Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/dv0Wa0JySafy6gcpM-wHj7J_U1w.roa
File: dv0Wa0JySafy6gcpM-wHj7J_U1w.roa (raw, json)
Hash identifier: Fk7HUynkkdIaf2SbgGAoj4f41fhiticx/P6lSNNC0rc=
Subject key identifier: 76:FD:16:6B:42:72:49:A7:F2:EA:07:29:33:EC:07:8F:B2:7F:53:5C
Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial: 01856D66162F1635600D46B139052986E6AE
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/dv0Wa0JySafy6gcpM-wHj7J_U1w.roa
Signing time: Sun 01 Jan 2023 12:54:44 +0000
ROA not before: Sun 01 Jan 2023 12:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59990
IP address blocks: 2a00:1d60:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:16:2f:16:35:60:0d:46:b1:39:05:29:86:e6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Validity
Not Before: Jan 1 12:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76fd166b427249a7f2ea072933ec078fb27f535c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:50:84:39:72:b1:d9:c5:c4:28:d9:16:86:2d:
2c:7d:ec:69:df:38:28:19:83:9a:ec:b7:ed:2e:30:
28:eb:95:a5:55:27:46:aa:ad:6d:f4:bc:a8:9a:f5:
cb:08:a0:78:7d:05:1b:d5:55:a3:2e:67:6c:1d:54:
ee:4e:be:fd:97:54:91:f7:46:07:ec:2f:3e:84:ba:
b4:20:42:8c:51:1a:b8:05:1f:04:19:e9:87:6b:aa:
be:b2:df:f1:7f:dd:bb:87:5a:26:75:9c:64:10:d0:
2a:e2:90:7b:82:6d:e0:3d:c8:37:44:38:1d:33:dc:
6c:da:24:55:f8:a1:22:d1:4f:5c:c7:4c:e5:2a:7a:
a0:17:c9:ea:18:87:5f:51:ef:9c:dd:61:93:74:a5:
91:35:9b:f4:c3:d8:ac:24:02:8c:28:eb:45:bb:48:
57:9b:21:69:39:1a:3d:bb:3b:6b:84:b0:23:aa:f7:
0b:33:43:b8:25:25:96:45:0b:a1:b5:bc:f6:72:e4:
2b:b4:b0:cb:30:eb:cd:a1:72:8b:39:d7:4b:d9:41:
c9:74:ca:5c:6d:91:34:c7:82:c4:42:be:84:54:2d:
71:3b:a0:c4:23:22:6d:5a:88:6b:d7:ed:f7:06:0e:
e2:42:82:82:6a:61:f2:43:1b:00:c6:7e:aa:42:69:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FD:16:6B:42:72:49:A7:F2:EA:07:29:33:EC:07:8F:B2:7F:53:5C
X509v3 Authority Key Identifier:
keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/dv0Wa0JySafy6gcpM-wHj7J_U1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1d60:f000::/36
Signature Algorithm: sha256WithRSAEncryption
4c:86:f4:bd:90:f3:65:0b:69:cd:3f:95:92:4a:99:20:52:51:
a5:4f:0f:24:d0:e5:96:ec:be:7e:c2:4a:0d:e9:7e:8b:b3:76:
a8:5d:a2:39:c1:69:45:c5:e1:e7:bd:6d:1d:c2:af:bf:3f:cd:
16:7e:d6:34:dd:08:88:f4:c2:a0:29:8c:6d:16:79:54:66:a2:
6d:7c:9d:04:43:27:1f:0c:7f:66:af:79:75:ef:96:ea:7c:28:
eb:63:a8:d8:25:cc:77:74:c4:47:dc:12:d1:d0:40:eb:ef:f1:
78:c4:b8:8c:6d:99:7e:4c:5a:8d:00:ca:6a:a8:ef:f8:42:a1:
fa:94:75:9a:5d:1c:6a:2e:7f:4a:36:c5:e7:80:a9:19:da:5d:
34:e8:29:13:95:3d:3e:4f:9f:6c:06:a5:cd:c5:05:87:80:32:
52:2a:73:d4:40:0f:3b:5d:8e:d4:04:71:03:5f:4f:30:c2:7b:
7d:c0:e2:13:47:99:db:9f:24:10:e8:9b:21:d6:41:57:4a:5e:
92:dc:24:21:c9:91:c1:24:4f:a0:ba:4a:19:03:73:ca:78:dc:
68:06:cf:70:d0:5f:c8:5b:b5:88:75:18:b1:7b:55:d9:62:e9:
7e:6c:83:03:26:56:15:b0:45:51:6a:b5:d0:f4:c5:20:2e:2c:
ca:09:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:27 2024 by rpki-client on console-fra.rpki-client.org