Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/s36R5kQNSB_GfZb1btpfxelpbSM.roa
File: s36R5kQNSB_GfZb1btpfxelpbSM.roa (raw, json)
Hash identifier: TEtJ9qvVa6htDNcv1wTmq4kU9JkKmZvFKqGEqDvyLKM=
Subject key identifier: B3:7E:91:E6:44:0D:48:1F:C6:7D:96:F5:6E:DA:5F:C5:E9:69:6D:23
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FDC684454EA99A2A7F7FF3D49FFC4
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/s36R5kQNSB_GfZb1btpfxelpbSM.roa
Signing time: Sun 01 Jan 2023 21:14:45 +0000
ROA not before: Sun 01 Jan 2023 21:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38136
IP address blocks: 2a0e:aa07:e011::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:dc:68:44:54:ea:99:a2:a7:f7:ff:3d:49:ff:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b37e91e6440d481fc67d96f56eda5fc5e9696d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:61:bb:7c:50:f0:f6:b1:30:a6:f9:0a:e0:68:
5e:60:b0:f8:98:50:87:48:c3:fe:b0:8b:13:ce:af:
34:73:2e:ab:01:17:0f:70:a7:ae:4b:28:15:6b:57:
22:3c:94:62:98:f6:51:fe:11:43:48:d0:90:d4:20:
5e:98:3f:8e:fb:ee:14:70:9f:94:28:62:4f:d3:f3:
ff:40:4e:5c:77:7d:84:8f:63:cc:68:6d:76:43:85:
eb:93:c2:e7:f5:88:d4:4c:05:79:90:c2:a0:5b:3e:
4e:fa:23:ff:c4:9d:00:0a:0e:4a:40:3d:7c:9b:15:
77:8d:5a:85:bc:64:17:39:c6:3a:bd:8e:b7:ea:f7:
d0:98:85:df:c0:ff:75:0c:3b:67:9f:ec:a2:f5:53:
4c:80:16:c8:79:8d:4b:42:a5:45:eb:8f:a9:3f:55:
14:6a:08:b1:ea:fb:fc:ac:8c:12:4a:3c:ba:c0:72:
18:46:67:ab:08:0d:9d:4f:38:c1:14:2a:80:95:6d:
cd:17:ce:2e:d2:e3:85:af:d1:87:8a:ed:f3:6b:60:
72:fa:9d:66:47:a8:4b:7d:ed:08:e2:07:3d:34:17:
16:d2:0d:17:43:db:c9:0d:05:b7:30:e9:e0:51:ae:
84:f1:16:d3:ea:5e:87:de:86:3d:38:c6:bd:a5:42:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7E:91:E6:44:0D:48:1F:C6:7D:96:F5:6E:DA:5F:C5:E9:69:6D:23
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/s36R5kQNSB_GfZb1btpfxelpbSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e011::/48
Signature Algorithm: sha256WithRSAEncryption
23:bc:9a:bf:cc:de:5d:35:fb:d1:14:0d:d2:45:82:f3:f2:17:
f0:39:72:99:ca:5a:fe:c3:1d:01:df:49:9e:48:01:bc:2f:37:
ae:3e:24:22:1e:0d:09:7b:24:07:fb:50:65:25:06:2a:4e:b3:
c3:7c:3d:50:cf:83:a0:79:34:35:03:eb:31:62:54:85:07:67:
d7:b6:c8:80:f2:29:19:2e:b1:ab:32:4a:56:56:1a:fa:a3:d0:
08:28:07:46:36:3d:0d:ad:09:29:e0:d2:41:b5:fa:4b:8c:bf:
7c:d6:96:4b:a9:57:c3:f6:3a:4e:e4:26:da:bd:ce:22:0c:62:
d5:36:31:a2:f9:2a:c0:3f:3a:33:3b:d8:64:54:4d:8c:22:55:
72:b2:a2:2a:c7:dd:85:fd:68:5c:7c:a2:9f:fb:7d:91:83:49:
58:c1:bd:ff:ce:aa:94:f6:a3:f4:92:40:61:da:4f:06:32:ae:
74:50:fc:ef:d0:72:61:65:84:6a:f9:74:37:96:09:46:7e:96:
cb:7e:f4:ad:c8:d2:07:70:a9:9b:f5:c6:03:ac:fe:e1:69:30:
07:9d:b0:c9:45:75:97:99:22:42:0c:98:b8:f3:e6:83:92:37:
9e:da:e5:5d:5d:d8:b3:80:43:60:f6:c6:62:c1:07:1c:87:9d:
ac:de:43:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org