Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/9-Hk79_In7u65PL4BedrBxXejl8.roa
File: 9-Hk79_In7u65PL4BedrBxXejl8.roa (raw, json)
Hash identifier: aXaubADKdmuIXnmenr8H1rUH1qviTWekPFuMqs2I0n8=
Subject key identifier: F7:E1:E4:EF:DF:C8:9F:BB:BA:E4:F2:F8:05:E7:6B:07:15:DE:8E:5F
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 018CC56EDCF98E151343B53FD9677B5792A2
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/9-Hk79_In7u65PL4BedrBxXejl8.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395403
IP address blocks: 2a00:edc0:1007::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 Apr 2024 02:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:dc:f9:8e:15:13:43:b5:3f:d9:67:7b:57:92:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7e1e4efdfc89fbbbae4f2f805e76b0715de8e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:6b:f6:b6:7f:f7:bd:3e:54:c1:8f:9c:74:
13:7e:a6:f0:fb:80:da:b9:37:a6:ec:48:a1:c5:6e:
45:be:15:91:54:11:a7:c1:06:cf:d2:07:f5:b7:48:
ac:06:58:dd:d8:38:3c:97:e7:3a:f3:ad:0b:9f:4b:
9f:72:90:a8:60:b3:b9:1e:94:0e:c8:22:8a:ae:88:
07:3c:b1:55:f6:48:17:2a:1e:49:4a:fa:2e:29:fe:
7b:ac:a7:d6:d1:2e:a8:f5:f8:0d:aa:e9:94:ae:67:
ab:77:39:9c:80:1a:cd:d7:f5:34:84:f8:fe:d9:0d:
2a:73:94:75:92:5d:41:57:3f:f6:4a:aa:b1:dc:2a:
0e:6a:e8:8a:90:6e:c5:5b:ba:c1:51:1a:98:0f:de:
b5:f2:39:76:85:03:0f:1c:87:9b:04:3d:4f:37:c0:
19:a1:2f:55:49:25:97:4e:38:27:2f:0e:9b:44:94:
84:0b:ec:93:a3:1e:4f:67:22:e1:70:46:0f:e7:f2:
52:0c:b7:a3:69:da:dc:7c:d4:30:08:a4:ec:94:14:
3e:8b:55:b2:99:9d:0c:f5:bc:1f:93:1e:ab:58:b7:
eb:c2:28:18:26:22:39:17:7c:bd:55:6d:29:d2:80:
8e:19:99:2c:ea:ad:af:77:37:4c:6e:40:8f:e5:ab:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E1:E4:EF:DF:C8:9F:BB:BA:E4:F2:F8:05:E7:6B:07:15:DE:8E:5F
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/9-Hk79_In7u65PL4BedrBxXejl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:edc0:1007::/48
Signature Algorithm: sha256WithRSAEncryption
48:f1:ac:6e:57:19:0f:36:bb:98:92:8d:5b:f1:a9:08:10:6c:
ba:4e:67:02:d5:5f:0f:dd:ba:e2:9b:43:b7:36:c1:ff:58:12:
7d:32:8c:c5:06:7b:1b:5d:55:5c:a6:9c:e7:06:72:42:e8:eb:
fc:dd:1a:53:23:f2:e4:40:3b:c4:76:89:c4:99:b4:5c:4c:13:
73:8d:35:01:29:77:f6:b6:7a:63:8d:78:d7:87:d3:1a:6e:20:
de:35:a8:46:58:63:c7:e2:23:1c:87:1f:ab:07:d9:1b:f6:60:
bb:c7:f7:74:d3:a6:eb:18:78:78:75:31:d0:3e:fc:cf:1c:0b:
e6:ae:a6:aa:e3:38:9c:1c:98:e5:a3:fe:ef:8a:b3:6f:f8:5e:
9d:89:1d:d0:2e:5a:fb:75:6c:c4:48:e4:7f:1e:30:d2:13:ba:
91:b5:c6:53:2c:63:c2:d1:c4:9e:6a:a9:31:08:08:3b:4c:b3:
46:13:0a:c3:6f:b0:e7:20:91:e4:6e:43:88:cf:00:96:37:f3:
c4:b2:5c:3b:ed:41:76:d1:7e:ab:d8:9a:1b:b5:cf:f7:91:b4:
52:1a:a2:d8:d8:fb:93:a4:72:a5:b7:65:82:73:73:76:6e:1b:
9b:c6:7b:7b:ee:ca:9e:71:9f:a0:4c:a8:9e:be:9c:68:0c:43:
77:10:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org