Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/dMn2JqdtNKydvyquNkwNxDMHwsw.roa
File: dMn2JqdtNKydvyquNkwNxDMHwsw.roa (raw, json)
Hash identifier: 4aQ3JMD5Wom+uFniMrGz5dEnRWssrJrv1r56pXwSOZ8=
Subject key identifier: 74:C9:F6:26:A7:6D:34:AC:9D:BF:2A:AE:36:4C:0D:C4:33:07:C2:CC
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F30072001D2889AEBFF98056B01D821
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/dMn2JqdtNKydvyquNkwNxDMHwsw.roa
Signing time: Sun 01 Jan 2023 21:14:56 +0000
ROA not before: Sun 01 Jan 2023 21:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211323
IP address blocks: 2a0e:aa07:e01e::/48 maxlen: 48
2a0e:aa07:f080::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:07:20:01:d2:88:9a:eb:ff:98:05:6b:01:d8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74c9f626a76d34ac9dbf2aae364c0dc43307c2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:6a:f3:4e:ec:a8:3e:fb:0c:1b:ab:1c:56:
27:67:cf:52:90:13:75:0d:d2:04:8b:a1:fe:ae:34:
1d:ec:28:2f:ff:c5:73:80:d3:a0:67:07:c8:2c:28:
80:00:ef:78:f8:b3:30:2a:f2:1b:4c:31:4b:f1:f5:
ef:9a:2e:18:c9:62:b4:31:0b:3f:49:04:15:05:1d:
d0:d7:f5:c4:8c:07:f0:e5:8a:1a:a1:f7:d4:ec:35:
a6:05:50:5b:f0:1e:7d:59:76:cd:c1:54:af:ec:80:
6a:71:48:08:19:f9:06:50:69:88:d3:b4:1a:b5:16:
e4:c0:52:b8:3a:0b:0d:a2:8c:d4:b2:d4:7a:a2:ba:
ca:b3:e4:51:23:ef:72:64:0e:7e:be:6f:56:61:12:
0e:b8:9f:ca:dd:f2:a2:85:cb:03:b5:9b:a5:8f:be:
0b:6d:ef:b7:2f:a2:c7:fa:8f:24:8a:31:bf:1e:73:
84:0a:42:cb:b1:06:94:4d:de:c9:fc:c6:69:ac:70:
9f:64:96:5d:90:42:e4:20:de:0b:a5:f5:da:97:fb:
48:c5:09:9d:32:c1:33:21:fb:5c:5d:07:a8:07:fb:
89:3c:1e:c9:f5:90:9c:cf:38:35:62:06:60:13:4b:
45:2a:57:a5:17:34:30:85:d3:b9:55:3d:39:7e:b3:
ed:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C9:F6:26:A7:6D:34:AC:9D:BF:2A:AE:36:4C:0D:C4:33:07:C2:CC
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/dMn2JqdtNKydvyquNkwNxDMHwsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e01e::/48
2a0e:aa07:f080::/44
Signature Algorithm: sha256WithRSAEncryption
23:46:8a:6a:d1:3b:1d:49:b6:3c:5c:00:97:2d:21:84:c4:02:
72:6a:aa:28:f4:bb:2e:86:0a:6c:62:17:2e:01:39:8f:6f:34:
ae:d4:48:9c:8a:7d:9a:09:30:b3:dc:ee:b5:d6:48:66:88:43:
fe:ce:cc:64:a2:57:05:3d:4e:16:c7:61:52:90:7e:e5:66:2e:
8e:8f:25:0b:0f:e6:54:e6:8c:6d:7f:59:fa:4d:38:59:a6:7d:
06:61:c1:e3:51:81:00:71:3b:29:ad:3d:46:64:9d:68:ef:99:
c8:4f:02:c0:1f:b6:4e:25:65:c1:46:4f:15:da:b8:31:32:a8:
d2:f0:cc:c0:eb:27:84:72:01:04:bf:d1:54:30:d7:ab:3e:a3:
76:e2:ee:09:3d:07:d3:08:25:be:24:24:a0:93:79:da:71:f2:
7d:8d:63:75:42:a4:91:ed:4b:4d:1a:aa:2f:ed:3f:f0:f9:a3:
52:4b:79:a5:25:a1:0c:6a:0b:8a:57:8c:a6:2f:13:46:b4:72:
67:7e:d2:e1:ea:da:06:80:69:6e:5a:7c:11:74:b1:27:17:5f:
55:03:d3:c4:cc:21:e2:8d:94:71:42:fc:81:8a:5e:3b:ee:1e:
d1:aa:7d:30:51:e6:52:66:45:a7:a9:eb:be:3c:51:43:d2:89:
55:1b:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org