Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/92XwSJekCwaIJ34WfDNM2XJL840.roa
File: 92XwSJekCwaIJ34WfDNM2XJL840.roa (raw, json)
Hash identifier: J2Ldj7pcEu4HaCdMy2d5hq1HVVd+tgyOJHI9bGkX4I4=
Subject key identifier: F7:65:F0:48:97:A4:0B:06:88:27:7E:16:7C:33:4C:D9:72:4B:F3:8D
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 01856E266ED0FD836639763FDAA8A118D4E0
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/92XwSJekCwaIJ34WfDNM2XJL840.roa
Signing time: Sun 01 Jan 2023 16:24:50 +0000
ROA not before: Sun 01 Jan 2023 16:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34762
IP address blocks: 2a01:8107:fff0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:6e:d0:fd:83:66:39:76:3f:da:a8:a1:18:d4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jan 1 16:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f765f04897a40b0688277e167c334cd9724bf38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:21:b8:ba:f9:fb:5f:72:9a:f5:aa:2f:e8:cd:
5c:71:28:db:93:ac:7a:d4:c6:ad:dd:de:95:79:8c:
eb:12:ac:dd:bd:1d:a5:86:a8:59:42:20:70:a5:7d:
c9:6e:6c:ce:c7:93:54:3f:f5:70:e2:37:bd:5c:4f:
cf:2b:1d:aa:46:59:cb:53:19:1f:36:ce:48:b9:21:
be:4a:1c:8c:fe:5d:0f:bb:69:ca:9a:3b:18:cb:dd:
0d:df:44:21:f6:bd:68:bc:47:4f:93:fe:ac:7b:f3:
00:25:15:fe:57:10:c3:1d:9b:fe:00:57:df:f8:35:
89:c2:44:ab:01:51:ee:76:7a:21:04:8d:d8:da:16:
6d:eb:24:69:3b:64:8e:3a:3a:88:45:51:9d:13:91:
de:6f:3f:2b:8b:98:ac:b2:ba:3b:bc:30:c8:67:3f:
b9:76:d8:bd:7a:34:fb:ba:f9:88:ce:fd:b9:7a:26:
0a:d3:a2:ac:ec:b3:c4:b4:e1:58:4a:b7:54:10:62:
85:c4:f5:00:63:54:88:e9:28:47:4b:78:0a:f4:24:
84:cf:35:dd:a8:7e:25:63:7d:fc:e9:d3:b6:a5:32:
52:82:c1:5a:08:46:b1:82:ec:af:89:58:cf:8c:0a:
c2:48:4b:18:90:15:26:07:fb:b2:24:d5:56:9e:ec:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:65:F0:48:97:A4:0B:06:88:27:7E:16:7C:33:4C:D9:72:4B:F3:8D
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/92XwSJekCwaIJ34WfDNM2XJL840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8107:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
41:bd:23:ea:81:ff:0d:69:d4:0c:82:8c:70:02:11:2a:6b:bf:
8d:76:ed:b7:8c:d9:c1:74:44:ff:67:d6:32:1a:05:83:10:98:
33:dc:f2:e1:f8:14:f1:68:57:a2:e5:67:95:c4:02:b0:9b:6f:
aa:b0:c7:5c:5a:7f:2f:de:eb:2c:e7:8f:ec:6b:1f:ab:6e:cd:
e8:42:3a:6c:26:0a:7c:f0:7a:25:68:72:b0:a5:ab:ce:ce:06:
36:85:05:0b:fc:c4:24:00:6a:fd:fc:be:26:80:6f:b8:d9:28:
91:96:a2:73:37:81:49:b3:05:b5:2b:b6:08:4c:39:33:f5:96:
1c:d8:0e:2e:d0:69:76:ac:26:3b:bf:fb:3e:dc:86:d9:5a:e8:
89:20:81:de:96:97:2e:97:75:dd:77:1b:88:8d:06:27:86:34:
6f:bb:39:4c:34:f7:23:32:97:80:3f:33:2a:f0:bc:40:c6:43:
83:00:f6:91:c3:75:7a:92:15:6e:71:1d:5d:9d:f9:95:f4:8f:
e7:14:27:e1:d6:1a:05:93:69:78:c9:23:42:3b:c4:02:ad:90:
0c:ff:a3:7b:32:8f:f4:25:7b:16:4a:29:1c:11:7e:f1:ed:64:
23:3d:52:4e:06:0a:cb:01:f5:0d:04:ac:9c:ef:94:c3:8b:4c:
12:e3:bb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org