Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/vZekMdgHfoUjYm_qBZ_xTsK3kGI.roa
File: vZekMdgHfoUjYm_qBZ_xTsK3kGI.roa (raw, json)
Hash identifier: DKDcTG4YG3GeJ0IhFHOcCXamo3sBfoYcdhH0Fr4iC3w=
Subject key identifier: BD:97:A4:31:D8:07:7E:85:23:62:6F:EA:05:9F:F1:4E:C2:B7:90:62
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 01856FD5356EEC58556973F102890EBEEF23
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/vZekMdgHfoUjYm_qBZ_xTsK3kGI.roa
Signing time: Mon 02 Jan 2023 00:15:21 +0000
ROA not before: Mon 02 Jan 2023 00:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211447
IP address blocks: 2a0a:d6c0:194::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:35:6e:ec:58:55:69:73:f1:02:89:0e:be:ef:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 00:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd97a431d8077e8523626fea059ff14ec2b79062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:79:6e:00:f9:b4:2c:11:88:60:ea:d3:e6:
ab:f7:c1:03:30:2f:61:e2:a2:ba:20:3a:b1:9c:76:
3f:78:c1:71:38:0b:aa:77:be:3f:59:ae:6f:50:cc:
78:ca:5e:c3:1f:50:a5:c4:45:fc:7a:3b:d2:a9:3f:
a9:e3:40:e4:92:4c:b4:9e:f0:d2:fe:b9:98:63:3c:
1d:88:fd:93:26:6e:c1:f8:64:d5:40:2d:f9:d5:c2:
f3:35:9b:cc:15:82:f4:5a:70:50:70:64:ef:6b:68:
70:04:5e:ef:6f:de:51:3a:d7:0d:23:3c:52:e8:85:
bb:54:3b:4c:9e:8c:fe:dd:d4:c9:25:8f:ef:7a:0c:
1f:68:5f:54:c9:c0:b6:c8:3b:94:04:42:58:c9:1b:
0f:a4:9b:44:35:0a:36:a2:7b:68:ff:2e:85:9e:65:
54:05:e1:1b:7b:5c:53:50:40:df:2e:b5:39:16:54:
c7:59:0e:94:24:e4:48:4b:07:2b:21:d7:5b:d0:e5:
8a:c7:6e:08:60:01:fc:e6:d7:d1:b7:0d:9d:8a:4a:
52:5a:8b:81:46:4b:18:01:e1:8d:c5:d5:0a:9b:fa:
74:d8:15:e1:30:df:80:51:a1:87:66:d0:94:73:34:
19:f5:af:57:ee:2a:cc:56:37:f6:37:69:19:fd:a8:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:97:A4:31:D8:07:7E:85:23:62:6F:EA:05:9F:F1:4E:C2:B7:90:62
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/vZekMdgHfoUjYm_qBZ_xTsK3kGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:194::/48
Signature Algorithm: sha256WithRSAEncryption
75:bf:71:9f:b5:0c:20:3b:73:d0:17:7e:1f:12:6d:a4:cf:fd:
96:47:f5:97:c3:b6:9f:99:95:07:ee:4a:4c:0d:3a:13:56:14:
17:ac:63:0f:65:9c:75:e1:89:fa:e7:0b:63:6f:26:5d:c9:09:
46:74:ab:26:45:12:48:a3:d0:7c:e7:76:3e:72:59:40:3e:6f:
8a:e8:76:e7:e9:63:32:3a:2d:33:c7:47:f1:77:a8:ae:05:47:
f1:2d:1b:34:28:4c:c0:ad:bb:53:96:dc:a1:83:fd:91:37:92:
12:95:93:f4:97:f4:49:be:b7:41:f5:2b:8b:0f:f1:fe:66:34:
31:a9:a4:34:19:91:4d:3c:c6:ba:7e:2a:08:3f:b5:7b:fc:2d:
6e:74:8a:32:fe:f3:f1:bf:e2:f3:25:25:66:ed:0b:f3:29:bb:
be:e3:ba:96:22:00:79:fc:21:e1:eb:36:e2:69:ef:ca:7e:9a:
cf:19:53:2e:4f:b0:7b:bd:dc:20:24:e6:0a:68:1e:7b:4c:76:
9d:12:11:14:ef:5c:e1:52:2d:d3:81:d9:a1:14:c1:8f:3d:16:
3e:c2:d0:97:ba:4b:dd:5a:9a:ca:59:5c:79:be:d8:71:1f:c6:
ac:c7:18:e5:18:fb:4b:e8:15:df:e2:07:3b:26:44:67:fb:76:
3d:15:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:38 2024 by rpki-client on console-fra.rpki-client.org