Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/0omu-VaBamI3DNWY9idqCERBERQ.roa
File: 0omu-VaBamI3DNWY9idqCERBERQ.roa (raw, json)
Hash identifier: N07AvYV3ZdtH1xfz94ogkrnyBSQ6tsjN6j+Pt0SWUPw=
Subject key identifier: D2:89:AE:F9:56:81:6A:62:37:0C:D5:98:F6:27:6A:08:44:41:11:14
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01856D418EF90B147D0D3089D7B92C1DC9FB
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/0omu-VaBamI3DNWY9idqCERBERQ.roa
Signing time: Sun 01 Jan 2023 12:14:51 +0000
ROA not before: Sun 01 Jan 2023 12:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199015
IP address blocks: 2a01:190:39::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:8e:f9:0b:14:7d:0d:30:89:d7:b9:2c:1d:c9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 12:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d289aef956816a62370cd598f6276a0844411114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:aa:5d:41:fe:c5:36:bb:a3:28:7c:47:22:
3a:1d:8f:47:94:88:6b:1b:54:6f:49:9a:a1:97:6b:
a5:9f:1b:fc:fd:7d:66:82:b1:69:fe:07:21:83:07:
bc:05:73:5a:89:a5:97:93:c6:46:5a:a7:cf:73:9e:
00:45:90:66:b5:13:34:d7:74:ad:a0:42:ed:11:c0:
37:3e:74:d5:17:d1:27:d0:5b:66:15:5d:91:4f:32:
af:e9:8c:11:6e:54:25:27:f2:ee:0b:90:90:0b:9e:
9c:fe:d3:b1:c8:93:cb:79:57:ba:23:47:ab:c8:53:
7c:a3:71:3b:9c:ab:82:84:6b:37:f1:b4:ea:13:95:
6b:80:b6:63:83:fe:ae:64:10:4c:7c:f1:c8:d4:92:
68:d2:6e:c8:25:84:36:a2:ec:49:b2:74:4e:87:ac:
ea:6e:4f:f3:81:4d:f5:8a:07:7e:3b:02:f0:9a:68:
9c:94:35:89:60:78:4b:e2:2a:e8:7e:0d:8a:9a:25:
72:68:63:d8:d7:e2:db:86:8f:91:c9:aa:82:32:c9:
16:e9:a2:b0:59:ad:ee:1c:fc:74:be:bb:b5:71:cc:
7c:32:98:02:4b:86:63:64:9a:c4:ef:29:b0:d2:29:
35:a6:7d:aa:63:be:ba:f4:0d:ff:7a:99:83:7b:c8:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:89:AE:F9:56:81:6A:62:37:0C:D5:98:F6:27:6A:08:44:41:11:14
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/0omu-VaBamI3DNWY9idqCERBERQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:39::/48
Signature Algorithm: sha256WithRSAEncryption
9c:06:6b:4d:1a:94:76:06:f1:e1:d0:52:82:37:86:b5:aa:bd:
74:db:39:8e:96:3b:4c:9b:f7:23:c8:f9:f3:6a:fc:61:3a:ba:
df:82:19:57:74:d4:78:af:ae:14:5a:9f:e4:0b:be:20:74:34:
bf:0c:73:3f:3d:5c:42:0e:cf:61:f1:98:c1:29:d1:26:fc:ec:
83:42:fb:1a:0f:91:9b:01:16:10:80:d2:81:f5:46:9b:7c:c7:
41:d9:5d:47:27:d4:be:c7:8f:47:e1:86:98:26:e6:cb:63:07:
b2:e0:61:21:f8:9c:ad:d3:29:c5:48:88:c6:f9:1c:e4:23:f6:
aa:6c:63:02:15:73:db:6d:83:04:28:e1:a4:e4:f4:12:aa:80:
02:81:41:d6:93:a5:bb:92:0e:4f:5e:bb:45:40:8f:cd:9b:fd:
b6:e5:71:f5:24:c5:5d:dd:59:1c:dc:97:da:b0:e2:63:75:5d:
38:79:a6:85:7a:38:d7:a1:4e:94:11:3c:e7:6f:14:a4:62:fe:
6f:f1:e8:f8:53:57:67:f0:3c:84:36:d1:ce:25:e7:4f:5f:42:
1a:4f:52:75:56:9d:78:5e:e5:28:34:ca:6f:5d:e2:59:3a:a7:
47:ac:4e:05:af:53:22:7a:75:c3:17:e7:33:aa:9d:87:72:b0:
30:62:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:14 2024 by rpki-client on console-ams.rpki-client.org