Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/vSytTgpCPJYDZEDIa_0rkMi4zWE.roa
File: vSytTgpCPJYDZEDIa_0rkMi4zWE.roa (raw, json)
Hash identifier: nVl7U2vYgH5kHDzHJlXqYfJBcL3tAEsNb/n5QLOQDFE=
Subject key identifier: BD:2C:AD:4E:0A:42:3C:96:03:64:40:C8:6B:FD:2B:90:C8:B8:CD:61
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 01856F5DD5B21DC00AF7F0B7829532B53154
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/vSytTgpCPJYDZEDIa_0rkMi4zWE.roa
Signing time: Sun 01 Jan 2023 22:04:58 +0000
ROA not before: Sun 01 Jan 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62571
IP address blocks: 2a02:e982:1e::/48 maxlen: 48
2a02:e982:31::/48 maxlen: 48
2a02:e980:1e::/48 maxlen: 48
2a02:e980:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d5:b2:1d:c0:0a:f7:f0:b7:82:95:32:b5:31:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Jan 1 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd2cad4e0a423c96036440c86bfd2b90c8b8cd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:1f:6f:fa:8c:46:42:7c:7d:13:53:8b:4c:
aa:90:97:9c:76:4f:0e:d3:e3:e1:19:39:a1:b5:d5:
eb:2d:7d:b4:fb:a3:fb:80:94:77:5b:e7:8e:14:21:
e4:5c:a0:77:48:91:b8:8f:7e:e2:3a:3a:fb:cd:64:
74:81:4a:3b:5c:bc:22:cf:f2:d2:98:ee:2a:6f:f5:
51:28:c8:ba:2d:01:31:ad:99:3c:40:ec:99:f3:4f:
cc:6a:3f:61:45:17:bd:cc:33:13:a4:1d:bc:46:63:
36:92:43:41:ec:42:bb:74:b8:75:f3:00:6b:87:f8:
e6:3e:24:45:2f:68:5e:40:a4:bd:f9:17:02:b0:15:
94:4f:2c:e5:f4:df:52:f7:59:4a:cc:ae:eb:c6:ea:
3f:35:1c:f6:f7:8d:1f:4a:ce:d7:ca:ef:61:f0:d1:
b6:d8:f5:50:67:24:02:64:0b:62:48:47:56:c7:54:
c6:c8:00:9b:7c:13:ff:6f:e0:fc:9d:c9:09:29:01:
6d:92:06:4d:b6:bc:90:fc:89:bb:7b:18:f8:2e:46:
75:74:71:10:2a:a6:5e:71:9d:54:3d:00:9a:67:e4:
c1:f8:e8:5c:46:b7:eb:d0:11:9e:c0:db:7e:99:07:
14:9e:15:8e:94:79:51:c2:ba:d2:4c:25:f8:eb:54:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2C:AD:4E:0A:42:3C:96:03:64:40:C8:6B:FD:2B:90:C8:B8:CD:61
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/vSytTgpCPJYDZEDIa_0rkMi4zWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e980:1e::/48
2a02:e980:25::/48
2a02:e982:1e::/48
2a02:e982:31::/48
Signature Algorithm: sha256WithRSAEncryption
2b:bd:b5:7a:d0:ea:05:1b:50:f5:da:b4:a8:69:78:51:4d:4a:
67:cb:dc:a5:81:c8:42:6e:af:0d:a6:ac:2a:f3:2e:82:01:fd:
0d:9f:6c:77:92:3a:6e:c0:9a:54:dd:0f:52:dd:66:bd:2e:e2:
f8:41:a4:c2:3f:e8:41:c4:b4:39:3f:96:59:63:3d:d1:7f:22:
cd:52:78:37:91:2d:a6:b0:a5:d2:73:bb:cb:67:8e:62:66:5a:
7a:4b:8a:db:4b:b2:61:fa:3f:04:9b:5d:92:6e:f2:ae:df:17:
24:c2:ec:15:18:29:b6:a3:aa:a5:e6:90:b5:91:a1:94:b4:21:
e8:c1:c1:5a:61:26:de:f2:cf:e4:cf:55:26:fa:5c:57:80:35:
f1:cb:5f:13:e6:05:fe:97:ff:71:98:0d:ec:47:bc:69:db:af:
d6:7b:20:6a:41:5c:0a:45:c9:11:88:01:5d:e4:13:7f:59:b1:
93:39:8c:5b:fc:80:59:27:ac:3b:22:6c:fa:ff:b9:69:23:2a:
6f:ba:60:cf:45:da:be:63:cf:69:9b:29:bb:a3:fb:3c:4f:ab:
f3:2d:96:7c:ac:5e:6a:de:d1:af:a6:b7:55:45:cf:f5:1f:24:
58:df:1b:97:5a:d4:ba:93:43:df:21:f5:28:1b:d5:e6:c9:bc:
d4:78:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org