Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/SRgsluqKh-433TtJ4ucl98k14zU.roa
File: SRgsluqKh-433TtJ4ucl98k14zU.roa (raw, json)
Hash identifier: RpPES3Ptl8ILhW6wj/zii3YcgYW3p6KmftwqyKN2NLA=
Subject key identifier: 49:18:2C:96:EA:8A:87:EE:37:DD:3B:49:E2:E7:25:F7:C9:35:E3:35
Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial: 0185EB30AC1682BEEBD63C9466BC3987EDB3
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/SRgsluqKh-433TtJ4ucl98k14zU.roa
Signing time: Wed 25 Jan 2023 23:08:33 +0000
ROA not before: Wed 25 Jan 2023 23:08:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:c40::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:eb:30:ac:16:82:be:eb:d6:3c:94:66:bc:39:87:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
Validity
Not Before: Jan 25 23:08:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49182c96ea8a87ee37dd3b49e2e725f7c935e335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:85:97:16:34:94:41:63:94:79:44:63:f4:
7e:3b:67:0c:61:a4:88:d0:5b:dd:32:99:ce:f2:a4:
ce:83:e4:4d:09:c4:e1:00:3a:68:db:15:31:45:89:
8f:93:d3:45:15:ce:36:12:68:ad:2b:d5:20:dc:dd:
27:72:6a:d2:bf:63:22:16:d3:b6:e0:8a:8c:4e:6e:
87:a7:53:67:fa:7c:a6:af:4b:14:f0:7a:6c:0a:3f:
93:4b:54:54:50:11:2a:89:0c:47:23:c7:c7:bf:0e:
fd:6f:16:70:ae:5b:ed:91:6d:e1:db:f3:ff:45:07:
4f:23:d1:88:8f:80:4e:0c:2c:4a:5b:67:61:07:14:
f5:21:12:02:5e:7e:62:bf:c3:24:5e:2d:cc:b4:e1:
c3:e3:3e:db:cd:4e:69:66:06:7f:e9:d0:80:04:f8:
4d:b9:60:61:f4:e3:a0:67:56:4b:e4:c4:7b:6b:8c:
70:62:d4:1c:ae:75:f4:14:16:38:9e:7b:42:86:44:
e3:7b:8a:2e:a4:4e:e8:b6:10:36:91:75:7a:33:99:
1c:6a:90:44:37:ea:d0:5e:34:e0:21:ca:e8:2e:39:
c0:45:e0:d6:8b:a4:37:e7:d3:54:80:f7:b8:30:04:
a1:b6:13:d7:b9:13:ed:ef:91:36:ed:9d:23:d9:ee:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:18:2C:96:EA:8A:87:EE:37:DD:3B:49:E2:E7:25:F7:C9:35:E3:35
X509v3 Authority Key Identifier:
keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/SRgsluqKh-433TtJ4ucl98k14zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c40::/30
Signature Algorithm: sha256WithRSAEncryption
34:03:00:21:a8:03:f0:f8:02:df:67:f4:ba:f5:26:5f:0b:79:
95:e3:cf:30:95:c5:83:94:65:7e:18:a7:ef:ef:da:ee:7b:8b:
ed:81:09:85:eb:73:e3:9c:9f:ab:cb:ed:b3:7d:44:90:6b:01:
fc:fe:90:d1:a0:29:0f:0f:96:d3:b3:03:6e:43:ac:b2:63:51:
d4:73:49:2f:45:11:5f:e5:3d:b5:6c:bf:31:01:e6:95:6d:a0:
e1:bd:8d:18:c5:da:44:85:4a:f0:b0:2e:d8:4a:93:9d:76:6a:
28:fa:75:cf:a8:dd:39:91:3a:2d:f3:f8:65:57:b3:0c:7b:b7:
62:5e:9b:94:ff:c5:90:ad:97:05:35:00:07:64:06:55:3c:bc:
78:a6:b3:31:87:8d:48:6c:e7:0f:a6:f2:41:d2:f0:e7:1a:18:
1d:35:79:7d:b4:9b:d1:96:54:08:33:10:bc:30:2f:c1:48:70:
42:6c:99:f8:8a:56:57:3e:0b:75:52:bb:9c:5d:5e:98:82:4e:
85:d5:a1:94:f7:d9:6c:87:65:bc:01:1b:f5:ab:ae:a8:28:4a:
b8:6e:8b:20:69:ed:5d:5e:f5:13:a7:c1:d1:25:fe:e3:35:ed:
a1:16:aa:56:dd:44:ee:36:dd:01:de:0e:66:92:b4:bc:2c:3e:
1c:12:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:10 2024 by rpki-client on console-fra.rpki-client.org