Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/gErKe4z8eJQsBJAn-MESYDOTIB0.roa
File: gErKe4z8eJQsBJAn-MESYDOTIB0.roa (raw, json)
Hash identifier: RlTR6m/inrX6GSERMp1rdvwhWaan7HF1z6dmxbN6dB4=
Subject key identifier: 80:4A:CA:7B:8C:FC:78:94:2C:04:90:27:F8:C1:12:60:33:93:20:1D
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 018570C2AA5833F854CFA0FDB937B8D287C0
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/gErKe4z8eJQsBJAn-MESYDOTIB0.roa
Signing time: Mon 02 Jan 2023 04:34:43 +0000
ROA not before: Mon 02 Jan 2023 04:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136468
IP address blocks: 2a00:edc0:136::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 Mar 2023 20:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:aa:58:33:f8:54:cf:a0:fd:b9:37:b8:d2:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Jan 2 04:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804aca7b8cfc78942c049027f8c112603393201d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:f8:90:22:e6:41:bd:03:ee:26:53:b1:78:
73:da:ed:cf:a3:e1:7e:09:2e:ec:9a:d6:c4:0f:a4:
f1:0a:5a:20:72:40:02:0c:1a:03:29:18:36:a8:b6:
2f:d3:80:3c:cb:d5:af:82:3f:7f:04:3f:32:5f:86:
d4:c7:f4:b2:ba:88:e9:78:2c:ac:60:69:2c:b9:42:
00:24:eb:f3:08:a3:4e:0f:2e:3c:c1:08:d9:14:b8:
a2:b8:c8:80:e0:1b:6f:f2:31:40:8a:01:48:33:b0:
b6:be:17:07:39:41:72:b9:91:10:15:e2:ee:a7:92:
a5:ff:b2:57:5e:8a:9f:50:46:20:4e:a9:c3:93:39:
93:c1:a8:79:39:67:89:b2:89:c2:cf:11:f7:23:63:
37:d2:07:f8:58:37:94:52:6c:98:18:6b:fe:81:b6:
55:db:53:fe:71:f1:56:1e:25:0c:b9:09:39:59:f6:
ee:ad:c6:d7:9d:46:4a:36:f0:b8:1b:14:91:ba:17:
aa:68:94:03:c1:e3:1e:c0:81:f0:43:c9:94:20:5b:
e1:17:2a:e9:5f:68:75:fb:dd:23:fa:3a:52:a7:46:
0c:39:1c:53:4e:62:d8:3d:20:0d:28:fe:b4:c0:19:
a9:86:01:92:0a:06:25:8c:ff:c7:48:01:22:79:05:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4A:CA:7B:8C:FC:78:94:2C:04:90:27:F8:C1:12:60:33:93:20:1D
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/gErKe4z8eJQsBJAn-MESYDOTIB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:edc0:136::/48
Signature Algorithm: sha256WithRSAEncryption
84:58:e0:f3:cc:d5:c3:85:16:db:2f:45:1c:9a:18:82:79:fe:
81:1f:6c:10:a4:d4:45:f7:a2:4e:93:60:3d:a4:d2:55:13:d7:
e4:88:d4:6e:00:12:68:98:95:9e:c1:f5:fa:e3:33:c9:17:b3:
ad:09:6f:97:ac:56:84:68:c5:b0:49:12:1e:13:09:f2:2d:bb:
6e:29:3a:3c:84:4e:7f:0c:88:24:90:6f:50:0c:4d:14:93:b0:
d1:e9:41:0f:d8:24:08:15:f6:53:1a:2c:1a:66:11:d5:7e:60:
57:a6:d0:42:cd:ce:d4:6e:de:dc:6f:e5:f2:82:58:97:de:25:
98:16:b6:65:5c:04:06:26:89:cf:bb:f0:53:2d:49:bb:ee:77:
15:7b:c1:20:e7:e3:84:36:49:af:f7:01:9e:bf:93:f3:66:35:
43:3d:ad:9b:e0:d1:cc:41:9c:9d:b0:e2:8d:49:2b:5f:e7:81:
49:5c:eb:bd:9b:39:2d:eb:b1:bc:ce:54:a5:4b:9f:22:81:d9:
c8:b6:98:a3:b2:bb:51:90:aa:b6:fd:60:d2:5a:9e:6a:b7:82:
bb:b2:d6:9a:12:6e:90:af:07:74:5d:79:9e:a4:b0:20:39:02:
f7:b4:16:67:29:4f:0a:f6:2e:bc:5f:56:f0:9d:9e:44:3b:15:
f8:24:f1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:22 2024 by rpki-client on console-ams.rpki-client.org