Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/vH_i9JsdRQaYmYoralT5cqnoeQ8.roa
File: vH_i9JsdRQaYmYoralT5cqnoeQ8.roa (raw, json)
Hash identifier: wqzaWzbWr4X3pV9BsDha7s5xNJt+wkfBXsICH6mucIs=
Subject key identifier: BC:7F:E2:F4:9B:1D:45:06:98:99:8A:2B:6A:54:F9:72:A9:E8:79:0F
Certificate issuer: /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial: 01856E78F66667A610856CC798D49B0282B7
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/vH_i9JsdRQaYmYoralT5cqnoeQ8.roa
Signing time: Sun 01 Jan 2023 17:54:58 +0000
ROA not before: Sun 01 Jan 2023 17:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20712
IP address blocks: 2001:67c:2058::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:f6:66:67:a6:10:85:6c:c7:98:d4:9b:02:82:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Validity
Not Before: Jan 1 17:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc7fe2f49b1d450698998a2b6a54f972a9e8790f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:b6:e6:1b:d0:f5:48:1a:4d:ba:64:43:3e:
35:93:83:31:1e:40:30:7d:99:bb:51:52:79:11:b5:
7a:be:55:80:cd:a2:ae:07:36:09:9c:64:4c:4e:53:
ce:a3:a5:ed:0a:5c:20:c5:14:20:cd:13:c9:a3:94:
4a:6e:57:df:2d:e1:74:37:70:85:19:88:d4:f6:14:
de:74:d6:a0:0c:13:48:75:d1:7a:67:36:ae:46:61:
33:8a:0b:08:f2:f5:78:04:d8:6d:89:f4:ff:a6:91:
e8:96:99:f4:73:41:d1:c5:6c:5f:88:cd:4e:12:2e:
0e:8b:e2:cd:37:63:e9:62:54:9e:0d:82:d1:e5:77:
f7:18:70:e8:0d:e8:a5:ed:90:76:44:86:12:6d:5e:
df:cb:70:e2:11:74:d4:fc:fb:96:98:ed:13:29:65:
4e:f9:01:b5:82:48:a3:e8:9d:90:f0:06:f3:b4:da:
56:19:0b:39:c4:47:20:b0:96:c3:56:35:08:fc:8a:
e4:15:ae:d6:da:4a:7c:e1:ca:72:7e:d5:1e:cb:d6:
54:4c:bf:ea:f1:5b:f2:7a:91:41:b1:b9:73:04:cb:
42:46:23:3e:94:5b:83:01:8f:dc:a9:f3:79:12:41:
a3:0f:a0:76:b5:cd:eb:b3:cd:16:39:4f:e9:f7:cf:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7F:E2:F4:9B:1D:45:06:98:99:8A:2B:6A:54:F9:72:A9:E8:79:0F
X509v3 Authority Key Identifier:
keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/vH_i9JsdRQaYmYoralT5cqnoeQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2058::/48
Signature Algorithm: sha256WithRSAEncryption
46:b8:e4:cb:53:1a:c1:1e:5c:59:c1:4a:2e:dc:53:5f:38:f3:
d5:d6:3e:41:4a:ad:39:37:10:80:a1:9d:4a:30:3c:61:2d:d6:
46:08:36:67:fb:f8:71:f8:10:ba:a3:cc:f4:83:6b:3d:f6:d5:
12:47:25:85:b3:b0:47:a9:ab:73:18:36:b7:de:4e:26:31:a2:
58:73:75:16:da:77:05:61:b9:a4:c0:9c:cc:34:50:cc:48:03:
b4:78:67:17:9a:3b:f2:36:47:03:7f:bb:24:c0:0c:bb:2e:a3:
22:c7:a5:a2:1a:8d:7b:2a:70:62:36:e2:67:0a:b6:01:6c:93:
c1:dd:44:7c:bb:c6:2d:52:3c:a0:07:1e:8e:6e:fa:4b:45:77:
84:5b:6d:88:97:aa:22:a9:72:d0:52:de:ea:2e:5d:3e:de:9d:
56:de:3c:a6:d8:93:10:22:b4:c5:96:5b:0c:de:9d:98:ec:8f:
6e:57:e7:5d:4b:12:d7:e1:f3:5a:fd:4e:89:45:e1:31:aa:4f:
a5:9d:80:25:c1:95:fb:70:80:74:a7:b8:67:c1:33:36:64:1c:
a0:e9:8c:26:a4:f9:cf:73:b0:ce:a3:2d:ea:b7:e9:7d:92:6a:
da:6f:d4:71:1f:2b:33:e4:d0:42:b0:42:a4:e1:ef:3c:d9:51:
6a:d5:dd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org