Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/PpHw0R-lkKUeXVHp7muhkNieSDs.roa
File: PpHw0R-lkKUeXVHp7muhkNieSDs.roa (raw, json)
Hash identifier: bBboGGjuI97+qoHtSythapF4GvQrU7MkV3XcjA6nfYA=
Subject key identifier: 3E:91:F0:D1:1F:A5:90:A5:1E:5D:51:E9:EE:6B:A1:90:D8:9E:48:3B
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018571D7CD5088E605D6A87C0B34F705C661
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/PpHw0R-lkKUeXVHp7muhkNieSDs.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49770
IP address blocks: 2a11:840:28::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cd:50:88:e6:05:d6:a8:7c:0b:34:f7:05:c6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e91f0d11fa590a51e5d51e9ee6ba190d89e483b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f3:5c:16:bc:c5:24:9a:84:56:24:66:52:05:
cf:8f:a6:c5:33:01:cb:07:b3:a9:c2:0f:45:d7:06:
e7:4b:27:ae:0f:07:3b:0f:83:cf:fe:61:ba:fa:b8:
2a:79:f1:37:94:18:97:32:9a:f6:43:b5:fa:d8:c1:
0c:db:c2:bd:50:65:a2:eb:92:7e:9d:57:76:18:1e:
0c:b2:38:e0:35:10:bb:78:30:47:49:36:a0:a7:91:
bc:9a:d7:79:61:f7:5e:6b:f7:23:95:ba:f2:80:7d:
74:a5:ca:6d:ba:fb:80:55:e2:e0:39:b1:26:bb:37:
7f:6d:2e:9a:4f:e4:44:34:d2:a1:8a:e2:b0:90:0a:
68:2b:eb:23:99:58:55:fd:74:41:f1:19:af:cc:1c:
62:1e:94:e1:e4:0c:eb:94:9b:67:cc:de:5e:fa:de:
09:7e:f3:a8:f0:6f:a0:83:ca:16:09:2d:53:61:1f:
b0:26:fe:0f:6a:9b:b6:e2:a4:a7:45:b7:83:08:a6:
d1:96:de:18:84:3c:6c:fc:76:ef:0d:38:6f:23:a9:
fa:30:42:87:62:63:03:7d:b3:88:73:70:76:43:8c:
48:3f:8f:49:1b:c8:cb:f2:c7:65:76:06:cf:bc:a0:
81:f7:43:b1:de:d5:5e:29:f9:2a:a0:3a:2c:28:c1:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:F0:D1:1F:A5:90:A5:1E:5D:51:E9:EE:6B:A1:90:D8:9E:48:3B
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/PpHw0R-lkKUeXVHp7muhkNieSDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:28::/48
Signature Algorithm: sha256WithRSAEncryption
2b:5e:e3:97:a5:cf:60:19:53:84:02:36:27:5d:b0:05:b1:f1:
63:b9:55:b2:90:d8:97:5f:e9:2c:23:87:89:eb:92:b6:c4:9e:
a2:a0:c2:8e:8b:20:f4:07:a9:92:a1:e5:36:bb:68:9d:57:e0:
c2:75:d2:fa:5b:5c:14:1e:b7:50:2f:ac:9b:0c:dd:f0:f2:23:
0b:8c:de:e4:c0:80:2b:cf:84:16:03:1d:1d:53:52:a2:3b:52:
71:45:22:6e:05:77:bb:a5:6b:7e:f3:52:ef:79:09:49:f3:56:
66:81:1c:d8:d7:1b:85:d4:07:8b:e4:77:f0:1a:5f:34:de:54:
76:91:cd:61:1c:81:6f:f4:77:38:d5:80:12:0f:5e:a6:64:e6:
5c:94:83:97:be:ca:37:aa:a7:84:91:4c:5f:16:ed:5b:03:ce:
de:3e:9a:54:de:90:0f:db:29:a6:24:99:73:a5:09:8f:21:ce:
3f:62:cf:db:f9:9b:b9:c2:28:59:f7:3e:20:d2:99:66:38:d7:
7b:90:7e:e7:eb:9a:da:ed:94:99:7a:30:29:ae:f6:46:b8:64:
db:f9:7c:a2:b9:7d:fe:5d:e0:80:5d:c4:4f:22:e1:3f:2b:9c:
ef:4e:a8:ec:87:17:6f:dc:a2:2f:8e:a9:03:69:76:b8:3b:57:
16:3d:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org