Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/de3ymnFTmiGctv9aC17STZbdueo.roa
File: de3ymnFTmiGctv9aC17STZbdueo.roa (raw, json)
Hash identifier: P6TYtWBhKAiYxYQE9AmfYQLC9TiXTzNsrkP1baBEqA8=
Subject key identifier: 75:ED:F2:9A:71:53:9A:21:9C:B6:FF:5A:0B:5E:D2:4D:96:DD:B9:EA
Certificate issuer: /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Certificate serial: 0185739F0FD5410AD1128097B213BA39D3FD
Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/de3ymnFTmiGctv9aC17STZbdueo.roa
Signing time: Mon 02 Jan 2023 17:54:41 +0000
ROA not before: Mon 02 Jan 2023 17:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 2a00:be80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:9f:0f:d5:41:0a:d1:12:80:97:b2:13:ba:39:d3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Validity
Not Before: Jan 2 17:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75edf29a71539a219cb6ff5a0b5ed24d96ddb9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:8f:20:de:a9:9b:a7:a2:db:60:98:f5:43:
60:6c:83:33:e2:39:c7:b5:f8:b1:41:a9:5b:6e:78:
df:db:84:18:30:d6:ba:45:19:ec:56:ea:40:90:ea:
f9:4b:20:86:a3:03:51:b5:8c:d7:c8:6f:e7:63:cc:
2c:03:f0:c9:e2:69:a1:dc:f9:3c:08:3d:48:ac:b0:
52:0d:0b:5a:30:fc:e8:bf:71:57:f2:91:4e:87:87:
cd:73:66:78:d2:09:4c:f9:a7:88:c2:fd:25:30:9c:
23:07:83:ca:ce:7f:f5:42:4d:27:40:f4:7b:00:db:
c5:e7:0f:f7:13:7f:59:a9:ef:cd:66:31:54:21:01:
62:22:28:b7:d1:9b:4b:9c:22:1a:f2:2b:96:68:3e:
31:b2:8c:68:de:bb:77:52:1d:d4:ed:df:16:24:41:
d1:df:a9:76:6c:c4:df:6b:ec:3e:20:22:cf:e7:39:
33:a2:60:26:d5:66:0e:f1:11:71:73:45:80:f4:d3:
4b:d7:95:e1:72:d6:72:16:da:05:31:3a:0d:bb:b0:
f4:4d:5d:37:40:bf:2d:7c:7b:3a:d3:dc:45:e6:f3:
72:06:84:4e:cf:0c:c0:a3:07:9a:44:9f:46:32:60:
4a:09:a9:18:a6:cc:a2:ab:12:cb:aa:8a:9d:10:1b:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:ED:F2:9A:71:53:9A:21:9C:B6:FF:5A:0B:5E:D2:4D:96:DD:B9:EA
X509v3 Authority Key Identifier:
keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/de3ymnFTmiGctv9aC17STZbdueo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:be80::/32
Signature Algorithm: sha256WithRSAEncryption
3f:fe:80:92:6f:8d:53:f5:42:d8:93:e1:68:fc:a6:69:55:b3:
3f:f1:2e:4e:9c:03:ba:07:7f:5b:4a:b7:6b:c5:b0:da:02:40:
dc:82:3d:13:e9:1d:c3:73:4f:bb:5e:f1:9e:00:9c:8d:9e:cb:
7f:ca:dc:bf:df:3e:00:de:64:b3:8a:1b:40:01:ae:09:9a:3d:
27:3d:94:4c:7a:0d:fa:92:27:5f:89:fc:34:bb:bf:be:26:60:
ab:cc:00:6e:9f:b4:ca:d2:57:33:b0:c4:93:67:18:11:93:14:
1a:db:a0:46:bc:18:0d:50:9e:e3:e3:35:18:b3:fc:58:3d:23:
a0:6f:0a:a8:09:62:9c:cb:5e:f5:d6:51:86:2a:9c:ca:7e:a1:
ff:64:86:3b:52:48:55:e6:bd:42:6e:65:05:18:37:8c:d6:ea:
55:b8:84:5c:46:1c:4a:3b:ba:90:36:70:d1:72:e0:d2:d4:18:
39:64:62:0c:64:72:c6:80:6b:3b:15:a7:21:42:0b:62:76:28:
b0:8d:22:e1:c6:76:8c:25:f7:34:b2:89:87:7b:41:c7:10:1c:
87:20:cc:6a:fb:d1:05:7f:12:da:7c:0e:d4:63:cd:2a:ed:db:
5b:bd:a2:45:f7:3f:bd:d0:16:2e:ca:f8:91:20:1e:74:23:95:
a5:fa:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:16 2024 by rpki-client on console-fra.rpki-client.org