Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/D2LQ6EMWWbVwAW8YHNHpgdwnGNU.roa
File: D2LQ6EMWWbVwAW8YHNHpgdwnGNU.roa (raw, json)
Hash identifier: LrCBI3cCUiCc4lkTH6Qv/YnCNZDzXvetifIcZth0xzU=
Subject key identifier: 0F:62:D0:E8:43:16:59:B5:70:01:6F:18:1C:D1:E9:81:DC:27:18:D5
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 01856C6EF64E28E8F1738F44B9CFA2F0CF11
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/D2LQ6EMWWbVwAW8YHNHpgdwnGNU.roa
Signing time: Sun 01 Jan 2023 08:24:49 +0000
ROA not before: Sun 01 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3624
IP address blocks: 2001:bf7:540::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:f6:4e:28:e8:f1:73:8f:44:b9:cf:a2:f0:cf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 1 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f62d0e8431659b570016f181cd1e981dc2718d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:23:ea:5b:ae:03:a8:7c:4a:69:2a:8c:7b:
78:02:c9:f4:00:4c:da:e9:9c:62:0b:d9:19:ed:9b:
48:70:00:ca:79:a6:ee:d4:df:82:87:30:c4:4e:ab:
ed:55:e0:ce:95:77:64:54:f6:50:99:46:99:01:b3:
25:e2:9c:3a:32:08:d3:21:64:3d:95:17:f4:b0:e0:
6a:67:5f:45:02:87:4f:b5:54:d8:20:3e:5c:9a:35:
7f:72:c4:7e:19:ef:58:c7:c6:ea:85:1a:99:fa:35:
ec:8a:96:3c:a3:58:ab:6e:3c:38:f5:51:99:22:b4:
b6:b3:1e:d6:01:cb:f1:31:b0:2b:93:ac:18:c5:53:
9d:5f:ca:29:43:97:75:7b:52:59:1a:c7:ac:88:d5:
17:3f:be:b1:99:b5:f5:38:e7:33:9f:88:a7:27:52:
b1:ad:0f:66:48:85:3e:1b:fd:a8:68:59:71:75:b0:
73:c8:9b:ff:c4:1e:32:f2:f8:cf:71:d1:bf:51:bf:
fb:68:b1:d8:44:a1:bf:a9:e7:92:4a:ff:42:64:a1:
10:12:e8:d7:52:81:f8:2c:da:6a:64:19:f9:1c:15:
53:be:64:f1:b8:69:25:24:da:fd:1e:bb:8c:7d:ce:
dc:e9:59:74:ab:ea:49:73:6f:9a:48:8d:31:e6:cc:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:62:D0:E8:43:16:59:B5:70:01:6F:18:1C:D1:E9:81:DC:27:18:D5
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/D2LQ6EMWWbVwAW8YHNHpgdwnGNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:bf7:540::/48
Signature Algorithm: sha256WithRSAEncryption
36:72:59:ee:0c:61:b5:bc:24:39:6d:48:0e:a0:bd:d3:ec:59:
0e:ab:d1:94:08:c6:ac:15:43:d2:cc:8f:d6:d6:52:2e:b0:19:
2b:7d:e3:5b:0a:62:34:a8:2c:73:8c:b0:01:82:9c:72:7b:7a:
d0:f6:2e:fe:2c:eb:c7:1c:50:fc:8e:bb:ec:6e:8c:60:ba:8f:
d5:c3:13:57:ae:2a:bc:6e:ed:e6:55:f9:bc:a0:09:71:9b:67:
69:81:ba:63:aa:08:78:29:f1:86:09:2d:cf:be:ce:8e:8b:d1:
56:b8:14:e5:7a:5c:8d:64:f3:84:9d:8f:17:1f:36:54:28:70:
ec:9a:ef:a6:1c:50:4f:f0:bb:94:3f:e5:b7:0c:db:49:ba:00:
20:09:5c:c3:1d:59:6a:0f:37:4c:5c:a9:f6:19:b6:eb:b1:2d:
80:27:10:aa:25:75:90:a2:18:4e:de:29:ee:f6:74:46:bb:f9:
83:5b:17:d9:87:f6:9f:fa:e7:64:21:dc:a7:4a:4a:0e:19:ca:
8e:44:79:19:21:19:59:f5:db:60:fa:e5:f1:e9:f2:26:69:8c:
74:08:9a:65:8a:94:b6:75:64:8a:7c:98:1f:ea:c7:0d:58:ac:
04:0b:01:67:0a:fd:d9:95:03:43:b7:b8:53:4c:96:47:b1:38:
9a:af:bf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:46 2024 by rpki-client on console-fra.rpki-client.org