Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/110XHmMq7rOWe71xmLbKmfNglXI.roa
File: 110XHmMq7rOWe71xmLbKmfNglXI.roa (raw, json)
Hash identifier: A0Q/W4erHp4UKT8qaqWN4aCU2ITEfWOy/vaF0uOZUVo=
Subject key identifier: D7:5D:17:1E:63:2A:EE:B3:96:7B:BD:71:98:B6:CA:99:F3:60:95:72
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 0188DE9BDE8D7B1ABE942C19687F73A2E0C1
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/110XHmMq7rOWe71xmLbKmfNglXI.roa
Signing time: Wed 21 Jun 2023 15:38:56 +0000
ROA not before: Wed 21 Jun 2023 15:38:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42675
IP address blocks: 2a07:e041::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Jul 2023 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:9b:de:8d:7b:1a:be:94:2c:19:68:7f:73:a2:e0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Jun 21 15:38:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d75d171e632aeeb3967bbd7198b6ca99f3609572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:0b:bc:2e:e0:7c:b7:3a:fc:ef:91:ea:2d:
a1:1b:f6:fd:ef:8f:33:41:cf:2a:80:bf:91:32:be:
99:a4:2e:48:c2:b2:1d:7a:87:bf:dc:64:d1:e6:eb:
64:1a:8c:05:76:f8:4b:38:36:db:d9:d1:e0:12:23:
4d:ae:09:fe:64:c3:5a:c0:8b:10:79:07:f8:0b:01:
73:c6:ac:d5:40:aa:71:53:8d:ec:7e:23:66:35:62:
cb:f4:b4:fa:fd:ee:82:82:44:65:89:29:2f:93:73:
dc:e3:ae:8b:53:8f:90:e1:3e:0c:b0:a2:3f:0c:ef:
9f:06:56:78:05:5b:cd:db:ae:b7:98:39:52:ba:5d:
2f:57:61:b2:3f:93:cd:44:0e:6d:39:c2:c3:4b:b9:
3c:e4:57:86:d1:c9:06:c4:11:73:2c:be:77:7d:db:
b9:b3:ec:12:71:99:b0:13:4f:fe:b3:44:69:af:e0:
aa:fc:04:2a:c5:c7:18:44:c7:c9:e9:52:2e:ca:cf:
b9:1b:4d:71:bf:16:b7:76:c6:de:23:9a:4d:47:a9:
38:0a:19:94:34:9d:f9:b0:dc:5d:34:2b:9a:0f:a4:
2f:16:d3:fc:6b:aa:ee:16:df:53:2f:d3:20:9c:86:
4c:0f:0f:0d:57:f8:ea:fc:75:c5:53:ae:f6:ac:f1:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5D:17:1E:63:2A:EE:B3:96:7B:BD:71:98:B6:CA:99:F3:60:95:72
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/110XHmMq7rOWe71xmLbKmfNglXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e041::/32
Signature Algorithm: sha256WithRSAEncryption
69:8e:9c:7a:e2:18:97:6d:62:5c:be:7c:7b:8b:02:b1:f8:3b:
25:78:c1:53:89:ff:90:62:8a:b5:24:3d:0e:01:ac:b7:98:ea:
bc:3e:38:9c:90:e2:97:cb:84:80:65:b7:6b:d0:d0:9a:84:3b:
e4:7e:5d:c2:f3:2a:f7:b0:5f:37:bf:9e:78:a8:5b:31:dc:4b:
9b:f7:92:c0:a0:bb:f2:7c:b1:0a:4d:a1:2d:9a:34:ad:ce:13:
be:46:43:da:29:8b:1d:d6:3e:ee:c8:0f:a7:98:4f:2e:85:88:
03:63:34:10:20:10:78:26:0e:03:af:75:e0:2e:7b:39:ca:4d:
f6:06:f7:68:c1:55:3b:24:a0:aa:0b:e7:69:78:80:7c:b7:57:
6c:bb:0a:fc:76:7c:cd:06:7d:23:c4:56:65:cf:76:f6:73:d1:
76:97:ea:da:98:f6:46:2b:8d:a6:21:b6:9e:a1:ad:7c:bc:94:
52:b3:32:c3:c8:d5:76:6a:9e:7a:57:7d:d5:04:a9:32:70:c0:
76:b9:8b:ba:44:f8:51:63:f0:db:56:a5:b5:ae:86:1e:5f:68:
7d:93:cd:73:ae:b8:96:9b:d8:cb:16:98:22:df:b6:36:dd:ec:
e6:57:39:dd:3f:fa:7d:14:0b:11:31:66:d5:02:85:48:6e:7b:
95:0e:fc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:30 2024 by rpki-client on console-ams.rpki-client.org