Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/K5yMmY6E1OQCDc_7nT_E3V6zlDE.roa
File: K5yMmY6E1OQCDc_7nT_E3V6zlDE.roa (raw, json)
Hash identifier: zoda5wxcw9E5NvCVIL3u3Tr+b3ZzMWmwy0TiN7rPq+8=
Subject key identifier: 2B:9C:8C:99:8E:84:D4:E4:02:0D:CF:FB:9D:3F:C4:DD:5E:B3:94:31
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018AD04DD96BDC7545E7973A34A2455B1F0D
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/K5yMmY6E1OQCDc_7nT_E3V6zlDE.roa
Signing time: Tue 26 Sep 2023 07:04:37 +0000
ROA not before: Tue 26 Sep 2023 07:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 2a07:3502:1060::/48 maxlen: 48
2a07:3500:15c0::/48 maxlen: 48
2a07:3500:12f8::/48 maxlen: 48
2a07:3500:1240::/46 maxlen: 46
2a07:3502:11a0::/46 maxlen: 46
Validation: Failed, certificate revoked on Tue 03 Oct 2023 08:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:4d:d9:6b:dc:75:45:e7:97:3a:34:a2:45:5b:1f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Sep 26 07:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b9c8c998e84d4e4020dcffb9d3fc4dd5eb39431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:4a:13:bd:2e:c8:75:8a:35:6d:db:dc:3d:
75:0e:00:25:bb:4e:5a:f3:53:27:64:24:67:42:3b:
53:73:a1:7a:2e:1e:ff:92:29:16:c6:7a:cb:41:dc:
eb:d9:db:a8:a0:d8:42:0f:78:fa:ac:1b:e4:ed:83:
f8:63:a2:72:9b:23:73:15:bb:26:23:3a:50:e3:81:
6f:c6:1f:3c:7d:75:72:b8:de:d1:0e:bf:80:66:3a:
9f:a2:d3:56:5e:cf:ee:6b:02:4c:b9:0d:82:4c:05:
02:b3:6d:49:3a:7a:fe:1e:75:e1:77:c7:dc:15:6b:
42:db:64:0c:b8:50:ec:b1:78:7a:c6:d9:cb:49:d4:
54:93:e5:4a:f7:9d:ab:64:90:a2:fa:c6:35:cc:b7:
9d:6a:0e:5f:34:b7:5c:8d:4e:e4:1e:28:9c:17:01:
dc:36:20:cb:57:80:cd:0f:e5:24:bf:4f:74:96:5d:
7f:18:2a:79:8d:ca:86:8d:50:47:ee:31:05:71:f0:
d4:d0:8e:99:41:89:a4:94:9e:ed:4b:ba:bd:d6:8b:
5f:c5:45:c6:56:7e:ef:e8:e3:7c:2f:db:a0:83:34:
4b:68:e9:39:e6:af:1c:fd:c5:18:19:eb:a6:da:9d:
41:b3:b8:2f:43:9c:82:a4:5a:91:d6:86:d1:2c:e4:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:8C:99:8E:84:D4:E4:02:0D:CF:FB:9D:3F:C4:DD:5E:B3:94:31
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/K5yMmY6E1OQCDc_7nT_E3V6zlDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1240::/46
2a07:3500:12f8::/48
2a07:3500:15c0::/48
2a07:3502:1060::/48
2a07:3502:11a0::/46
Signature Algorithm: sha256WithRSAEncryption
69:61:82:af:ce:c7:e2:ff:6e:f0:18:1f:de:cf:a2:b3:f0:08:
21:2e:fd:22:84:4d:16:52:c9:4f:40:32:84:de:54:ec:5d:f1:
29:d1:60:a5:61:6d:6f:f2:a1:73:39:ea:f7:be:ec:e9:7f:51:
61:76:e8:ae:42:fc:ca:16:6d:fb:bc:1e:28:10:b6:0a:7d:b0:
81:5c:44:0b:23:fb:1e:f7:d0:66:d2:1f:91:75:72:27:41:cb:
a5:21:af:32:e4:c3:1b:cb:84:83:39:9b:75:57:5a:64:5d:7c:
34:f1:c5:ef:20:07:a6:1e:55:56:b6:74:03:a5:a3:00:4d:62:
28:a4:85:f5:6a:da:d3:11:7f:bd:48:5d:a0:0e:ce:fe:4d:85:
da:b7:5d:f0:6a:9f:d2:99:f9:88:fb:49:72:98:cc:63:40:d4:
f9:e7:94:b0:e3:25:18:59:c5:57:c0:41:5a:95:9d:f3:b0:58:
91:d5:4f:8f:d3:d0:f3:9e:57:1e:01:61:50:0d:bf:b8:21:44:
ce:8a:3d:43:6e:56:42:a3:19:f7:1f:84:f9:63:ed:cc:50:56:
f6:ad:ef:a0:82:e5:d1:e0:e5:3a:41:f1:ff:fe:37:60:45:a1:
a5:d1:60:2d:c9:b4:dd:d9:83:30:12:81:7d:25:e4:79:00:05:
02:dd:7f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org