Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/P8BN807icnY-LQ6OzH63yecuQ8I.roa
File: P8BN807icnY-LQ6OzH63yecuQ8I.roa (raw, json)
Hash identifier: lvSEYejIgzP7sceabhlXISxIkWEVB9ZYAZgsIPHo4yM=
Subject key identifier: 3F:C0:4D:F3:4E:E2:72:76:3E:2D:0E:8E:CC:7E:B7:C9:E7:2E:43:C2
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DC6C5EC03D255E429001E0DCBE1AF
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/P8BN807icnY-LQ6OzH63yecuQ8I.roa
Signing time: Sun 01 Jan 2023 20:55:00 +0000
ROA not before: Sun 01 Jan 2023 20:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56769
IP address blocks: 2a0f:b4c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c6:c5:ec:03:d2:55:e4:29:00:1e:0d:cb:e1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fc04df34ee272763e2d0e8ecc7eb7c9e72e43c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:5a:1c:65:e8:c3:31:0d:75:9b:0d:02:3e:
45:f2:8c:25:5e:c2:5f:87:3a:9e:04:52:74:be:64:
22:b4:fe:d5:11:58:04:61:3c:ab:1c:8c:2d:06:1b:
25:9e:a9:63:60:1a:83:97:80:a9:4b:cb:53:bd:4a:
8e:b8:db:6d:1f:17:c6:ed:b4:e7:4d:0d:4c:74:18:
e7:d5:22:7b:f8:18:4e:ed:bf:87:d1:f3:a5:f2:77:
50:07:a8:d3:32:b6:ba:cc:9b:9a:e8:a1:b2:5c:a6:
35:6c:af:09:2c:cb:23:72:34:8e:b6:09:0a:ad:04:
d7:9a:c0:27:0b:71:e0:33:43:61:44:8b:0a:52:0d:
7d:97:98:ad:46:24:0d:15:f4:2e:81:c9:70:b5:2a:
01:55:3f:4c:81:29:13:20:c6:c3:99:2a:39:3c:b8:
93:bf:be:59:b4:99:f3:7c:89:11:8c:93:d1:e3:52:
80:0c:ca:74:df:0c:1c:bc:9d:85:37:2e:0f:a5:4f:
09:b4:9e:e2:60:9c:2a:00:b5:a2:02:e8:84:33:2a:
ce:81:82:2e:2e:be:9d:3b:1b:b2:8d:34:83:c2:d6:
90:29:64:95:0b:5f:6d:46:65:ed:1f:66:e3:e8:7b:
61:62:9d:66:bc:c8:d7:2a:f8:19:89:e9:92:7a:5a:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C0:4D:F3:4E:E2:72:76:3E:2D:0E:8E:CC:7E:B7:C9:E7:2E:43:C2
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/P8BN807icnY-LQ6OzH63yecuQ8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
56:2e:ff:be:df:6a:df:98:b2:5a:b6:9d:31:c5:91:57:b2:73:
ce:ad:7e:1d:bd:c3:3d:9f:f5:46:70:ab:67:b1:b3:7c:b5:8c:
77:ac:ff:1e:a8:4e:d7:05:a5:6e:39:34:28:e7:40:fb:13:e8:
ae:ef:44:a4:03:92:74:c5:67:5c:5c:97:49:a2:5e:62:ee:2b:
b1:55:e7:85:71:ff:b0:db:ec:65:16:1e:33:c6:f2:42:d2:1a:
e5:1b:5b:9c:a9:82:64:fe:9a:a3:4f:13:6c:87:d3:50:ef:dc:
15:95:b8:59:e2:b5:9d:47:14:fb:29:d4:ff:e9:51:b2:ce:b0:
f3:f2:53:bd:19:72:61:72:16:ad:a3:a7:10:96:d8:56:32:f5:
0b:3b:fb:6f:97:bd:87:06:98:44:eb:f6:d8:a2:1d:71:51:e3:
6e:f6:7a:a0:b2:71:8f:89:92:4d:3b:91:fc:05:73:38:dd:6f:
32:b5:5a:2a:28:f0:55:13:83:66:81:ee:4b:38:c8:c8:fe:9a:
34:8f:32:de:4e:6f:81:50:f6:c6:a8:56:1e:f2:49:19:8b:a1:
20:eb:17:21:32:66:39:32:ad:71:5b:2b:6b:b2:86:70:6f:82:
18:90:c0:d3:4b:68:97:b8:f3:92:2b:24:58:d6:40:de:cb:d2:
9e:7b:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org