Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/PUp5o8CbewGc0bv_C0DJ4dJp7qY.roa
File: PUp5o8CbewGc0bv_C0DJ4dJp7qY.roa (raw, json)
Hash identifier: 2AJ02HkxvsEW0hE2GJUsVRF/k+QPheO1eU6/yp0TdBw=
Subject key identifier: 3D:4A:79:A3:C0:9B:7B:01:9C:D1:BB:FF:0B:40:C9:E1:D2:69:EE:A6
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FF87FE6FD2BDF96DCBC481A3BDEDF
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/PUp5o8CbewGc0bv_C0DJ4dJp7qY.roa
Signing time: Sun 01 Jan 2023 21:14:52 +0000
ROA not before: Sun 01 Jan 2023 21:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209300
IP address blocks: 2a0e:aa06:490::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f8:7f:e6:fd:2b:df:96:dc:bc:48:1a:3b:de:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d4a79a3c09b7b019cd1bbff0b40c9e1d269eea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:9d:fe:e2:60:ab:e9:6a:3d:53:7f:6e:86:
ae:ce:3d:65:28:fb:e2:2e:dc:7b:df:d8:18:40:55:
f4:64:a1:2f:1c:fc:56:a2:6c:e8:00:43:b1:0c:0b:
bc:25:ad:b5:aa:a7:d7:4e:e7:b3:ad:8c:cc:c3:cb:
22:6b:dd:ef:f2:a0:d0:c5:a0:38:ec:ca:5b:c4:6c:
06:bb:de:83:34:1b:e0:1a:34:8b:66:ef:19:19:e8:
3e:8d:75:3a:bc:08:68:fb:83:40:0f:b4:5c:c6:23:
cf:8e:68:7d:4b:02:8f:7b:48:a8:90:cc:22:72:2e:
cb:f7:71:18:52:4f:87:b4:b4:80:25:0b:24:2c:e6:
49:5c:93:54:22:bf:b0:ca:4e:8d:c4:c6:81:e9:26:
ab:8a:df:82:02:ce:80:59:92:33:22:be:07:72:80:
58:9e:2c:d7:52:19:a6:bb:75:4d:3c:7b:6d:d1:67:
ed:8f:ec:04:80:4c:15:35:f4:88:85:62:dd:f9:8f:
48:1d:77:97:32:49:75:c1:b4:2c:9a:88:2b:08:fe:
91:ea:ef:d6:8a:c5:e0:bd:9d:cc:7e:56:f4:f6:90:
e8:64:9c:ff:29:30:78:91:f1:fe:b2:4c:10:6a:e3:
b6:e6:b3:ff:46:a6:5b:20:f8:3c:b3:e6:9a:77:ff:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4A:79:A3:C0:9B:7B:01:9C:D1:BB:FF:0B:40:C9:E1:D2:69:EE:A6
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/PUp5o8CbewGc0bv_C0DJ4dJp7qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:490::/44
Signature Algorithm: sha256WithRSAEncryption
31:c3:bd:e1:e5:ba:28:4d:8e:47:a8:23:2c:0b:46:94:33:b9:
c8:bf:e6:91:69:90:88:a8:3b:47:5c:81:42:f2:c2:c8:56:56:
76:8e:f3:30:22:97:ba:8a:18:ae:a0:2e:f3:c0:84:1f:ca:c9:
bf:75:93:55:8c:45:6a:07:6f:91:38:62:28:f3:b3:e9:e3:94:
62:5f:70:f0:82:0c:8e:a5:fe:ae:ed:55:d4:c7:7b:69:1d:38:
d4:35:27:1b:84:3f:e4:66:3b:46:18:ba:ec:96:72:6b:a3:02:
c7:b9:8b:b9:39:50:32:fe:59:00:16:18:77:39:d8:0a:3d:f8:
c0:ee:b9:b7:04:63:3f:54:77:27:5e:f7:64:89:7e:05:fa:6d:
43:d3:fe:62:bd:dd:8a:85:4c:13:9b:0d:d8:9f:0a:26:41:ca:
27:f7:d3:e1:1e:65:94:33:59:82:5b:59:a2:1a:51:e6:75:f2:
30:48:bb:68:56:06:f0:e7:e5:d2:05:ce:53:16:61:9f:7c:a3:
0a:2c:69:47:26:99:b6:ff:7a:f8:fb:39:02:89:7c:4e:cc:86:
7b:49:0b:bf:e8:33:cf:cf:a7:60:70:5c:d1:1a:2b:56:d4:81:
ca:3b:f1:2c:19:9e:2a:b1:c9:b1:ec:4c:e3:0b:09:6d:44:e8:
68:2a:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org