Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/96jgmKaJjNDeBhLLvUAoV_zxUIQ.roa
File: 96jgmKaJjNDeBhLLvUAoV_zxUIQ.roa (raw, json)
Hash identifier: 92ms+ViMZXv94pFKDIhmI1q94w/+WU9qHTk2pTXPGyU=
Subject key identifier: F7:A8:E0:98:A6:89:8C:D0:DE:06:12:CB:BD:40:28:57:FC:F1:50:84
Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial: 018571BA0CEC34D59395D06CC9CC0BDCB1B5
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/96jgmKaJjNDeBhLLvUAoV_zxUIQ.roa
Signing time: Mon 02 Jan 2023 09:04:56 +0000
ROA not before: Mon 02 Jan 2023 09:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202619
IP address blocks: 2001:67c:26f8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:0c:ec:34:d5:93:95:d0:6c:c9:cc:0b:dc:b1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Validity
Not Before: Jan 2 09:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7a8e098a6898cd0de0612cbbd402857fcf15084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:cc:c1:dd:9a:2f:25:8a:57:d7:48:d1:4c:
b3:6c:bc:a7:fd:47:28:2c:f4:dd:1d:e7:82:ac:a3:
2b:02:1b:1e:04:01:6d:fe:4f:a0:87:75:eb:0a:a3:
e3:1d:e6:57:e7:de:7a:6f:d8:b3:7a:60:29:75:24:
f6:f7:16:f1:85:17:d2:43:c9:ad:1e:33:96:f6:f0:
8e:57:fb:60:b6:95:a2:af:a5:e9:53:d9:70:3b:1b:
12:64:31:47:cc:69:ec:ae:11:1a:83:41:8e:0c:ce:
ad:95:3b:77:c4:ca:d5:21:28:e3:51:65:6c:49:5e:
12:11:2c:c7:cc:27:19:27:21:c1:39:f0:49:d9:8e:
56:3e:56:2a:56:62:49:20:67:31:d1:f8:4e:a4:78:
ef:dc:cf:44:f2:ee:db:dc:7e:cf:15:49:d0:23:83:
23:45:0c:1b:91:44:73:75:90:b1:09:c7:8a:38:66:
a2:3e:7b:23:43:ef:b1:38:37:33:c4:c8:41:ca:0e:
28:65:df:82:22:4c:f4:90:3d:b1:14:1a:6a:b0:94:
8c:90:3b:97:39:1a:ba:95:7c:b6:a6:9c:2b:b5:52:
7a:0d:a9:d6:08:68:15:25:66:a0:70:76:02:32:76:
8d:28:ba:f4:09:5e:10:7e:d8:8c:e4:19:ed:7f:0a:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:E0:98:A6:89:8C:D0:DE:06:12:CB:BD:40:28:57:FC:F1:50:84
X509v3 Authority Key Identifier:
keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/96jgmKaJjNDeBhLLvUAoV_zxUIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26f8::/48
Signature Algorithm: sha256WithRSAEncryption
50:af:41:b4:58:a6:e6:ee:fb:fc:37:9e:3e:60:a4:a3:d3:5c:
48:95:ca:22:b9:25:1e:41:b8:bf:24:a8:a0:39:22:cc:5b:75:
7e:73:3b:c5:c5:ca:29:85:d7:fb:b1:a8:ca:c9:60:a2:a0:25:
1d:80:2b:51:08:c7:ee:03:ce:9e:84:85:47:51:3a:23:cd:7f:
f3:de:f1:0e:cb:02:63:6e:1b:8c:79:8e:9f:72:3c:c0:08:20:
fe:dc:74:70:2b:82:37:45:ee:6d:df:bb:b9:3e:44:2f:4a:be:
87:14:d6:94:5f:55:e1:4f:f7:fd:82:70:af:14:32:67:28:fb:
5b:36:ba:66:82:ff:c3:61:0d:0e:84:04:9b:4f:87:19:d6:3f:
97:47:dd:5e:f8:43:5e:73:3d:85:99:06:52:b4:43:38:b4:d0:
34:d5:88:bc:7c:9e:fd:2e:f4:7d:85:c7:02:2b:2c:82:7a:85:
1d:51:7b:ec:d8:d6:49:10:bf:1b:27:1f:c5:f8:29:13:8d:47:
dd:c9:79:e3:f0:0e:ef:09:d6:85:52:1e:36:4d:43:9b:1b:25:
10:fa:d7:97:e0:d2:77:f7:fe:12:15:82:40:79:71:0e:b9:78:
b7:92:fb:2a:9f:8d:2f:ad:2e:6b:f5:5e:2d:a8:41:3b:46:f3:
77:f3:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:58 2024 by rpki-client on console-fra.rpki-client.org