Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/p0Mvu92zonyKpKYXbcTiR6yLRek.roa
File: p0Mvu92zonyKpKYXbcTiR6yLRek.roa (raw, json)
Hash identifier: Ze3Gml6DoyiVS4chK2AyCC4hjy2FF1gqtcccPXuBOFQ=
Subject key identifier: A7:43:2F:BB:DD:B3:A2:7C:8A:A4:A6:17:6D:C4:E2:47:AC:8B:45:E9
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 01856D4AE6B2DDB5A8F7B15424F2B9D3B738
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/p0Mvu92zonyKpKYXbcTiR6yLRek.roa
Signing time: Sun 01 Jan 2023 12:25:03 +0000
ROA not before: Sun 01 Jan 2023 12:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 2a07:290a::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:e6:b2:dd:b5:a8:f7:b1:54:24:f2:b9:d3:b7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jan 1 12:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7432fbbddb3a27c8aa4a6176dc4e247ac8b45e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:57:15:92:52:32:c6:b3:93:ac:b5:e8:a2:
14:8b:50:4d:8d:cc:ed:e5:ac:41:0e:65:85:e4:0e:
18:19:68:0d:ed:4c:13:f3:22:24:11:6d:b2:93:20:
45:81:62:cc:93:b7:6b:a5:57:27:ae:56:44:1e:e2:
50:8d:9a:4e:3a:6a:bc:c2:a7:7e:f7:c1:94:5d:79:
16:68:a4:db:91:c5:36:c4:16:1f:1f:1f:78:ca:26:
8b:97:42:5e:b2:fc:5b:77:f0:27:58:c0:c7:4a:69:
e6:55:fd:72:2f:dd:e8:39:fb:85:90:68:b4:7c:f6:
4a:3b:c7:40:07:0d:e4:31:eb:c3:b2:09:c5:c6:13:
05:4a:e2:3b:4c:eb:76:3c:7d:18:38:e5:db:e7:8a:
aa:06:64:d9:be:65:69:e3:ef:51:aa:f0:0b:57:bc:
f7:4e:f0:48:04:64:ae:f8:b6:5d:b5:47:b8:e6:e0:
80:be:c6:6b:54:58:42:4d:2b:3f:5b:61:12:35:d8:
18:db:96:fa:00:4a:46:73:1f:b8:14:c3:48:0f:f6:
dd:d8:71:9a:d8:2f:72:0f:7f:ad:5a:0a:9a:b2:8b:
64:8c:24:f9:07:64:cc:92:74:7f:7f:5f:b8:1a:21:
0e:6a:82:42:36:50:42:9a:c3:ab:68:a8:a0:da:7c:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:43:2F:BB:DD:B3:A2:7C:8A:A4:A6:17:6D:C4:E2:47:AC:8B:45:E9
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/p0Mvu92zonyKpKYXbcTiR6yLRek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:290a::/32
Signature Algorithm: sha256WithRSAEncryption
8e:a9:2d:c3:4e:44:53:20:e2:19:52:80:a3:94:9c:31:fc:61:
63:f2:96:34:18:01:ae:41:6f:04:d8:a6:ee:08:24:86:db:98:
b0:90:f0:51:cb:06:74:84:35:58:dc:f8:27:31:40:2a:61:42:
a8:9d:22:39:88:0c:d6:da:d4:6a:15:70:49:ba:7e:06:4f:7c:
78:9d:de:35:ea:5f:3a:36:3a:77:15:3c:f2:16:61:0b:95:f3:
0a:70:1e:52:23:bc:ac:65:53:d7:8a:69:2b:3c:8a:6b:0f:3f:
ec:81:35:bf:6f:f5:4c:ca:2e:43:fc:da:29:83:4e:42:5a:57:
65:4c:0e:99:b6:89:cf:f6:c3:f4:f5:45:b9:09:08:9e:00:dc:
ed:91:f0:38:59:a9:d8:1f:94:09:53:4e:fd:23:73:ea:9b:6e:
5b:56:c6:77:f8:d2:e4:6d:34:44:09:59:a6:3f:e8:64:87:c3:
63:51:84:94:47:e2:81:34:f2:f7:07:05:74:19:1e:66:37:00:
68:3f:18:20:99:86:59:47:fb:71:64:e1:14:89:47:67:97:5f:
ae:8a:78:93:39:37:c4:db:bd:c6:dd:e1:17:a4:5c:1e:57:6c:
24:ad:74:e6:0a:0b:a2:54:2b:7b:22:33:d3:db:34:e1:8a:6e:
b2:6c:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:16 2024 by rpki-client on console-fra.rpki-client.org