Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vryQNRJesX-M3xI58WJsr_aPuDU.roa
File: vryQNRJesX-M3xI58WJsr_aPuDU.roa (raw, json)
Hash identifier: FX6BoNnOgShJxcwI6tRW5Rv+oYc/yhO/Y9EXt3rhp0k=
Subject key identifier: BE:BC:90:35:12:5E:B1:7F:8C:DF:12:39:F1:62:6C:AF:F6:8F:B8:35
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FE5C317CA3AD7A6BDE8C8CCDD2A78
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vryQNRJesX-M3xI58WJsr_aPuDU.roa
Signing time: Sun 01 Jan 2023 21:14:48 +0000
ROA not before: Sun 01 Jan 2023 21:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140972
IP address blocks: 2a0e:aa07:e015::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e5:c3:17:ca:3a:d7:a6:bd:e8:c8:cc:dd:2a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bebc9035125eb17f8cdf1239f1626caff68fb835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:1e:ce:25:8f:9d:e9:98:19:e3:3f:3e:fc:
c5:ce:c6:c7:a3:ab:38:5d:a8:cd:9a:1f:ae:f7:f7:
13:49:da:86:dc:6f:ec:41:65:95:a0:b6:b8:0a:8d:
ab:c2:aa:f9:c2:2c:bc:c0:e3:27:9a:10:43:8f:0e:
05:af:40:f9:26:15:ff:bc:fa:ea:6b:b8:b6:75:c8:
53:b1:a1:b2:e9:04:bb:2e:52:50:26:d1:4e:32:f9:
7e:6f:ae:e2:cb:73:f5:10:ca:c3:3e:e0:77:ee:55:
06:67:e1:4a:52:e8:f5:56:78:14:ae:e8:57:20:4e:
25:14:30:f8:83:19:7f:a9:a1:ff:f9:da:a0:e3:9d:
fe:f3:f5:46:39:1d:bd:b0:7c:c3:1e:2e:9d:46:fa:
8c:e0:4f:3d:d4:79:8d:3a:1c:de:72:65:13:e5:87:
01:6f:e8:e7:16:0b:e0:aa:29:23:9a:3a:fb:c9:11:
ca:49:24:bc:fc:91:76:5a:cb:db:b6:27:d6:5b:7c:
68:e4:20:44:c8:14:51:48:8c:f2:b4:db:7f:60:20:
32:99:44:fd:30:0d:99:00:bc:bd:90:52:5a:77:9e:
27:e5:c5:7b:7d:c7:32:28:08:60:ac:75:72:56:5d:
78:48:12:8a:7b:6e:4c:83:c2:a4:45:46:57:fc:61:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:90:35:12:5E:B1:7F:8C:DF:12:39:F1:62:6C:AF:F6:8F:B8:35
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vryQNRJesX-M3xI58WJsr_aPuDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e015::/48
Signature Algorithm: sha256WithRSAEncryption
bb:db:86:88:b3:21:cc:59:b8:86:63:c0:73:62:1e:33:a1:2a:
d5:6e:7b:62:72:b9:5f:80:49:5e:81:33:61:0b:bd:fb:a1:be:
13:b1:63:07:ac:79:a2:d0:a5:15:97:28:62:73:f6:a6:cc:7b:
2c:d2:cf:eb:1a:35:9e:db:6e:48:20:9e:ea:a7:84:e3:ba:0f:
f5:76:74:54:4c:42:88:b8:b8:a6:05:f1:63:85:50:7d:ba:d3:
4c:d7:e4:b9:af:47:c2:ac:c7:c9:41:f5:41:77:3e:d4:d9:17:
65:db:97:43:17:92:0c:e4:38:84:d8:18:88:16:43:17:64:b4:
c7:34:14:e0:11:9c:2c:b0:ce:ee:44:a7:20:55:d1:34:db:27:
75:da:26:db:c3:6c:f6:0b:97:11:ca:3f:0c:39:9f:74:b8:4f:
70:b1:d9:d8:fc:cb:c5:b7:ae:5e:af:59:3b:ed:4e:1c:60:d0:
fe:bc:a7:d8:c6:e0:dd:27:84:3d:0d:4d:0d:90:f5:25:27:de:
78:47:f8:f9:70:11:6f:c9:ce:90:02:f0:41:aa:21:e3:64:07:
80:08:fd:e5:11:c5:6e:43:71:31:8e:5d:a2:f7:fa:f3:6f:e5:
c6:58:d3:4b:50:68:5d:52:a3:bc:9d:99:33:12:41:7d:5b:f3:
54:7c:3e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org