Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/3n5JDqydTODpu-hMNd-nQBMugTY.roa
File: 3n5JDqydTODpu-hMNd-nQBMugTY.roa (raw, json)
Hash identifier: nDTM/qQIDJyMRfDfbyOKSYqVSGwfa5lNNVNDXFgewAc=
Subject key identifier: DE:7E:49:0E:AC:9D:4C:E0:E9:BB:E8:4C:35:DF:A7:40:13:2E:81:36
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018572CCAB39A618107D9E481502258E2E64
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/3n5JDqydTODpu-hMNd-nQBMugTY.roa
Signing time: Mon 02 Jan 2023 14:04:53 +0000
ROA not before: Mon 02 Jan 2023 14:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:5440::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:ab:39:a6:18:10:7d:9e:48:15:02:25:8e:2e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 2 14:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de7e490eac9d4ce0e9bbe84c35dfa740132e8136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2e:06:d0:2e:68:fc:16:fd:30:eb:5c:4a:42:
68:06:98:7c:85:bf:49:dc:54:2f:70:27:b5:c7:2d:
3b:5e:35:80:d3:f2:38:23:f9:70:13:aa:04:a9:9f:
58:6e:51:28:e9:e5:f1:c4:94:33:21:ad:bc:87:01:
de:89:a4:1b:bd:83:20:aa:14:d6:ba:6e:77:1a:84:
34:01:ba:98:90:d5:8d:dd:4c:59:20:7e:1b:5b:0d:
31:9d:07:d6:56:7a:a4:09:11:97:85:26:a0:d9:64:
61:11:45:d2:03:fb:60:cf:ec:3f:41:ae:22:67:99:
93:6a:8d:cb:66:9a:5d:b9:ba:c1:0e:fd:fc:02:87:
c3:a6:a6:bb:e0:be:0a:ea:77:b7:09:0e:5e:48:5d:
a4:bc:29:e5:6a:14:84:59:2b:74:5c:76:b3:39:7f:
09:59:59:73:31:e6:cd:0c:ac:ad:07:15:11:be:4a:
51:c2:28:cb:39:71:6a:9d:d9:93:88:f0:54:fd:63:
23:21:2b:3b:1d:3c:13:00:8d:43:5a:25:33:fc:0e:
17:83:e3:b8:c6:0b:d6:c5:d1:f5:11:63:18:79:4e:
b5:82:ec:63:6d:49:41:07:da:28:04:8b:d0:29:eb:
b9:31:57:9f:85:dc:9c:d7:87:05:77:85:f1:e0:5c:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7E:49:0E:AC:9D:4C:E0:E9:BB:E8:4C:35:DF:A7:40:13:2E:81:36
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/3n5JDqydTODpu-hMNd-nQBMugTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5440::/29
Signature Algorithm: sha256WithRSAEncryption
8c:4d:b0:e8:97:5b:dd:82:d9:02:1f:fc:2b:f4:b0:37:d0:31:
f2:70:08:8e:16:0b:11:89:ed:27:69:07:b0:9a:11:ad:64:d4:
da:d7:c8:13:24:27:f5:39:b4:f8:09:e0:4d:f1:b0:2f:d5:26:
8d:b1:d2:80:f4:c2:5e:04:10:f0:2a:d0:ae:53:40:ac:a2:56:
dd:b4:e4:bb:7a:7a:ee:cd:3e:26:9d:dd:af:c7:7e:d7:1a:52:
d4:f4:d7:bd:f0:de:58:b3:bd:12:85:19:10:ba:48:ea:dc:05:
22:0a:2e:39:d0:e2:af:57:a0:b7:c4:68:3c:2b:76:5c:81:25:
ce:1f:71:6f:f2:f6:df:96:ee:b2:95:62:1d:04:0d:10:05:60:
8d:cd:6a:0b:4a:27:fe:ba:03:fa:5f:e4:f6:a3:58:e5:a0:51:
80:35:79:2b:48:54:69:df:ae:c3:b6:d2:e2:c3:3c:39:75:aa:
f5:8d:54:2f:cd:f8:e9:1e:14:99:ba:6e:87:64:c8:40:a5:5a:
1e:1f:25:5b:98:26:03:72:f9:c3:ae:11:4c:ba:84:cb:6c:9c:
e3:56:ae:4a:21:fe:b8:00:f9:ae:fd:67:0c:36:f4:6f:90:c1:
7e:da:06:a3:04:8a:57:d1:ec:5e:94:e5:31:cd:1e:50:5e:e9:
e7:a4:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:14 2024 by rpki-client on console-fra.rpki-client.org