Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/3n6_PR52xOpkhQfXF35EHP-vP90.roa
File: 3n6_PR52xOpkhQfXF35EHP-vP90.roa (raw, json)
Hash identifier: y6Nt8Lz874UIo8JP6TLT4khvXOL+ugmVzL7c53sWRT4=
Subject key identifier: DE:7E:BF:3D:1E:76:C4:EA:64:85:07:D7:17:7E:44:1C:FF:AF:3F:DD
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 0190515E52D5C62942615D42C6B169256186
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/3n6_PR52xOpkhQfXF35EHP-vP90.roa
Signing time: Tue 25 Jun 2024 21:47:34 +0000
ROA not before: Tue 25 Jun 2024 21:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 2a10:3b01::/32 maxlen: 32
2a10:3b02::/32 maxlen: 32
2a10:3b03::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jul 2024 15:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:51:5e:52:d5:c6:29:42:61:5d:42:c6:b1:69:25:61:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Jun 25 21:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de7ebf3d1e76c4ea648507d7177e441cffaf3fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:14:e8:5f:e8:c9:43:3e:7f:aa:cd:96:5f:
b6:fa:28:18:6d:f0:24:31:83:f5:9f:f5:a0:45:08:
11:9a:b2:8d:99:1e:b9:15:27:32:34:2c:a7:d6:f9:
26:e8:f6:c8:a5:6a:c1:e2:47:b0:ab:14:ea:86:cb:
fa:42:2e:54:e5:68:0f:6f:ee:34:bd:6a:bc:c9:32:
f7:44:7c:33:47:a3:54:49:8a:c6:9b:89:b5:52:da:
0c:6d:76:30:27:bd:69:7d:06:79:ce:22:30:1e:52:
6d:9d:07:8b:2f:d2:a3:a2:34:17:6d:3c:33:ca:ea:
ea:33:be:af:6e:8a:5c:a8:0c:2a:09:9d:49:6a:a6:
af:7c:95:3a:76:9c:58:9f:24:a4:27:c8:fb:20:92:
df:56:60:73:d6:f1:70:fa:70:80:07:d7:eb:fe:82:
65:5b:94:75:44:19:9d:61:e3:21:9d:2e:68:44:ad:
00:98:cf:92:5c:a3:c6:c2:9d:78:7d:71:72:d2:f3:
67:08:e1:20:75:b7:be:2a:55:47:f5:a7:9f:d5:b5:
fe:15:e6:0c:af:71:4c:a1:89:6d:f8:cc:72:b4:fd:
5f:da:c7:02:df:e6:9b:c5:82:58:42:db:48:98:29:
49:e7:42:7b:b1:81:9c:20:fe:d1:65:76:42:0b:43:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7E:BF:3D:1E:76:C4:EA:64:85:07:D7:17:7E:44:1C:FF:AF:3F:DD
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/3n6_PR52xOpkhQfXF35EHP-vP90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3b01::-2a10:3b03:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ac:91:72:19:d5:39:bb:86:41:5f:45:0a:6c:ef:55:07:aa:a5:
97:e4:fb:d3:5c:41:98:2f:9b:73:cb:29:9d:5c:a3:e3:55:f6:
fd:91:19:8e:86:b5:9d:46:ba:72:dc:4c:45:2d:25:4b:63:9b:
63:e1:cb:d7:4d:54:4e:16:82:c8:6b:a4:50:6b:79:c2:be:8f:
cf:07:87:b0:99:56:21:17:38:53:99:e7:fa:8f:94:8d:e1:a6:
44:cd:3c:97:2c:c3:78:ae:66:8f:92:9e:9f:89:25:38:92:86:
aa:19:fc:05:df:35:eb:30:d9:18:8b:fc:fa:37:02:f4:37:89:
c1:0a:fa:14:59:f9:81:79:4a:d9:a1:84:53:2d:76:62:68:5b:
1e:66:87:ff:26:e7:12:14:90:92:83:5a:d3:5c:ef:db:21:68:
f5:b9:af:88:eb:2f:ee:b9:e4:4e:d9:ca:ce:25:77:d7:e9:65:
6d:ca:75:ba:11:0d:28:4b:b8:6e:2a:aa:c4:fe:14:08:5a:b3:
de:e6:38:ea:38:45:c7:1d:b0:76:b8:82:0e:96:c0:d3:7e:c5:
f5:cf:4d:71:44:c4:1b:86:87:0b:44:bd:58:51:9d:85:f5:f2:
42:98:19:0e:8c:b4:5d:71:48:62:2b:ce:bb:a9:68:98:2c:75:
00:5e:83:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:35:14 2024 by rpki-client on console-fra.rpki-client.org