Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/Dsi_ZnW6ikNEKFxLJAY9zK3F-T4.roa
File: Dsi_ZnW6ikNEKFxLJAY9zK3F-T4.roa (raw, json)
Hash identifier: oedabtKAZi2vgYAq+tlDbpqJUeVeszBKe2gQpEGb5FU=
Subject key identifier: 0E:C8:BF:66:75:BA:8A:43:44:28:5C:4B:24:06:3D:CC:AD:C5:F9:3E
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 01877E390FACAB88B0391CA7183519F2FDA4
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/Dsi_ZnW6ikNEKFxLJAY9zK3F-T4.roa
Signing time: Fri 14 Apr 2023 05:24:41 +0000
ROA not before: Fri 14 Apr 2023 05:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202634
IP address blocks: 2a0b:8dc0::/29 maxlen: 29
2a0f:6840::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:39:0f:ac:ab:88:b0:39:1c:a7:18:35:19:f2:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: Apr 14 05:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec8bf6675ba8a4344285c4b24063dccadc5f93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:65:fb:75:ec:2c:02:86:01:cd:d1:79:a3:
11:d9:36:27:0c:3a:b3:9b:c4:19:67:5d:7a:bf:f7:
98:cb:69:a2:2d:13:77:5a:75:b6:c6:e4:bc:3c:35:
9e:10:48:cd:a3:e5:20:50:ec:8e:16:9f:2b:2c:a1:
1a:b6:80:ee:46:f2:ca:ac:00:b0:fb:a8:cf:c5:a3:
54:8d:60:f1:0a:ae:63:ae:44:b9:5e:9c:cd:a9:ef:
7b:fd:fe:64:63:79:92:3b:4f:bc:29:47:83:1a:65:
1b:2f:a9:55:0e:68:11:1f:49:e9:fd:c5:5b:2d:cc:
60:b1:a6:72:06:57:2e:4a:18:9a:f3:f3:6d:43:ab:
a4:a0:da:63:89:f5:3e:ea:73:15:67:88:3b:6f:48:
b6:c4:03:e1:36:ab:62:39:de:bc:7a:a7:fe:1f:35:
bc:e5:7a:30:86:b3:6b:1e:c8:6e:b1:7a:6c:f8:2d:
eb:d1:2c:e2:ab:d2:b0:c7:28:0c:80:ff:85:c6:fa:
57:28:37:73:7a:96:34:17:30:b1:5f:16:a2:4a:5f:
09:6b:67:03:fe:86:b8:c8:f9:ea:80:56:07:c5:1a:
5d:56:c9:dd:41:54:ab:91:15:b2:f6:fd:2b:a8:94:
04:76:4a:85:44:8b:a6:d5:95:30:5a:51:45:94:ab:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:BF:66:75:BA:8A:43:44:28:5C:4B:24:06:3D:CC:AD:C5:F9:3E
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/Dsi_ZnW6ikNEKFxLJAY9zK3F-T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8dc0::/29
2a0f:6840::/29
Signature Algorithm: sha256WithRSAEncryption
a4:87:3f:81:7f:b5:93:32:a4:88:ae:c8:2f:1b:ee:f1:8b:03:
3b:ae:c7:46:24:ff:12:35:6b:e1:23:43:04:f1:1e:32:35:b2:
1b:fa:51:e7:49:2b:cd:78:d5:b2:a4:03:0e:fa:45:ed:6e:f5:
4e:c5:17:11:88:10:1f:82:28:92:cc:9f:13:f5:36:73:f1:d9:
70:28:5b:68:a9:6a:65:85:29:ad:76:4d:06:59:3b:51:0f:36:
4b:05:e0:7a:e2:92:01:c9:1e:b4:c9:76:92:0e:5b:56:bf:56:
18:48:3c:77:34:10:b4:be:3c:cb:94:49:1e:5b:9c:3f:35:29:
f5:20:f6:6a:44:80:7f:c5:4a:73:fd:f4:cf:84:6d:ab:0e:cc:
76:51:f6:ea:30:b1:49:4a:0b:cc:46:cc:b1:d2:ee:30:c4:af:
3c:66:77:d8:6c:3c:40:ad:8b:b9:4f:5b:26:ad:b3:25:5d:70:
04:a5:1c:38:b6:b2:db:40:fd:e3:13:70:04:09:a2:a7:33:f3:
b4:14:6d:66:d8:d7:a4:23:d9:f7:72:3f:99:a8:0b:89:56:c4:
51:33:a6:c6:be:47:a2:93:a6:e7:b8:e3:4e:6a:5c:6a:65:cf:
f3:fd:dd:f8:4b:b3:79:03:15:e2:7b:bd:a2:44:91:83:09:68:
36:ad:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:13 2024 by rpki-client on console-fra.rpki-client.org