Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jWw7VbzYKEi6ZIADyngI9QKXEgs.roa
File: jWw7VbzYKEi6ZIADyngI9QKXEgs.roa (raw, json)
Hash identifier: zrP+CITmvtpqZJvRvnTypI8i6WNgrcLDcBwedq4Za7k=
Subject key identifier: 8D:6C:3B:55:BC:D8:28:48:BA:64:80:03:CA:78:08:F5:02:97:12:0B
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FE4F869B43D0B57372EBC270C154C
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jWw7VbzYKEi6ZIADyngI9QKXEgs.roa
Signing time: Sun 01 Jan 2023 21:14:47 +0000
ROA not before: Sun 01 Jan 2023 21:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139589
IP address blocks: 2a0e:aa01:1fff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e4:f8:69:b4:3d:0b:57:37:2e:bc:27:0c:15:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d6c3b55bcd82848ba648003ca7808f50297120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:33:c5:85:06:90:3f:e8:81:95:82:50:7d:55:
6f:f7:03:1c:f0:4f:10:5b:28:74:da:47:06:b1:ba:
10:0d:c0:35:58:fa:d7:3a:4f:6e:6c:eb:36:91:3c:
32:38:19:5b:6d:c7:7a:8c:9b:53:3e:1d:be:45:dc:
60:04:dd:8b:9b:3e:8f:b6:65:37:64:27:25:e6:bf:
37:6e:fe:8a:50:d6:25:fe:e6:ac:a4:94:3b:3a:bf:
a1:16:13:41:ae:dc:fe:f2:a7:f7:04:66:54:ee:67:
78:27:8b:d1:1b:96:5e:ca:de:f3:48:32:62:45:86:
39:73:24:13:92:b0:dc:40:42:24:e4:d0:3a:2e:3a:
06:9c:03:ee:f7:5c:4e:cd:87:26:e8:7d:5b:9c:6b:
a8:60:54:d1:05:9a:4d:1e:ed:ea:02:48:24:81:76:
8c:96:2f:36:30:10:50:2c:bb:b7:7f:35:be:b2:84:
41:fe:61:d4:3c:ee:f4:bc:88:e3:19:a4:fd:bf:b0:
30:8e:ef:18:9b:74:fe:bb:94:4d:74:c8:04:bf:ae:
c7:57:00:68:a9:af:d2:6c:56:5e:b5:65:ec:3e:74:
18:02:71:11:d2:ba:9e:d0:ed:33:ca:d4:31:6f:30:
3d:44:4f:52:80:b3:d3:2d:f4:50:1b:58:da:45:e7:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:3B:55:BC:D8:28:48:BA:64:80:03:CA:78:08:F5:02:97:12:0B
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jWw7VbzYKEi6ZIADyngI9QKXEgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa01:1fff::/48
Signature Algorithm: sha256WithRSAEncryption
b2:cb:00:b5:d8:e1:c8:a5:bd:26:d0:aa:35:15:a2:69:ad:30:
5e:7d:a8:d0:69:d0:d4:f3:1c:b7:72:fd:10:2a:e3:2d:b8:23:
94:9b:65:7b:c4:1d:d0:50:ac:a5:3b:a6:dc:58:25:a6:d6:53:
3a:27:c7:c4:e4:73:d3:e9:f6:74:2b:44:87:c0:0b:dd:48:2e:
80:be:86:db:6d:25:ef:e0:37:56:dc:55:ce:9b:97:92:9e:8e:
8d:07:d7:b4:2b:1e:0a:c2:38:84:81:f8:c2:87:0e:86:38:01:
9b:7a:c9:57:d7:df:01:40:fc:1f:7c:96:de:e9:d4:3f:c4:10:
0b:93:7d:b2:3b:38:11:bb:f0:13:eb:07:e1:3d:65:4a:16:fa:
18:3b:f5:53:47:7e:22:71:1c:a2:a9:d3:81:32:7c:d3:ab:d1:
73:2d:49:10:b0:6e:e5:d4:6a:91:49:84:42:3a:61:da:80:0b:
18:fd:0b:c9:58:f2:21:21:03:c9:c8:37:0e:3b:0e:91:88:a5:
5c:62:ca:99:4c:1c:80:ab:4a:c5:e3:a8:9a:b1:d4:3b:73:5e:
51:70:0f:13:f1:09:81:f4:e3:e9:ee:05:70:db:19:7a:39:c5:
a9:37:61:1c:b6:3a:2c:a3:ff:81:fb:99:c0:20:66:be:de:de:
16:16:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org