Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/AusSUZcfrbt1lvaLZp6GQ8GrYaA.roa
File: AusSUZcfrbt1lvaLZp6GQ8GrYaA.roa (raw, json)
Hash identifier: sWAfRuHyEmvFYKtORWaGDyagrWeYCnMfjEA91s2IDoc=
Subject key identifier: 02:EB:12:51:97:1F:AD:BB:75:96:F6:8B:66:9E:86:43:C1:AB:61:A0
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 01856F5DEE77B548635C5AE806CA76A23D90
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/AusSUZcfrbt1lvaLZp6GQ8GrYaA.roa
Signing time: Sun 01 Jan 2023 22:05:04 +0000
ROA not before: Sun 01 Jan 2023 22:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203661
IP address blocks: 2a04:92c7:b::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ee:77:b5:48:63:5c:5a:e8:06:ca:76:a2:3d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 22:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02eb1251971fadbb7596f68b669e8643c1ab61a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:7d:6c:e7:49:eb:e0:4a:b7:df:cc:df:21:
38:50:44:e9:3b:e3:80:19:18:8f:e9:f8:78:ea:08:
90:c4:bb:3f:5a:95:70:aa:79:5e:ab:1d:2a:1b:01:
eb:0b:90:55:4c:f5:4b:75:6d:ac:b0:25:4b:0a:29:
c2:6b:bb:0d:07:1e:95:af:73:f8:b7:74:8e:ad:2b:
c7:84:bb:5c:eb:0a:21:c3:59:f3:66:08:8a:aa:2d:
05:51:a5:f8:d3:5c:c2:08:f6:fb:11:ea:7e:61:df:
41:8b:e1:af:c9:8f:52:00:8a:e3:60:32:38:bb:50:
66:aa:1b:80:7d:a2:06:0b:5c:04:2d:21:8e:e3:a1:
ed:ea:8f:10:b4:42:14:1a:44:01:b6:d3:c9:80:00:
3a:d6:1f:8d:63:e1:0e:f6:22:47:94:f7:53:c1:a4:
d9:89:21:8c:3e:ac:c0:6a:08:0c:53:fd:a4:14:4a:
9b:22:64:43:bc:28:a0:ea:37:70:1b:41:1d:36:2e:
be:3c:a0:62:8e:e3:1a:bd:6e:7a:18:dd:4d:7f:9a:
d9:d5:18:6d:e1:32:23:01:1a:7a:ad:05:23:f2:65:
ba:e3:9f:12:e7:8a:41:e0:1f:c9:40:6a:ad:c3:91:
25:be:b2:19:fe:8b:01:d2:ab:3a:1b:df:56:98:02:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EB:12:51:97:1F:AD:BB:75:96:F6:8B:66:9E:86:43:C1:AB:61:A0
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/AusSUZcfrbt1lvaLZp6GQ8GrYaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:92c7:b::/48
Signature Algorithm: sha256WithRSAEncryption
7d:77:6d:8f:32:ad:c7:b6:a5:fa:fa:97:bf:0b:87:b7:6b:c4:
00:00:8a:65:5b:73:55:e1:aa:5a:b6:ed:e6:9e:f5:df:21:be:
5f:b2:62:df:4b:28:0d:df:88:e8:77:31:41:ad:54:98:cb:fa:
50:bc:db:de:09:0d:e9:40:b2:39:4c:42:9c:5a:5f:2a:d3:eb:
2d:26:39:40:85:5d:a7:62:f8:75:10:fb:8b:89:42:65:c8:d9:
f9:29:20:3f:6d:4f:96:03:3a:df:ee:12:33:65:21:23:29:19:
7d:b9:74:2f:a0:28:b2:d4:95:de:08:fc:fc:a3:29:de:e5:71:
11:56:4f:cb:47:d4:8e:0b:d7:ef:e4:e9:86:e9:58:5c:11:05:
2b:c0:8a:96:04:2c:d7:76:c4:d4:b9:62:a0:37:bb:49:64:5d:
4f:56:b0:a7:e9:06:a2:d4:b8:70:45:8a:69:dc:fb:7c:e8:b9:
c8:ba:9e:cb:bd:38:5a:3b:4c:a0:d0:2d:16:3c:69:cf:8d:76:
f4:6f:69:20:55:de:bb:16:ab:1d:4c:d9:77:11:9e:0b:d3:1b:
a9:ae:a8:1b:7b:c5:2b:d1:17:04:cb:e2:40:73:9d:59:3e:8a:
6d:29:c1:bc:c9:27:3a:c8:17:31:5c:cd:15:af:d5:b5:72:aa:
36:15:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org