Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/xz3GvhgRcF3E40hIvXjqwr4-E9Q.roa
File: xz3GvhgRcF3E40hIvXjqwr4-E9Q.roa (raw, json)
Hash identifier: heEL6+1Jc5VAWhjLkxXA9mAKl/155SliUvfzoZZHB84=
Subject key identifier: C7:3D:C6:BE:18:11:70:5D:C4:E3:48:48:BD:78:EA:C2:BE:3E:13:D4
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 018B8F1D7F0CF5049B44F833BCA6A5C053C6
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/xz3GvhgRcF3E40hIvXjqwr4-E9Q.roa
Signing time: Thu 02 Nov 2023 08:19:16 +0000
ROA not before: Thu 02 Nov 2023 08:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61292
IP address blocks: 2a0e:1c80:1a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:1d:7f:0c:f5:04:9b:44:f8:33:bc:a6:a5:c0:53:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Nov 2 08:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c73dc6be1811705dc4e34848bd78eac2be3e13d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:b2:6f:a0:66:67:c3:ef:e7:81:90:a4:a7:
af:09:d6:17:d8:08:0b:7d:97:5a:4b:69:2f:a9:7a:
be:78:72:b4:59:88:6e:17:c6:af:2f:f1:97:4c:36:
b3:62:91:6c:fe:6e:00:72:3b:eb:38:0b:d6:9f:ac:
89:e1:34:e2:e9:3b:78:94:b6:c7:32:a3:08:2d:d6:
f8:61:57:50:15:95:69:b7:34:9f:eb:8b:72:0f:90:
e7:d6:9d:52:e8:c1:2a:3b:7e:ea:db:86:47:7c:1b:
5f:c3:b2:53:c5:27:3f:e1:0f:b1:37:36:58:91:d6:
8e:94:d6:41:77:0b:63:5a:09:ba:7d:cb:67:55:e1:
0d:64:f7:6f:23:dc:17:8d:b6:8e:4f:ca:7f:6a:94:
30:47:04:ec:f8:68:99:1b:76:69:61:ac:c8:69:b2:
9b:0e:93:d5:1e:3e:cd:77:1a:46:96:db:b8:45:76:
0d:c4:28:97:04:00:80:74:bb:a7:18:49:e7:02:45:
8f:51:be:cb:ca:17:65:f3:f8:b4:50:5d:0b:14:da:
40:c7:d4:83:5c:0d:cb:b4:fc:67:4a:70:a2:8e:3a:
8c:b2:40:50:bf:e1:7c:38:cd:af:11:e7:37:37:ea:
32:e9:51:f0:c4:21:a6:f4:e8:44:8c:2d:45:b4:d9:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3D:C6:BE:18:11:70:5D:C4:E3:48:48:BD:78:EA:C2:BE:3E:13:D4
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/xz3GvhgRcF3E40hIvXjqwr4-E9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:1a::/48
Signature Algorithm: sha256WithRSAEncryption
86:4c:0d:20:bc:fd:f3:97:54:0d:7f:24:c5:d3:b2:65:2e:d5:
45:7c:59:ce:0b:19:b7:75:98:ab:fa:3a:46:2d:5c:a2:45:40:
ef:95:16:07:0a:aa:cb:75:5c:2a:50:42:4f:e6:20:ef:6a:89:
41:e0:e3:25:02:05:85:b4:be:a1:4d:d5:f6:86:91:de:11:04:
1f:f7:77:a7:96:5e:bb:a5:21:73:b0:72:f7:90:41:0b:76:cc:
0f:27:09:a2:48:17:1a:9a:9b:45:b8:be:43:e1:e5:26:c3:6f:
70:04:12:ad:92:38:1f:51:be:3e:0f:45:b1:4e:b1:0b:6d:ba:
0d:b5:c1:0a:e6:1d:48:d6:3e:45:84:6c:a6:f0:c7:a1:33:61:
04:17:f8:71:6d:75:fe:9f:b0:68:2d:e8:6f:3a:46:ed:8a:df:
64:b5:a2:94:bb:fd:4a:27:1f:91:6e:77:a2:c6:b9:10:0b:17:
99:13:6a:7c:ee:c6:7e:1d:bf:97:3e:66:2a:e4:6e:34:cd:bf:
19:a6:8d:51:55:d5:69:0f:bb:7e:3a:34:77:d6:f2:b3:68:96:
7f:c2:18:f6:b9:f6:84:ba:a7:22:bb:ac:c6:a8:ab:51:48:e1:
0d:5f:50:ff:7c:de:d7:52:3c:54:da:06:ee:7a:66:db:a9:3a:
6b:3a:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:20 2024 by rpki-client on console-fra.rpki-client.org