Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/CVvkXP0VUM028JOEtXd5mgybk_s.roa
File: CVvkXP0VUM028JOEtXd5mgybk_s.roa (raw, json)
Hash identifier: 6HOQTZuKAyifaN080at1gdMtBOLKTDjv5AEsPyGeZ6U=
Subject key identifier: 09:5B:E4:5C:FD:15:50:CD:36:F0:93:84:B5:77:79:9A:0C:9B:93:FB
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 018AD4B773D5A681DF805AC87BEEB33D2916
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/CVvkXP0VUM028JOEtXd5mgybk_s.roa
Signing time: Wed 27 Sep 2023 03:38:27 +0000
ROA not before: Wed 27 Sep 2023 03:38:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47596
IP address blocks: 2a11:8480::/32 maxlen: 32
2a0a:2e82::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d4:b7:73:d5:a6:81:df:80:5a:c8:7b:ee:b3:3d:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Sep 27 03:38:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=095be45cfd1550cd36f09384b577799a0c9b93fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:02:1d:07:08:1e:76:17:a1:7a:75:45:da:
04:fd:57:09:27:04:eb:31:cd:ff:92:11:81:1e:bb:
ee:ed:1c:68:a5:66:dc:a8:18:e5:69:32:00:a8:63:
12:c0:0c:96:b8:19:5f:01:04:a5:95:d8:e4:3a:69:
1c:2c:be:9b:ef:4b:25:44:14:ae:62:fc:30:5e:76:
8f:3e:eb:66:03:6f:76:99:80:44:2d:aa:8f:dc:c4:
df:dc:ed:bc:f9:77:2c:61:a8:92:95:25:51:2a:76:
4b:0b:c5:7e:4f:65:b5:4d:35:d2:2f:c4:06:91:a6:
3b:87:ef:8f:69:b4:51:fd:b9:15:03:14:07:91:e7:
de:22:44:12:09:37:e8:f0:84:2e:0e:ad:b3:37:98:
17:2e:93:67:45:8c:38:09:76:d4:c7:31:9d:60:b1:
a9:6d:8f:53:b6:fc:07:7b:da:2a:dd:ab:1c:63:50:
b4:0f:ca:63:af:ed:28:83:e0:13:b7:43:85:d3:9d:
9c:e9:fe:76:0a:fc:72:fa:e8:bf:99:cd:49:9d:52:
a7:7e:55:74:95:6e:46:ae:c8:50:0e:ec:1e:77:6a:
1b:ac:5c:c1:96:af:04:44:5c:3d:6a:fd:90:16:0e:
a4:17:23:29:30:76:d2:f9:c4:7b:96:5b:36:43:09:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:E4:5C:FD:15:50:CD:36:F0:93:84:B5:77:79:9A:0C:9B:93:FB
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/CVvkXP0VUM028JOEtXd5mgybk_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2e82::/32
2a11:8480::/32
Signature Algorithm: sha256WithRSAEncryption
3e:3b:e2:27:2a:c9:90:fd:70:d2:e9:f7:fe:63:b1:ad:61:c9:
c7:14:75:87:bd:c5:62:87:e7:1c:44:c3:71:c1:42:a7:7a:71:
2c:12:5b:73:dd:25:37:3f:92:37:e3:90:19:a9:f6:99:84:3e:
e3:1a:db:46:9a:f3:1d:11:6b:6c:a9:00:ad:63:38:e3:fe:67:
48:96:a2:92:10:c2:0b:09:cc:b9:f5:3c:2c:a4:b0:c4:a5:d4:
d3:cf:18:f8:26:ac:f7:03:39:7b:62:67:3d:c7:bc:e1:2e:15:
98:04:d6:24:fb:7f:4c:83:87:23:99:50:7c:59:30:3f:56:4d:
65:56:6e:f0:95:5c:26:9b:02:a3:6f:d4:ed:0e:96:2f:5d:3d:
b7:34:96:a3:91:f6:5a:2e:49:61:12:71:64:5f:c4:49:82:af:
21:72:10:d1:7b:81:80:bd:88:f9:35:6e:e0:b6:0f:18:72:a3:
49:8b:06:44:90:2b:6d:1e:27:42:85:c5:a8:51:6c:04:75:3c:
a0:d5:d7:f8:8d:4d:46:5d:c2:8c:14:bf:89:c8:6a:97:f2:d0:
20:63:3e:e0:9e:04:c5:87:96:cb:77:e2:89:de:2c:7e:51:f7:
0c:ac:7e:52:d0:12:4f:75:ca:67:f3:91:1b:8d:bf:0e:dc:39:
83:1d:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org