Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Ppp3NpxRu6LBRY_Vn-LzJ_DfvJA.roa
File: Ppp3NpxRu6LBRY_Vn-LzJ_DfvJA.roa (raw, json)
Hash identifier: YxG80hXzy0XuQ3/aN11iQO88q+nugs6h9j9jEaRwPug=
Subject key identifier: 3E:9A:77:36:9C:51:BB:A2:C1:45:8F:D5:9F:E2:F3:27:F0:DF:BC:90
Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial: 018CBF0D2288B833684273C8BDEFC8353642
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Ppp3NpxRu6LBRY_Vn-LzJ_DfvJA.roa
Signing time: Sun 31 Dec 2023 08:45:58 +0000
ROA not before: Sun 31 Dec 2023 08:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 2a0f:d840::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bf:0d:22:88:b8:33:68:42:73:c8:bd:ef:c8:35:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Validity
Not Before: Dec 31 08:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e9a77369c51bba2c1458fd59fe2f327f0dfbc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:19:cd:7e:a8:16:a1:31:23:c0:56:72:b4:a3:
23:b1:b9:4f:72:09:3d:aa:d5:e3:88:79:10:d1:ff:
83:65:60:d8:f7:01:07:8a:a0:29:7b:59:0a:b6:70:
eb:dc:c6:5e:a9:85:00:1c:a6:06:d2:47:3f:f7:a4:
4d:03:9f:01:d0:b9:df:13:df:55:59:ce:38:c1:a5:
00:d5:95:ac:82:cc:42:eb:3a:b9:f1:12:13:e8:81:
e9:2e:67:52:65:b5:82:fb:cc:1c:31:a1:38:2c:e0:
e6:03:78:5d:0d:f4:5c:d0:90:91:02:8e:39:86:8a:
dd:47:79:06:ab:e3:6d:93:2f:c4:f7:98:6c:67:c4:
0f:2a:13:1c:31:d0:37:82:44:17:da:4a:d8:2f:04:
8e:3f:89:52:24:1d:a5:3d:fa:64:c4:90:ce:fb:d5:
2b:0f:eb:38:81:c9:e5:7a:8d:26:66:12:73:eb:13:
3a:02:11:b5:94:2f:8d:b5:52:80:8b:65:cc:25:ed:
58:e5:79:3b:c1:75:59:b1:64:cc:4c:27:c8:e0:4a:
17:c8:b5:80:0d:e1:55:65:8c:6c:77:84:2b:37:6a:
d3:fd:88:45:a0:ce:77:fd:14:57:af:28:d9:2e:12:
f2:c3:20:bf:89:80:fa:26:06:a4:cb:a9:b2:5d:d7:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9A:77:36:9C:51:BB:A2:C1:45:8F:D5:9F:E2:F3:27:F0:DF:BC:90
X509v3 Authority Key Identifier:
keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Ppp3NpxRu6LBRY_Vn-LzJ_DfvJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:d840::/29
Signature Algorithm: sha256WithRSAEncryption
72:0b:80:3f:b2:09:2b:8d:a2:b1:c4:c9:d7:34:8c:bc:2c:af:
32:87:ac:76:51:ec:9e:f2:44:5e:4a:b9:b2:2a:df:9e:48:c1:
ac:f9:6b:a8:20:6c:a3:99:f9:99:e8:7d:18:20:4a:0f:4a:2c:
1a:e6:28:d0:aa:25:85:a1:f6:94:1e:0e:57:ba:12:ed:91:11:
7b:40:b4:bc:e0:10:78:c6:9a:09:b4:6d:f2:7e:03:7a:67:19:
33:ca:78:67:c0:cb:fc:15:d9:62:ce:3b:86:b9:2c:8f:08:2d:
89:d6:ca:97:fc:9a:be:70:c1:a9:ea:9a:8f:37:ef:2e:09:ad:
88:1b:7c:c8:ea:c7:75:71:89:36:75:8a:16:90:08:35:fb:a8:
89:7f:b0:5b:db:42:43:a2:d7:1e:b6:90:23:64:e8:c4:c6:2b:
20:af:a0:ef:86:c6:85:2c:51:b6:1d:d3:9a:f3:1b:6a:d6:43:
3d:3d:0b:6d:81:d5:9c:39:0e:de:2e:31:ca:90:74:33:f0:46:
ed:53:76:fd:bc:ab:fd:8b:6e:66:64:b2:6f:23:d6:24:7f:71:
c9:a0:1f:55:8d:4a:8f:92:f3:c9:5c:8c:4b:fe:5f:96:df:68:
13:09:9f:47:af:69:b2:88:ea:e6:24:64:10:34:fb:ce:ea:ce:
85:d4:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:20 2024 by rpki-client on console-ams.rpki-client.org