:5e:9a:a9:4d:ad:8a:30:1c:57:ac:
ae:25:ae:3e:e7:7f:29:ac:48:8a:06:dd:73:cc:7f:
aa:b4:5a:c9:f4:db:01:76:b9:5c:f5:c2:9d:12:d5:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E3:D5:0F:F9:15:69:E6:CB:E5:BD:73:1F:94:8B:36:9C:19:6F:70
X509v3 Authority Key Identifier:
keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/tuPVD_kVaebL5b1zH5SLNpwZb3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f70::/48
2001:678:f74::/48
2a11:a00::/29
Signature Algorithm: sha256WithRSAEncryption
52:0f:8e:36:b4:c3:cc:78:87:3f:13:40:29:27:09:2d:08:bd:
ac:71:d4:6b:26:64:0a:f8:bb:e7:72:6f:e2:4e:7e:81:84:a1:
82:cc:ca:a0:b4:6c:c1:57:2c:15:2d:1f:94:94:31:7c:e2:a8:
00:16:6d:13:d0:98:4c:84:bd:d3:5d:fb:99:5b:30:f0:2f:f6:
21:15:93:f8:5f:90:b3:27:41:70:27:14:33:f9:76:85:ed:c0:
33:2e:07:16:8e:bf:16:09:b5:9a:c6:81:30:48:f8:a0:a3:0a:
8b:c6:12:36:02:ce:ac:4f:62:42:ee:44:6a:82:80:42:61:5c:
b3:6c:42:1a:00:26:57:7c:19:d5:83:74:ac:66:92:38:5b:b6:
a7:7a:1d:2b:6b:e0:c2:5d:48:d5:18:e9:ea:b3:e9:31:82:b2:
50:ce:0c:96:23:44:3d:11:9d:32:95:29:9d:1c:3a:c6:b0:36:
64:0f:b3:49:3f:88:f8:27:e6:70:3f:d8:b8:7d:8c:ef:81:2c:
77:4e:c3:9b:a3:ee:e3:29:79:36:ca:51:ad:1d:dd:01:bb:1e:
15:71:3b:17:e4:8e:ab:f6:1a:2f:fc:fc:94:7f:02:2a:6d:3e:
a2:97:4a:2b:8d:75:30:5b:f3:20:92:a2:a1:42:e6:ba:4c:44:
ef:68:7a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:45 2024 by rpki-client on console-ams.rpki-client.org