Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/s_S8oWdMX136HcPqCqmYi_PrOOo.roa
File: s_S8oWdMX136HcPqCqmYi_PrOOo.roa (raw, json)
Hash identifier: RDu2CSp0Z4BymYXT5ug/E3GvosjIpfdaPB6REzPIO94=
Subject key identifier: B3:F4:BC:A1:67:4C:5F:5D:FA:1D:C3:EA:0A:A9:98:8B:F3:EB:38:EA
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0187EC46F28E1CB07FD5E52277C6B693E7E3
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/s_S8oWdMX136HcPqCqmYi_PrOOo.roa
Signing time: Fri 05 May 2023 14:18:05 +0000
ROA not before: Fri 05 May 2023 14:18:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51803
IP address blocks: 2a0a:2c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:46:f2:8e:1c:b0:7f:d5:e5:22:77:c6:b6:93:e7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: May 5 14:18:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3f4bca1674c5f5dfa1dc3ea0aa9988bf3eb38ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a2:06:f0:e0:14:cb:69:1a:27:be:c9:20:df:
2f:c3:67:8e:18:0c:0a:8d:1b:73:83:0b:b2:13:0f:
d5:e8:3d:52:71:ef:4b:b1:13:6e:60:69:33:b5:91:
fb:5e:f8:05:07:9d:35:2c:10:22:96:78:50:e9:83:
7a:c2:75:68:e0:75:16:b9:99:b4:b0:79:ce:cf:6f:
e3:e4:18:35:e1:55:9f:b2:7e:af:84:ad:29:2c:ca:
b7:d7:69:7f:41:ab:f1:68:e7:e4:0a:e5:7c:f2:39:
66:18:fc:cc:7e:23:2f:16:02:74:16:0d:50:e4:44:
31:12:04:4b:98:6d:c1:2a:9b:2b:e6:6f:18:29:09:
6e:6a:c7:e8:df:05:d5:fa:bf:12:4f:5b:b2:84:ee:
92:84:dd:22:35:32:f6:fd:4b:b3:22:0a:86:33:e0:
e1:72:93:25:9b:a0:ad:07:37:90:18:ff:22:e7:87:
1a:a7:15:9e:25:f1:86:7e:a5:60:c6:55:fa:cc:2e:
87:30:cf:25:67:69:45:e3:fc:95:a9:f6:cc:83:e5:
99:48:57:1e:12:29:fb:5a:c8:90:e8:84:ce:2f:2e:
fc:35:72:9b:cd:fd:fb:0b:07:40:48:83:00:29:82:
36:37:11:7e:4d:3a:74:af:d8:c2:c5:68:e5:c4:1f:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:BC:A1:67:4C:5F:5D:FA:1D:C3:EA:0A:A9:98:8B:F3:EB:38:EA
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/s_S8oWdMX136HcPqCqmYi_PrOOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2c1::/32
Signature Algorithm: sha256WithRSAEncryption
7a:f2:d5:f3:79:6b:22:0c:73:45:65:90:8d:af:3a:47:4a:ff:
83:4f:19:77:f0:e0:4c:b4:64:46:7f:9b:21:c1:7b:87:88:84:
25:25:78:47:3b:08:c7:f7:3f:f8:fd:ad:15:ff:30:d4:d8:ef:
e4:94:c7:b8:04:17:a6:cc:2d:db:71:3a:a3:1e:8a:f5:bd:f3:
82:67:00:07:87:4a:d5:80:18:0b:26:f2:e3:20:c6:2c:a0:4a:
eb:98:8b:a5:f5:f4:5d:32:48:af:d6:05:76:1b:ee:7f:54:0e:
2f:2a:10:67:ef:95:a8:51:6b:47:6e:67:43:60:12:67:1a:44:
45:fd:53:ad:c6:d9:c6:c9:5e:2c:32:7c:cc:a1:69:fd:33:49:
97:63:54:5f:94:cc:a4:63:a0:5b:a0:69:b5:30:c6:ea:6e:25:
87:81:64:0f:23:82:2a:0f:1f:3b:6c:e3:b4:a3:2c:ea:cc:b0:
4a:0c:94:42:26:1a:76:5d:52:51:e5:d0:f5:63:d5:8e:6c:42:
d4:0a:b8:ec:a7:a2:55:a7:13:92:50:c0:13:9c:52:22:a9:fc:
16:35:73:c5:08:5f:b0:d1:5f:ce:45:d1:de:8b:25:27:97:e6:
3b:65:de:ba:a9:70:d7:38:0e:78:1e:1e:65:24:0f:e4:4b:d5:
08:ae:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-fra.rpki-client.org