Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/SSd0iDUxcu-y6o_wMgGXg-FAHUc.roa
File: SSd0iDUxcu-y6o_wMgGXg-FAHUc.roa (raw, json)
Hash identifier: DtilsGyg3VxaaVENJxcDcamUqvdU+3MRKOAeuE3k1vg=
Subject key identifier: 49:27:74:88:35:31:72:EF:B2:EA:8F:F0:32:01:97:83:E1:40:1D:47
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018571D7C551952D7C51A6446AEFED77A9FC
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/SSd0iDUxcu-y6o_wMgGXg-FAHUc.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213324
IP address blocks: 2a07:3500:1a50::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c5:51:95:2d:7c:51:a6:44:6a:ef:ed:77:a9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49277488353172efb2ea8ff032019783e1401d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c9:05:3e:fc:c1:af:46:0b:ee:9c:2e:04:cc:
3c:16:20:58:4b:0b:f3:21:b7:1c:34:45:9c:d0:ae:
8b:b4:c7:de:be:9d:98:c5:45:98:b8:e6:cb:53:f9:
56:73:af:c5:c8:0e:57:f4:07:3d:bc:31:f7:4a:81:
99:26:63:aa:f7:57:f8:1c:26:0c:d1:d0:7f:2c:41:
b8:22:9c:97:7c:ae:24:4d:77:94:17:6c:5b:f6:4f:
b2:fd:99:33:09:4b:8f:61:8d:8e:b6:96:8c:b8:fc:
65:c8:34:54:c7:f6:2b:d9:27:e5:8b:db:0b:f3:a4:
74:51:bb:b5:71:fb:a6:97:2d:46:8c:ee:9e:d2:e3:
27:d4:41:50:c4:a4:fc:9e:c0:e9:20:f5:81:73:b3:
b4:fa:b0:7a:75:c8:c1:f9:f4:a6:fa:a0:98:48:4a:
34:ee:8f:7e:3f:0c:0c:f2:cb:7f:94:ee:4e:f1:c4:
dd:27:96:08:94:09:b6:83:f9:57:28:09:0f:e6:74:
69:0c:91:46:99:b1:c0:95:12:6d:e2:e7:dd:85:71:
d0:b1:de:f5:79:40:4b:e8:b1:64:d9:d6:3b:f7:41:
46:44:17:50:42:c3:ee:45:20:00:1d:a3:15:30:cc:
df:62:fc:9b:3a:fb:31:72:2f:8a:d3:c3:63:1a:8d:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:74:88:35:31:72:EF:B2:EA:8F:F0:32:01:97:83:E1:40:1D:47
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/SSd0iDUxcu-y6o_wMgGXg-FAHUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1a50::/48
Signature Algorithm: sha256WithRSAEncryption
1e:30:70:4a:92:91:41:25:8a:4b:9e:76:0a:ea:21:61:cb:73:
d7:38:74:66:4d:7d:48:18:32:9b:b1:73:d3:5e:ee:9e:a9:1d:
0d:c4:8e:38:6e:54:14:f8:1e:76:14:0f:5c:6a:31:ae:e5:b0:
77:7b:36:a7:75:e9:45:e7:68:f9:17:79:95:ef:25:7f:77:c4:
a6:8a:87:56:f7:be:41:6e:f1:62:a2:a9:44:5e:93:4f:d6:4c:
99:ed:65:68:07:e3:ac:10:a9:2e:50:85:a6:91:19:03:97:fd:
27:e4:93:93:1e:64:9b:16:96:77:50:5c:e6:35:d1:77:42:7f:
9a:8b:2c:96:c2:57:76:71:67:3a:d4:4c:59:ff:30:9c:89:ee:
55:8b:4b:05:49:af:ab:b9:5f:8d:b0:e6:0d:1e:b1:99:7b:42:
8f:ae:bd:68:2e:87:b4:57:db:46:7d:9c:4b:0d:fb:d6:94:09:
18:71:46:9b:02:a5:e9:ba:7e:7f:ee:54:eb:00:b6:b2:7d:fc:
61:e5:9c:32:b0:f8:87:9d:d8:c0:32:28:cb:21:8a:b5:32:12:
8b:35:b0:34:f1:62:f8:6b:95:eb:42:1e:6e:a3:9e:a0:4a:13:
d0:b4:a0:c6:81:32:41:37:24:c4:99:26:6b:6d:ed:ab:da:9a:
cf:1c:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org