Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/9O_vk5k7ssm-I9OAUzEMfGuyDo0.roa
File: 9O_vk5k7ssm-I9OAUzEMfGuyDo0.roa (raw, json)
Hash identifier: MGu0uAtp9AaLRxWTewzcQ0YUxH70SC1ue5U5ZoLjIIA=
Subject key identifier: F4:EF:EF:93:99:3B:B2:C9:BE:23:D3:80:53:31:0C:7C:6B:B2:0E:8D
Certificate issuer: /CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
Certificate serial: 018F5451C73ABF973A3B9B2E9351C6736F3D
Authority key identifier: 5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/9O_vk5k7ssm-I9OAUzEMfGuyDo0.roa
Signing time: Tue 07 May 2024 18:29:56 +0000
ROA not before: Tue 07 May 2024 18:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 2a0a:7740::/32 maxlen: 32
2a0a:7741::/32 maxlen: 32
2a0a:7742::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 08 May 2024 17:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:51:c7:3a:bf:97:3a:3b:9b:2e:93:51:c6:73:6f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
Validity
Not Before: May 7 18:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4efef93993bb2c9be23d38053310c7c6bb20e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:40:69:a4:6b:0e:0e:d1:9f:ce:ac:5b:a3:
24:25:b1:5e:2e:65:2c:e8:44:80:56:a6:a6:6d:6f:
de:90:40:96:f3:24:01:b5:0e:39:2a:d5:cd:1c:6d:
03:68:57:bb:e7:a6:16:52:87:2d:03:cc:74:56:55:
73:ca:d3:1a:16:e2:fe:f5:b6:c6:3b:e8:8b:ee:be:
a3:4f:29:43:a0:8f:0f:1a:81:62:c2:79:4d:5a:c1:
aa:73:d2:fc:df:8a:69:67:7d:58:38:2e:f3:a3:74:
9d:0e:73:2c:62:e1:f3:e3:0b:2b:40:57:18:74:35:
86:38:24:d0:9b:fc:05:dd:bc:06:5b:a0:af:7b:49:
fd:5e:53:6c:41:60:65:f0:36:10:0c:8f:0a:c9:14:
5c:c4:10:a8:d9:81:a6:92:90:7e:4a:ba:37:78:69:
8d:dc:56:99:37:53:8c:34:20:cd:2f:fa:d4:a0:d9:
36:99:96:e4:44:dd:ee:8a:3c:38:83:3a:a9:7f:e6:
57:a3:b2:71:ab:8e:a8:bd:7c:99:d6:1f:91:06:17:
24:7e:10:2b:66:62:5d:0b:dd:61:7f:4d:b5:b4:ad:
08:7c:53:87:75:d7:35:d5:dc:eb:23:79:4d:fd:cc:
65:e8:d0:42:58:8a:c4:ff:de:5b:e4:5f:ce:f7:2f:
66:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:EF:93:99:3B:B2:C9:BE:23:D3:80:53:31:0C:7C:6B:B2:0E:8D
X509v3 Authority Key Identifier:
keyid:5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/9O_vk5k7ssm-I9OAUzEMfGuyDo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7740::-2a0a:7742:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:d8:99:21:11:57:7e:ce:bc:62:4e:24:b1:58:c4:58:a5:66:
cf:19:fc:4b:f7:34:be:35:db:74:55:3e:3e:60:9d:02:06:b4:
c5:eb:19:db:e6:89:2b:e8:12:90:40:aa:40:b8:db:05:28:11:
b3:15:b1:ea:41:6b:47:cf:9b:ec:bf:f3:d2:20:db:56:70:ee:
95:11:d1:70:b8:e7:4b:c4:be:2e:1c:87:c6:1b:79:c0:94:c3:
06:e2:6b:ee:2e:d0:7a:99:06:30:6b:37:ce:ca:82:87:6a:f7:
77:c9:ea:7a:e4:34:4c:3b:87:a0:ab:9f:cd:60:9a:f9:8f:25:
c4:44:0f:0f:8e:a4:96:34:14:96:d6:04:9c:13:39:28:45:ff:
be:6d:0c:62:4c:3b:32:65:76:1e:fd:a5:f8:99:5f:06:a9:96:
f3:47:73:20:f2:9b:88:c7:13:81:68:7f:ef:e8:2e:af:52:f5:
ab:37:45:26:bc:4d:b6:ad:eb:8a:4e:a2:5a:fd:7a:e8:82:91:
8c:09:99:f1:b0:e2:74:c2:8c:53:3a:4f:37:71:1a:65:cc:61:
4e:37:a0:2c:76:16:ea:4f:d0:f3:4e:f7:ee:42:97:c0:b6:af:
89:5b:58:cd:2c:24:39:87:db:f4:c4:ab:3e:35:2c:34:8e:20:
b1:2e:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:41 2024 by rpki-client on console-fra.rpki-client.org