Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/3V2me5jiRF-YSRyP7jR_Zg4oul4.roa
File: 3V2me5jiRF-YSRyP7jR_Zg4oul4.roa (raw, json)
Hash identifier: nRiLBm0zhnsX0QZsGnp+Zp3S3PGTpnm5o4YhUs5PJPE=
Subject key identifier: DD:5D:A6:7B:98:E2:44:5F:98:49:1C:8F:EE:34:7F:66:0E:28:BA:5E
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 01872EFF3297D4E0D52A31BCE38C42B094A4
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/3V2me5jiRF-YSRyP7jR_Zg4oul4.roa
Signing time: Wed 29 Mar 2023 20:11:29 +0000
ROA not before: Wed 29 Mar 2023 20:11:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136468
IP address blocks: 2a00:edc0:136::/48 maxlen: 48
2a00:edc0:137::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:ff:32:97:d4:e0:d5:2a:31:bc:e3:8c:42:b0:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Mar 29 20:11:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd5da67b98e2445f98491c8fee347f660e28ba5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:ac:eb:b3:87:a4:8b:e9:9e:30:31:97:26:
60:8a:8c:d6:81:ec:0c:2f:76:fd:9b:4d:73:57:49:
79:8c:e3:6c:f7:20:b4:4a:cd:1f:0f:ea:2f:a0:ea:
5d:2d:26:ae:76:1e:70:a1:c4:a3:ef:3c:df:7a:6e:
f0:2d:1a:12:84:65:8a:9e:21:61:be:9b:f6:39:ef:
e8:41:ad:d0:69:00:fa:da:73:a4:e9:c4:cf:dc:32:
2c:f7:39:cf:9a:40:9f:e7:57:22:9d:ff:83:32:40:
0d:a6:ed:b2:8c:f9:76:26:df:c8:9d:ff:9d:24:f6:
67:29:13:1d:80:fc:92:57:cc:c8:7a:39:b1:f2:b4:
ed:ef:80:3a:4a:9c:62:72:b6:ac:1c:0e:54:50:0f:
eb:4e:de:50:5c:fd:0c:73:a6:52:0e:3e:89:8b:22:
ff:d8:97:f1:de:24:55:49:f5:58:4a:bd:81:f4:a1:
02:ac:3f:d6:83:f4:0c:d0:75:4f:a2:4b:a4:a7:3f:
92:2c:78:e7:af:ce:15:78:40:d1:12:ec:13:18:d4:
a7:bc:e9:01:f7:88:19:6a:4b:f5:bd:db:9a:f4:f5:
69:71:3b:79:41:56:69:6e:43:f3:97:c7:8b:38:9a:
d8:e4:e1:51:11:1b:b2:4c:8b:77:04:63:23:9f:11:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:A6:7B:98:E2:44:5F:98:49:1C:8F:EE:34:7F:66:0E:28:BA:5E
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/3V2me5jiRF-YSRyP7jR_Zg4oul4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:edc0:136::/47
Signature Algorithm: sha256WithRSAEncryption
4c:26:b0:34:91:78:33:e0:96:cd:bc:3c:b4:6a:c4:95:5b:b6:
04:cf:d2:70:ac:6d:a0:b1:3b:b1:49:97:ec:0e:a8:05:81:99:
37:9c:34:6e:89:e5:6d:5a:7a:6c:17:17:35:c9:3b:7d:5f:0a:
65:d4:15:e5:6d:da:29:bc:83:fa:e1:c2:4e:4b:a8:78:0d:9c:
dd:b1:53:fe:1b:4a:80:1a:8b:e5:50:66:c1:df:f9:cf:02:5a:
6b:0b:b5:72:13:c2:fa:03:d1:95:cc:9d:fa:ee:55:33:00:54:
81:d4:99:5f:95:26:43:39:aa:52:9b:63:9a:58:b1:89:34:de:
9e:ba:6e:ee:f4:84:b7:d3:90:59:e8:28:d6:54:be:1d:09:a0:
e1:cc:e4:74:1e:c9:3e:d0:d7:cd:28:8a:ad:e4:a1:14:fe:cd:
0e:d1:cc:3a:b7:3d:60:e5:34:b4:d9:e5:41:2d:2e:4c:6f:9f:
cf:b1:e0:02:da:e5:38:8b:ed:b1:bd:a9:d5:c3:92:19:3b:98:
86:bf:23:a0:5a:23:42:17:de:19:29:24:6c:e9:72:ef:31:17:
1b:47:51:fb:40:aa:73:6c:61:99:e8:56:45:69:06:ec:c0:b2:
bd:f6:10:20:87:42:e1:b8:df:78:ae:79:dd:06:33:81:95:8d:
2c:e8:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org