Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/3F3PhPup_X8GLWQ6GgSAPo1-Oyc.roa
File: 3F3PhPup_X8GLWQ6GgSAPo1-Oyc.roa (raw, json)
Hash identifier: 6eSLh0wSJCdz/+gOfjalRI47QUtBnenf9hEEfFw4hio=
Subject key identifier: DC:5D:CF:84:FB:A9:FD:7F:06:2D:64:3A:1A:04:80:3E:8D:7E:3B:27
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018CC79472F7DCA7FE453315AF0C2E9DAD53
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/3F3PhPup_X8GLWQ6GgSAPo1-Oyc.roa
Signing time: Tue 02 Jan 2024 00:30:43 +0000
ROA not before: Tue 02 Jan 2024 00:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51659
IP address blocks: 2a11:f186::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 29 Jan 2024 10:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:72:f7:dc:a7:fe:45:33:15:af:0c:2e:9d:ad:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Jan 2 00:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc5dcf84fba9fd7f062d643a1a04803e8d7e3b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:a1:5c:d8:dd:22:71:85:c7:1d:33:b5:31:
6d:c6:4d:d3:a0:eb:14:52:69:89:4c:9b:c2:5e:66:
09:48:5c:9f:25:f5:ef:5b:b6:3a:81:54:a3:84:97:
17:c9:61:af:87:7d:0d:c0:d6:b6:2a:0f:7c:c7:c0:
19:00:d4:6a:35:26:d9:26:8c:23:f8:4b:5b:5d:9a:
5b:8e:4f:d2:b8:43:c4:0f:65:59:b6:16:27:52:80:
65:b7:d0:de:d4:53:88:32:02:d4:b3:d3:37:1a:6e:
62:4f:9a:e3:86:4a:f1:7d:98:df:72:c7:e1:8e:ce:
89:b4:68:64:79:1e:8a:aa:e7:2c:f3:d1:60:20:51:
36:ac:84:33:ae:e8:1b:1e:49:52:30:b4:d3:21:4b:
d3:e5:5d:87:89:20:37:fb:3f:09:54:84:b5:df:67:
32:d1:ed:6d:0a:38:0c:8a:d6:41:8a:63:00:6a:74:
a1:2b:94:e6:d9:43:24:38:47:f2:28:eb:68:c6:1f:
89:1b:27:51:1c:54:0f:6d:4c:e4:59:13:e2:d6:63:
a1:eb:a4:88:1d:b8:82:ad:d6:62:6f:8d:4f:4c:ef:
36:94:c7:1a:29:bd:cc:66:c1:50:26:34:e3:0f:d4:
38:33:c0:b7:28:b6:5f:63:b4:34:21:61:8a:e4:b0:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:CF:84:FB:A9:FD:7F:06:2D:64:3A:1A:04:80:3E:8D:7E:3B:27
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/3F3PhPup_X8GLWQ6GgSAPo1-Oyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f186::/32
Signature Algorithm: sha256WithRSAEncryption
23:bf:8f:9c:8b:ad:b9:63:38:52:44:49:bc:be:4d:22:bd:b1:
30:16:4c:2d:65:18:42:04:27:b5:f0:6b:a7:4a:72:44:6a:b6:
08:25:90:b5:41:58:bc:ee:f4:a8:18:56:c2:85:d3:9d:a6:b8:
71:db:a9:3f:09:e0:0c:07:e9:a7:ce:97:57:55:4a:42:60:74:
72:df:b4:de:87:b1:c4:3d:5f:4e:cb:66:0d:49:19:f8:a3:e0:
83:ee:f8:53:af:d1:3c:90:eb:5b:0d:c2:59:a6:ce:06:77:2a:
c5:06:08:64:24:f9:f2:e9:29:5b:9b:41:90:b7:72:53:52:b2:
56:34:df:f3:5d:21:05:58:b0:4d:73:40:08:20:18:42:86:cd:
d5:8d:f5:1a:29:fa:48:cc:ac:6a:12:74:51:e4:93:7f:78:ad:
65:d8:27:ea:08:2d:4c:a5:cf:2b:06:8d:0a:25:4b:2b:5d:e2:
ab:a0:de:ac:f5:7b:78:43:9a:37:c3:f3:f5:c9:6d:f0:ac:5f:
1c:52:a0:91:85:31:a9:b5:ac:7f:62:21:bf:cf:93:ad:7e:81:
0d:78:7f:e2:90:4b:54:8f:da:ee:d0:7b:3d:20:bb:17:3e:d0:
a2:dc:39:ba:a6:c6:a9:13:51:9d:69:0a:14:38:af:4b:e6:c7:
73:b3:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org