Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/vYdBb3665HofsefSwDZ5jZdNamo.roa
File: vYdBb3665HofsefSwDZ5jZdNamo.roa (raw, json)
Hash identifier: Q9IxfAZL/bB3crn3TnjzZNGmOxtuh/OlehpZBzt7pOk=
Subject key identifier: BD:87:41:6F:7E:BA:E4:7A:1F:B1:E7:D2:C0:36:79:8D:97:4D:6A:6A
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 018ADD958CCB4328E9D86684B4DED4167F27
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/vYdBb3665HofsefSwDZ5jZdNamo.roa
Signing time: Thu 28 Sep 2023 20:58:00 +0000
ROA not before: Thu 28 Sep 2023 20:58:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216465
IP address blocks: 2a10:500:9800::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 04 Dec 2023 13:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:95:8c:cb:43:28:e9:d8:66:84:b4:de:d4:16:7f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Sep 28 20:58:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd87416f7ebae47a1fb1e7d2c036798d974d6a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:c6:5d:1c:63:58:19:b7:f9:fc:7d:db:87:
f3:38:c0:8c:4a:b3:fc:66:d5:fa:f3:e0:6d:2c:62:
b5:08:ba:e3:08:96:2a:2a:45:53:97:d8:05:6b:a2:
9e:94:63:ff:72:58:2d:c6:cd:0b:fc:e4:65:72:77:
38:ba:a2:48:82:86:73:7c:23:1c:6a:14:51:97:15:
64:0d:b6:94:52:dc:9c:19:99:a6:ba:4e:97:3d:4b:
40:12:8e:c9:3f:90:63:5b:64:85:a4:44:04:49:9f:
21:66:60:d5:66:51:d6:f4:7a:7a:fd:51:0b:29:5b:
94:ac:9d:fe:c3:05:b4:2b:9e:fb:9c:89:94:e9:d6:
23:60:79:b9:ba:36:38:fd:4d:67:3b:b2:2d:c0:23:
53:57:73:84:15:52:0f:ce:fa:06:89:b9:f9:92:e4:
1b:dc:ff:0f:08:85:ad:b7:09:54:9b:d6:be:15:b4:
7c:18:02:ca:ed:8e:af:e5:ce:6d:d0:d9:20:df:3e:
52:54:44:61:60:38:56:f5:ac:13:9b:c5:3e:ba:63:
62:a2:34:34:8b:29:1b:41:53:6c:f3:c5:00:58:4c:
44:25:ef:81:f9:f4:f5:6d:1d:ee:9f:04:0b:35:28:
b7:0d:88:dd:ad:99:e9:bf:15:9f:17:04:c8:cc:62:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:87:41:6F:7E:BA:E4:7A:1F:B1:E7:D2:C0:36:79:8D:97:4D:6A:6A
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/vYdBb3665HofsefSwDZ5jZdNamo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:500:9800::/40
Signature Algorithm: sha256WithRSAEncryption
90:9e:6a:0d:01:45:86:7a:ca:93:66:f4:46:dd:c1:be:5c:05:
d6:25:b8:9a:e8:4c:31:5c:68:ff:f4:d4:5c:e4:ff:5d:1e:03:
25:a8:89:51:e3:57:fb:d8:32:cf:73:73:39:c7:55:b8:75:8a:
66:79:64:03:88:e8:e5:66:51:ae:2f:fb:c9:47:74:c4:b3:89:
e7:4b:4e:c5:fb:f7:5b:f1:33:2d:7a:00:d9:da:6d:c9:f8:12:
7c:54:08:6c:8a:53:da:c6:a5:16:2e:18:06:0b:89:0d:1b:f1:
0c:ad:cf:d1:ba:2d:4c:0c:83:7a:93:40:7b:70:10:c8:bc:3d:
08:68:c9:5a:42:92:a3:4e:a7:62:e4:03:83:98:cc:a9:45:6a:
e5:ff:64:75:cc:28:be:cd:86:33:32:5a:8a:ec:83:39:de:ae:
b8:1e:1a:4e:97:e3:a0:60:a0:03:62:f0:38:c4:73:89:ce:d9:
f5:7c:1a:57:dc:6b:9f:0b:51:32:e4:27:53:f3:c1:9b:45:18:
06:b9:33:51:60:d4:98:85:bc:15:b0:ff:68:12:a2:97:50:f8:
82:32:94:d4:f2:03:ef:1a:c9:7b:1e:a5:b2:13:b9:88:79:8c:
f3:ee:f7:81:f0:95:83:5d:e7:1f:83:8c:46:6b:bf:9b:bb:07:
81:7f:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:37 2024 by rpki-client on console-ams.rpki-client.org