Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/PrEbS_Qi3OttUhqYr1wnJtQYfYY.roa
File: PrEbS_Qi3OttUhqYr1wnJtQYfYY.roa (raw, json)
Hash identifier: W6jheBvKyzwyz8iD/4k471q/AK34J8Jucm/Ku9bJElQ=
Subject key identifier: 3E:B1:1B:4B:F4:22:DC:EB:6D:52:1A:98:AF:5C:27:26:D4:18:7D:86
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FF0071DCB9BB0EC4197A34FBAF477
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/PrEbS_Qi3OttUhqYr1wnJtQYfYY.roa
Signing time: Sun 01 Jan 2023 21:14:50 +0000
ROA not before: Sun 01 Jan 2023 21:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206843
IP address blocks: 2a0e:aa07:e00e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f0:07:1d:cb:9b:b0:ec:41:97:a3:4f:ba:f4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eb11b4bf422dceb6d521a98af5c2726d4187d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:92:37:a5:74:cc:46:f4:dd:6b:77:dd:c4:
28:52:a0:89:43:54:23:14:66:66:16:b1:e9:24:3c:
94:fe:e3:f1:c5:ea:c6:d4:89:47:50:7b:10:63:3b:
37:37:e8:11:3b:44:c1:69:e0:74:48:93:4c:6b:a9:
b4:61:f3:ec:a4:16:d4:3e:b6:7b:99:4b:b6:18:b0:
b7:11:1e:82:45:84:bd:04:f0:0f:cd:ec:69:61:29:
0c:b4:74:6d:ab:42:a9:cb:af:76:6b:16:7d:e2:fb:
bd:1c:99:d4:18:4c:35:91:ab:93:dd:31:e6:ab:75:
cc:79:b9:28:0e:c3:68:77:af:fc:7b:a6:5a:e7:75:
65:3f:82:ca:a9:51:7c:3b:c8:71:66:03:b7:64:d1:
69:57:ec:dd:00:30:94:7e:1e:5a:3d:b2:92:09:2f:
42:61:9f:e1:95:46:62:5a:c4:7f:45:aa:ad:a7:41:
a3:c5:58:66:59:e6:13:ef:b0:2c:b6:d1:46:d6:a8:
8a:fc:22:c5:32:2a:40:7d:11:5d:92:70:7b:15:ad:
93:20:cb:93:55:4a:0d:e7:43:c0:41:ba:c9:e5:2a:
52:4b:e7:68:cf:70:90:d5:c0:38:26:c1:ff:4e:c8:
ff:a1:c8:39:0a:e8:0c:d2:83:f2:07:dc:ed:1f:a4:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B1:1B:4B:F4:22:DC:EB:6D:52:1A:98:AF:5C:27:26:D4:18:7D:86
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/PrEbS_Qi3OttUhqYr1wnJtQYfYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e00e::/48
Signature Algorithm: sha256WithRSAEncryption
a4:db:29:33:b2:4f:fa:c6:bf:cb:0d:e8:57:27:d8:87:11:cb:
c9:12:cf:bd:1c:46:fe:8e:cb:16:7c:07:e2:c8:7b:60:f3:b6:
ef:e4:e6:e0:b1:fd:6c:3b:cb:f7:d1:5d:d6:3e:d4:f0:a3:25:
62:bf:59:12:f1:82:63:b9:08:c1:e1:7d:59:d0:e5:53:db:3a:
d9:b5:a1:c0:f8:f2:9f:d1:05:fc:ba:15:36:e3:11:0d:26:c3:
15:c2:89:0d:29:4f:8a:ac:f8:d4:ee:85:e7:43:1a:f8:40:c0:
d2:ec:b6:31:62:69:08:af:dd:27:eb:34:7c:d2:0a:c2:2c:79:
11:ef:6c:45:a1:46:80:33:cc:5f:34:54:1c:d0:ec:80:68:90:
6c:2c:f6:6d:c9:d1:99:ff:fd:3d:ce:a5:b1:c5:eb:d4:9f:2a:
f3:d3:06:c0:5b:46:b9:dc:db:85:ee:41:f2:e7:af:4b:04:48:
42:4d:67:fc:18:3c:51:a7:74:bf:22:8d:73:45:11:84:26:bf:
c3:62:5d:55:85:e2:80:99:8f:71:44:d8:9e:ca:3b:a3:ca:37:
63:a4:55:3a:01:46:e7:4a:49:98:39:d5:4c:63:be:25:52:b5:
4d:81:66:a9:a0:d1:69:e9:d4:45:19:19:08:4a:3f:6b:f1:48:
d6:f3:1e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org