Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pRINSpu58-c3Rx5Oo9-vfc9tt7c.roa
File: pRINSpu58-c3Rx5Oo9-vfc9tt7c.roa (raw, json)
Hash identifier: Os+2OpSeNvBBHcIwSdewAGTfnRadX+VV7p4MDwQExqg=
Subject key identifier: A5:12:0D:4A:9B:B9:F3:E7:37:47:1E:4E:A3:DF:AF:7D:CF:6D:B7:B7
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018C5C0AE202999954CCD5E7841DD1BA510A
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pRINSpu58-c3Rx5Oo9-vfc9tt7c.roa
Signing time: Tue 12 Dec 2023 03:21:06 +0000
ROA not before: Tue 12 Dec 2023 03:21:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215857
IP address blocks: 2a0f:7803:fe90::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:0a:e2:02:99:99:54:cc:d5:e7:84:1d:d1:ba:51:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Dec 12 03:21:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5120d4a9bb9f3e737471e4ea3dfaf7dcf6db7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:43:38:6e:d9:90:26:22:67:c8:ea:20:05:
cb:28:73:6f:eb:a6:46:6d:d9:49:2d:4d:69:87:fb:
11:49:f4:a0:59:8d:a4:e6:9c:d8:9e:0a:7b:10:15:
60:dc:2a:a6:90:f6:a7:42:0f:0a:b8:d5:64:fb:51:
10:42:96:f9:dd:13:f0:1c:a5:a9:f2:66:93:cc:f4:
24:16:78:49:e9:5b:ca:e7:ea:f1:61:91:d4:37:a1:
fb:64:34:b0:95:4b:82:6f:16:22:7f:c5:dc:ee:cc:
0a:cc:b7:f2:3c:5f:f6:de:03:30:c0:aa:17:f8:7d:
02:c5:fc:70:4b:23:57:3e:af:f7:c1:44:96:7f:ad:
4a:12:aa:20:8b:c2:59:c7:8d:88:7f:14:76:7c:19:
a8:28:78:ac:a8:df:63:c7:8f:86:2e:ae:f2:ba:8a:
f8:d8:ea:8a:32:7b:72:86:e8:38:bc:44:1a:82:65:
cf:05:de:21:ec:4f:48:ec:59:b8:75:0d:14:7a:00:
55:72:50:27:80:ac:26:1e:2f:4e:ee:4a:e9:7f:66:
bb:40:81:84:bd:13:7e:6e:58:44:6b:8d:57:f3:16:
4c:fa:f0:00:23:d5:c6:a6:ac:11:b8:10:a7:8c:8d:
b9:b3:32:66:e5:0e:b5:1d:1c:cb:b1:69:0c:16:b9:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:12:0D:4A:9B:B9:F3:E7:37:47:1E:4E:A3:DF:AF:7D:CF:6D:B7:B7
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pRINSpu58-c3Rx5Oo9-vfc9tt7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fe90::/44
Signature Algorithm: sha256WithRSAEncryption
20:ac:ed:e9:49:60:1f:0f:7d:ac:ca:df:f2:b3:2e:5a:40:7d:
99:72:75:ea:71:9b:10:ad:4c:f4:a2:ae:a8:00:76:62:4c:0b:
cd:60:4a:d3:30:87:d8:82:cb:06:31:5b:e2:e3:68:1c:0d:7d:
81:de:cd:5e:90:b5:09:92:41:cb:96:fc:7b:0a:82:9b:77:5b:
60:75:27:d1:88:c7:2b:c6:e6:c0:a8:b5:08:2d:d5:f7:46:46:
7d:4c:5a:fd:04:99:86:5c:b4:03:5d:1a:6e:59:a2:aa:2d:07:
dc:e8:4f:dc:b6:55:14:de:65:be:a3:24:75:82:3b:a8:8a:b9:
bd:36:c8:a2:ec:56:4a:67:84:5b:19:ee:be:29:61:0e:7a:98:
0d:36:31:e0:b5:15:3b:83:d6:59:e5:7e:cc:27:9f:18:4a:4b:
53:f2:80:0f:54:34:c2:19:49:23:d1:f1:6f:67:72:cf:fe:53:
d9:5e:4e:3c:4e:a1:aa:50:5c:0c:41:1d:ee:4b:02:f1:d7:da:
57:da:f5:f1:6a:5f:60:d0:1c:12:18:6f:a1:ed:33:04:f1:9f:
00:37:90:12:90:64:1b:b3:43:29:4e:48:54:12:37:1e:c5:62:
48:4b:fd:e4:62:48:27:0e:6a:c1:bf:27:c1:f6:93:b5:27:cd:
e7:7b:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:32 2024 by rpki-client on console-ams.rpki-client.org