Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/sOCBKUbQ-kYTxpRJN1irVmSL4I0.roa
File: sOCBKUbQ-kYTxpRJN1irVmSL4I0.roa (raw, json)
Hash identifier: bboANXWjVPcvFOP6ipI1HkmxUdgL79XMr16IesHe57I=
Subject key identifier: B0:E0:81:29:46:D0:FA:46:13:C6:94:49:37:58:AB:56:64:8B:E0:8D
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FD799E2285B7E10C7D72882886567
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/sOCBKUbQ-kYTxpRJN1irVmSL4I0.roa
Signing time: Sun 01 Jan 2023 21:14:44 +0000
ROA not before: Sun 01 Jan 2023 21:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:aa02::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d7:99:e2:28:5b:7e:10:c7:d7:28:82:88:65:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0e0812946d0fa4613c694493758ab56648be08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d1:85:8f:f5:28:af:61:bf:46:79:e5:fe:13:
e9:fc:93:af:52:c8:8f:9f:34:b9:3c:bd:26:86:31:
54:31:5c:c5:71:11:1a:fd:c4:64:81:fb:6d:3b:dd:
dc:23:9f:c9:7c:a6:5c:49:42:18:8b:88:7a:dc:be:
ea:1e:cc:af:3d:da:57:ec:65:01:fb:5e:1f:ce:56:
4c:f1:4d:7f:0a:74:1e:bb:b5:0c:04:3d:6b:b4:44:
0e:82:22:2b:09:28:29:f3:53:f4:88:ee:8e:41:fe:
45:8a:e2:fb:f4:b5:0f:50:7d:b7:5b:89:47:fa:30:
64:d9:f7:95:98:27:da:66:f2:92:a4:f5:38:13:d2:
d1:ef:97:f0:14:53:87:79:d6:f3:c5:df:dd:bf:af:
41:61:82:26:7c:5c:91:70:ea:bc:8e:8e:02:05:08:
60:4b:e4:17:6a:f9:6b:83:06:47:61:36:86:97:98:
ab:be:ca:e7:00:1d:d7:06:4b:99:40:ff:29:88:88:
5f:77:cc:ef:e5:ef:48:4f:3b:a5:97:51:4a:b8:54:
25:3e:c4:d7:39:83:f6:c3:62:e2:3b:23:e7:fa:79:
59:f0:27:3e:88:8b:2f:e3:f7:65:27:5f:12:82:b2:
08:3a:a8:b3:9e:8d:cb:03:ff:36:14:d5:81:b0:ac:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E0:81:29:46:D0:FA:46:13:C6:94:49:37:58:AB:56:64:8B:E0:8D
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/sOCBKUbQ-kYTxpRJN1irVmSL4I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa02::/40
Signature Algorithm: sha256WithRSAEncryption
3e:2f:b7:16:cd:35:a4:e4:ce:c4:5d:c6:21:a3:c3:c0:7e:57:
6b:f1:be:ab:15:67:d3:bc:4f:02:09:79:8d:ec:10:14:9c:e8:
11:e8:54:54:da:a2:f9:37:9e:9a:0d:49:73:5f:e1:be:9c:89:
81:f5:ba:22:f2:9b:9d:ff:23:02:16:5c:6e:00:10:a7:49:c9:
e7:d6:a9:dc:3a:e1:6b:ce:24:81:e0:ed:20:b1:18:81:d5:c2:
80:70:66:fd:06:f7:c7:0c:86:5c:7b:b6:a2:82:23:38:2a:41:
14:f0:09:bd:a7:b4:e7:3f:ca:6e:fe:00:ee:eb:14:18:e2:2e:
a3:26:2f:4c:7e:47:da:16:15:26:d9:36:47:ee:14:c4:54:1f:
21:19:87:40:51:6f:80:90:7b:b5:b3:e3:d0:a4:1b:8c:c9:be:
c3:00:e0:2f:53:74:15:60:19:3c:df:26:2b:56:81:66:b1:05:
b6:b6:ba:07:15:e8:40:29:5a:69:84:0e:55:e6:b8:ec:64:3c:
a1:9a:86:16:38:3e:46:ca:7f:fb:a1:9c:47:00:58:92:59:c1:
f8:c2:ed:e2:90:dd:2a:eb:a5:77:6e:89:27:e0:86:e3:9a:e1:
d5:2a:73:eb:8f:75:9a:6d:73:4d:7a:ed:b3:e5:43:0d:f1:cf:
40:6e:e4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org