Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_ZyRgdQOk6PKUuVD6bySkT-_pvk.roa
File: _ZyRgdQOk6PKUuVD6bySkT-_pvk.roa (raw, json)
Hash identifier: OrhWj0S7MD6pxCUpRuehVqOjGi/EP43KDb+NxCryrww=
Subject key identifier: FD:9C:91:81:D4:0E:93:A3:CA:52:E5:43:E9:BC:92:91:3F:BF:A6:F9
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018C5EFF1D896AE80BF36D48D59E9FAC6E59
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_ZyRgdQOk6PKUuVD6bySkT-_pvk.roa
Signing time: Tue 12 Dec 2023 17:07:06 +0000
ROA not before: Tue 12 Dec 2023 17:07:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215848
IP address blocks: 2a0e:aa07:e160::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:ff:1d:89:6a:e8:0b:f3:6d:48:d5:9e:9f:ac:6e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Dec 12 17:07:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd9c9181d40e93a3ca52e543e9bc92913fbfa6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:39:cf:3e:09:20:8e:de:00:36:50:ac:80:
2d:c6:2b:90:22:fe:74:7f:bc:af:a5:00:d3:04:09:
38:d5:e0:89:af:28:40:21:81:69:29:e5:6f:e5:03:
c5:6f:40:3e:ae:52:a9:26:02:e5:45:26:18:09:a7:
a4:aa:bb:68:e8:c6:79:03:e8:a9:00:51:49:d5:70:
b5:64:68:97:77:5d:eb:24:3f:71:0e:72:61:de:ed:
97:45:fc:1e:ed:82:13:64:80:80:f4:9b:01:a0:a8:
ba:27:43:94:6a:2f:17:ac:b5:b2:99:4b:a8:50:bc:
2d:3e:9b:f0:09:9d:34:65:09:18:c9:e3:9c:68:dd:
f6:b6:14:68:54:c4:ee:34:44:3d:c2:3b:2a:c6:81:
86:fa:27:33:82:a5:0b:83:ee:a1:13:bb:97:08:0b:
25:76:5e:4a:21:e2:2d:44:d6:f4:37:ca:be:26:88:
e1:73:4a:c4:58:c7:46:16:13:2f:69:15:5c:d8:a8:
f5:b7:b0:c9:88:6c:0f:65:10:0c:c0:79:8c:9e:45:
e7:dc:63:d0:4c:ed:3e:e7:78:e7:25:d2:59:2c:5b:
55:4b:2b:07:37:23:fd:36:b8:f2:49:2c:10:8f:0f:
9c:a0:72:04:ba:26:a9:ec:e7:60:cb:5a:75:f6:78:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9C:91:81:D4:0E:93:A3:CA:52:E5:43:E9:BC:92:91:3F:BF:A6:F9
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_ZyRgdQOk6PKUuVD6bySkT-_pvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e160::/44
Signature Algorithm: sha256WithRSAEncryption
9d:b3:1b:8b:e7:7d:18:61:d0:ad:f8:67:35:7e:c1:d1:c0:21:
2a:6b:9a:66:5e:19:a9:ac:bb:4c:01:c1:98:8e:1c:37:9b:35:
99:f7:c7:ca:95:27:a6:99:cd:10:b5:1a:3c:ee:51:ce:2a:9e:
2c:f6:09:b1:59:ac:c3:85:23:c9:41:1c:98:a1:4d:85:e7:43:
fa:9e:52:28:a9:ba:ed:19:c3:57:2f:15:f2:65:f7:08:f4:53:
2a:08:31:fe:c8:49:af:cc:fc:6a:75:f1:54:c5:01:bf:4a:76:
89:fd:81:db:ee:a9:83:e4:b1:a4:1d:91:b9:5b:ca:3f:ca:45:
9c:9d:0e:48:f6:91:b3:c2:79:1c:ed:ca:f0:d4:70:e8:9d:d1:
ec:3c:22:09:9e:6e:74:fa:70:b4:ba:94:b2:9b:09:22:ae:f0:
03:8a:65:bb:af:05:77:ac:b9:df:d7:f7:d8:69:ca:d0:f8:67:
0f:61:c1:01:9e:69:e7:aa:35:fe:5c:80:4f:17:4c:4e:46:e1:
62:b3:d7:ae:26:be:ae:57:e0:c4:1f:b8:8b:8a:af:0c:a6:df:
f0:d3:9b:38:13:87:a5:7e:37:82:0a:96:ce:50:70:db:25:86:
38:bc:ac:fd:b0:43:68:08:b1:12:1f:c9:3c:a6:51:39:02:74:
a1:c5:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org