Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/V2NNGsyoweYmybNZYlh0MeeYHjE.roa
File: V2NNGsyoweYmybNZYlh0MeeYHjE.roa (raw, json)
Hash identifier: fHs1tJRpMFYCm2XIGg75P1YeRZsqLFf5LoAGLfNTLxQ=
Subject key identifier: 57:63:4D:1A:CC:A8:C1:E6:26:C9:B3:59:62:58:74:31:E7:98:1E:31
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 018570672214303AC6A76D7E756F13B482D2
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/V2NNGsyoweYmybNZYlh0MeeYHjE.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43006
IP address blocks: 2a10:3200::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Oct 2023 14:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:22:14:30:3a:c6:a7:6d:7e:75:6f:13:b4:82:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57634d1acca8c1e626c9b35962587431e7981e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:43:bf:d3:27:7c:a0:26:a8:1b:cd:79:ae:
f9:32:5a:a1:fa:af:d3:1b:ac:e7:0e:8d:c0:b7:56:
a7:2a:12:49:25:14:84:d8:15:f2:67:bf:85:3d:d0:
a2:8b:38:4b:7c:2c:60:aa:93:dd:a8:28:f9:21:e4:
83:5f:b1:91:4d:e0:19:dc:28:d4:bb:d4:83:03:14:
58:d2:e6:47:76:0c:1a:36:d0:7e:d5:bc:97:3d:76:
f4:6b:cc:50:ce:bb:98:7d:a7:0b:8b:f7:0b:8c:ae:
37:95:f7:d7:b2:c9:2c:8c:65:70:4f:bc:17:4a:1a:
a7:60:1d:ce:0e:f6:bd:cb:2f:21:17:cd:c7:58:6a:
ab:0f:40:cb:1b:2c:f4:a1:39:2f:4e:2c:d5:0f:c9:
ba:df:5c:23:a1:93:2e:ec:90:13:de:65:d8:01:74:
77:f9:70:45:64:58:c5:07:25:18:10:18:19:67:21:
b8:48:85:32:d5:c7:a7:12:46:21:2e:a1:35:fd:ae:
45:76:bf:98:3d:eb:37:a7:bf:cf:df:02:38:e8:cd:
1a:b8:58:01:5e:a7:f1:4a:7f:8f:ea:5b:e7:14:55:
0f:2e:10:de:42:40:39:e9:30:08:21:e3:80:84:68:
9a:b2:ae:02:26:ad:bc:6b:3c:ea:3c:b8:1f:79:da:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:63:4D:1A:CC:A8:C1:E6:26:C9:B3:59:62:58:74:31:E7:98:1E:31
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/V2NNGsyoweYmybNZYlh0MeeYHjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3200::/29
Signature Algorithm: sha256WithRSAEncryption
b6:9c:bf:96:18:c2:d6:9c:18:5e:06:67:cf:f5:d8:5b:a9:dd:
4d:3d:ec:32:1e:63:a7:ab:36:d7:1b:5e:45:55:32:99:53:61:
84:b7:38:be:aa:03:8b:38:d4:b6:89:75:1b:10:36:96:d7:d5:
7e:b2:78:9a:7c:7f:bb:28:14:53:3a:fe:f2:b3:7e:0b:94:fe:
2b:20:ce:be:c8:98:df:30:0e:a3:d0:37:1b:ed:14:96:7d:3e:
ae:30:fb:ce:b4:cb:3d:44:42:dc:0b:02:18:70:3f:89:ed:a9:
40:86:53:5a:de:24:12:dd:fb:39:bb:b2:6c:70:4a:98:f8:61:
0b:07:2a:10:f5:f5:43:6f:4b:ff:a0:f7:81:f1:d8:73:65:55:
7e:59:70:c8:80:c8:99:fa:d5:d8:6d:2a:b2:5a:fc:de:9e:0a:
0a:13:bc:d0:37:0e:59:e7:58:a3:41:4d:07:47:bb:5f:50:eb:
c9:7e:84:2c:33:d2:0d:f9:42:da:3d:5f:83:24:7e:f4:08:bf:
5f:06:41:46:c1:f4:e5:0b:ee:89:e8:1e:e4:2c:ab:d4:d3:fc:
9f:cd:5a:d4:b3:f3:fb:6f:6e:24:f5:b5:0a:9d:35:5a:e4:b9:
5f:2f:4b:81:b9:af:e4:7e:83:60:e2:7d:98:71:0d:3a:d4:4a:
df:9f:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:34 2024 by rpki-client on console-fra.rpki-client.org