Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/Y31fZyTm0QtEC-S9fwFLSCiyH2o.roa
File: Y31fZyTm0QtEC-S9fwFLSCiyH2o.roa (raw, json)
Hash identifier: V40mR5adxzkkqzw8WQgDsa6xaCGt3ZN4qc2wV8nhh30=
Subject key identifier: 63:7D:5F:67:24:E6:D1:0B:44:0B:E4:BD:7F:01:4B:48:28:B2:1F:6A
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 018A3B3D7C0B822F27AC725E5C4C5BD12FDE
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/Y31fZyTm0QtEC-S9fwFLSCiyH2o.roa
Signing time: Mon 28 Aug 2023 08:23:19 +0000
ROA not before: Mon 28 Aug 2023 08:23:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2119
IP address blocks: 2a02:7720::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:3d:7c:0b:82:2f:27:ac:72:5e:5c:4c:5b:d1:2f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Aug 28 08:23:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=637d5f6724e6d10b440be4bd7f014b4828b21f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:33:1e:c4:1e:bb:59:11:4c:24:af:1a:db:
1b:0e:90:12:6e:f3:4d:c1:17:dc:b6:d1:30:de:3e:
1f:5e:98:86:39:17:d1:03:e9:4d:26:a3:db:e4:ab:
42:aa:4c:06:51:e8:72:53:de:5d:3e:69:c8:7a:ea:
cd:14:2e:02:16:24:7f:82:4d:ec:7c:51:0a:2a:0d:
15:d3:9d:6f:1f:95:15:b1:9a:ae:07:b8:90:6c:b9:
03:a4:da:54:c1:ea:57:65:34:fe:ef:83:aa:af:5f:
3b:c9:3e:a1:fa:a3:c1:96:84:46:6b:fd:fb:54:7d:
8a:85:bb:cc:cd:a4:a6:b1:8c:3c:b4:15:0b:a5:58:
e6:64:20:c9:0e:c5:85:b0:f9:bc:e9:97:1c:86:0a:
c4:af:a2:39:20:24:0c:ae:7a:f1:41:57:bc:52:dc:
f2:e8:c0:77:2c:bc:c7:30:53:09:54:bc:b4:b1:bd:
d8:af:77:71:fc:80:c5:41:00:8e:ff:96:99:d2:55:
1a:e6:77:5b:78:6e:15:7f:12:78:b5:8f:4b:0e:18:
af:98:9c:e4:94:92:f8:c2:4b:89:06:66:05:1e:94:
ab:34:54:89:91:cf:85:b9:89:92:7b:7d:77:94:83:
f9:89:66:2d:6d:ea:ce:0d:b1:cf:46:6f:38:81:0b:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7D:5F:67:24:E6:D1:0B:44:0B:E4:BD:7F:01:4B:48:28:B2:1F:6A
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/Y31fZyTm0QtEC-S9fwFLSCiyH2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7720::/32
Signature Algorithm: sha256WithRSAEncryption
91:3b:1b:b4:43:52:0d:0e:15:15:c8:aa:73:f0:e7:a0:f5:c0:
d0:d8:d8:83:9a:7e:76:b8:cb:cb:f8:4e:52:2a:25:aa:2e:d0:
2f:2b:60:8d:36:f2:3c:66:c6:b1:4c:f7:5b:21:9b:c4:0b:21:
c1:5c:0c:31:93:58:4d:ce:03:d8:88:8b:14:fd:09:cc:35:b3:
6c:ad:38:f1:93:12:c7:d3:b0:76:4e:53:d7:8d:4d:0a:e2:ef:
18:39:50:c0:e2:13:50:25:d7:a5:c9:1c:b6:43:21:39:62:fe:
16:88:ca:f1:6b:96:c1:f7:23:ab:9d:d6:a4:fe:c1:e4:97:38:
c9:24:39:58:99:63:f1:47:dd:2c:3b:e6:44:38:fe:a9:d1:e8:
cb:21:94:6c:5d:07:ea:9a:5f:34:89:09:19:80:a2:7e:89:c1:
29:7c:e7:ac:a1:57:a1:3e:30:92:a2:29:1a:cd:b5:3f:67:bf:
03:4e:f7:0b:d3:85:be:95:dd:5d:d7:09:2e:53:04:68:3d:dd:
54:83:82:7f:f9:26:ab:07:0a:b5:f6:12:3b:34:27:b1:f9:69:
8b:8d:68:b2:21:46:78:38:b8:31:c5:d0:67:af:fa:73:47:b6:
de:f6:5d:24:9e:c7:6b:98:b4:1d:79:1a:91:80:f4:f6:75:bc:
8f:19:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:28 2024 by rpki-client on console-fra.rpki-client.org