Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/rrp9XxnfJuRzak4OWIPAdelcxx0.roa
File: rrp9XxnfJuRzak4OWIPAdelcxx0.roa (raw, json)
Hash identifier: Sk3TUXUbZmGa3weXoLJs7tUaKSZSQKHh5OEgHDhZRhY=
Subject key identifier: AE:BA:7D:5F:19:DF:26:E4:73:6A:4E:0E:58:83:C0:75:E9:5C:C7:1D
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 0185707977405C7C6E276AEEC0E822B8A874
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/rrp9XxnfJuRzak4OWIPAdelcxx0.roa
Signing time: Mon 02 Jan 2023 03:14:46 +0000
ROA not before: Mon 02 Jan 2023 03:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212520
IP address blocks: 2a05:4741:25::/48 maxlen: 48
2a05:4741:26::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:77:40:5c:7c:6e:27:6a:ee:c0:e8:22:b8:a8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 03:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeba7d5f19df26e4736a4e0e5883c075e95cc71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:18:ea:81:64:8e:a8:b0:d3:07:a9:ae:1a:
46:52:82:93:d1:a2:73:3d:8d:d7:76:23:c8:83:02:
e0:8e:95:d1:d2:e1:20:d1:99:bb:cc:eb:6c:3a:cd:
0c:7b:35:b0:b0:b0:15:ea:5b:d6:83:2d:85:28:ef:
7d:de:b7:e3:fe:42:92:dc:64:61:70:9f:36:8b:9a:
be:90:55:7f:a9:77:f4:6a:ee:d0:27:5c:f8:cd:e9:
6b:d0:30:f0:ff:9f:64:5f:37:38:18:37:a2:8e:4c:
ae:5a:f3:96:38:2c:fa:e3:d6:83:37:1f:6c:66:f3:
eb:5c:8e:60:92:3b:d0:79:64:d0:f4:fd:2d:6b:bd:
63:21:b1:38:ae:00:c7:47:07:80:ec:34:57:dc:2a:
2f:ab:11:80:68:dc:d5:a1:f7:b0:47:e9:0a:63:1d:
11:3f:bc:92:6c:9a:11:5f:d3:3c:d0:b8:96:8b:39:
58:03:98:8f:aa:0a:32:44:28:89:96:68:0e:90:27:
77:be:f7:dc:01:3a:ee:09:08:7b:22:0f:ad:39:29:
66:a8:27:96:d6:19:dc:1a:e4:21:91:50:6e:ad:ca:
8e:96:29:89:de:ae:82:50:c2:ce:17:c8:ac:77:fd:
49:3e:ac:a7:a8:5a:56:f8:96:0d:50:40:1f:96:95:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:7D:5F:19:DF:26:E4:73:6A:4E:0E:58:83:C0:75:E9:5C:C7:1D
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/rrp9XxnfJuRzak4OWIPAdelcxx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4741:25::-2a05:4741:26:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ce:e9:da:33:19:c7:0b:c4:4d:8a:6c:64:0f:14:13:67:da:93:
52:c3:0c:9f:01:c2:3d:d2:91:65:d1:ac:ef:21:79:4c:c4:18:
83:63:eb:21:d6:07:6b:09:b5:9e:b8:ce:cf:70:54:46:43:f6:
d1:ad:a0:4d:a5:5c:13:1e:40:d9:c4:c2:49:23:10:37:2a:f3:
f3:b5:7b:1b:e6:46:72:09:ac:72:77:0f:5b:13:bc:ef:a8:04:
c6:df:02:84:ab:6d:a3:41:25:b6:e8:ce:07:47:2d:38:f0:6b:
12:25:5b:0a:a2:bb:44:9a:76:c5:a2:ae:66:74:8b:3c:5a:3d:
70:d7:2a:14:8d:5d:9e:4f:4c:59:1f:a6:c2:c9:0c:a3:7b:6e:
d2:4c:55:0a:fa:d0:09:aa:de:7e:72:2d:3e:5e:6d:41:31:54:
3b:57:37:57:d3:0c:14:84:42:fc:c2:04:0e:b3:84:61:99:7a:
18:50:b0:23:c3:2f:63:70:91:a3:06:c5:95:2f:0b:e2:43:b7:
85:99:91:98:42:ea:1e:06:86:38:9c:79:65:51:94:ff:ee:19:
a2:d2:76:22:31:a2:d5:ea:44:f9:ef:73:89:16:5a:da:38:a5:
d5:37:2e:6b:9f:5e:65:a0:25:0d:69:d3:32:fd:a4:bc:8a:df:
13:13:f8:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org