Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/v0EXKMkShTtnnBHpvsxXwg2roa4.roa
File: v0EXKMkShTtnnBHpvsxXwg2roa4.roa (raw, json)
Hash identifier: lRPeIgHPzFm+8hIz6Bf9w3lS1Zw1dXFt/nMOIgDB8E8=
Subject key identifier: BF:41:17:28:C9:12:85:3B:67:9C:11:E9:BE:CC:57:C2:0D:AB:A1:AE
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 0185723A1A7AE44F4683D03042C91B6678F5
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/v0EXKMkShTtnnBHpvsxXwg2roa4.roa
Signing time: Mon 02 Jan 2023 11:24:48 +0000
ROA not before: Mon 02 Jan 2023 11:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2116
IP address blocks: 2a02:d60::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:1a:7a:e4:4f:46:83:d0:30:42:c9:1b:66:78:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Jan 2 11:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf411728c912853b679c11e9becc57c20daba1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fd:07:e4:4d:77:e4:0f:90:13:f5:53:70:13:
68:c4:6e:15:d6:93:44:74:71:92:3b:0d:e7:c7:19:
64:7b:b1:ad:ff:ea:dd:b6:78:5b:69:c4:84:a4:6a:
e2:5d:4a:6d:58:f6:c3:44:a8:25:30:42:2f:76:d1:
7c:84:9d:7f:0e:42:64:bf:0b:8a:4c:28:ae:9f:e5:
1c:2b:a9:06:80:28:14:1b:6a:43:69:f6:df:f6:70:
16:95:ed:95:19:e9:d5:f6:ef:4f:f6:d3:d6:57:b4:
d5:a2:a3:d2:a2:a2:18:12:66:0f:06:7e:fd:59:63:
c1:37:e4:45:1f:cb:ab:ef:31:29:75:1d:d7:60:d4:
15:fd:f6:36:ce:d6:a9:c6:e6:70:9e:25:6a:89:5e:
5f:60:d2:a7:c6:6e:e5:66:4b:f0:5d:a8:de:7c:54:
7f:b3:98:64:d7:f8:ed:d3:50:54:e4:3e:42:8c:94:
8d:44:01:24:a6:56:56:ed:2d:2f:56:23:8e:f6:4e:
a6:55:25:4d:c6:3d:e3:04:b3:99:5d:8f:be:b7:cb:
f0:84:e5:16:fc:2b:08:da:dd:63:13:87:4e:61:da:
21:25:2d:fb:87:a9:46:c1:67:9e:1d:c1:69:42:cd:
d9:66:d8:8d:f5:11:11:08:fb:09:dd:a6:57:55:66:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:41:17:28:C9:12:85:3B:67:9C:11:E9:BE:CC:57:C2:0D:AB:A1:AE
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/v0EXKMkShTtnnBHpvsxXwg2roa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d60::/32
Signature Algorithm: sha256WithRSAEncryption
0a:59:0e:2f:5d:ea:6f:ef:eb:0c:a9:92:36:c0:58:5d:42:e2:
52:23:4f:ce:bc:29:08:21:59:88:9e:6f:90:df:ac:91:94:16:
13:59:b6:a5:63:ca:27:1a:34:5a:91:4d:2b:5d:46:aa:4b:84:
10:5d:0e:2b:9b:31:d6:c6:06:89:36:43:ba:42:f3:97:20:2f:
e9:b1:94:90:0b:43:b6:74:6d:69:e8:fa:41:68:fc:5c:7d:da:
33:ed:ea:88:31:5a:cd:89:a9:4d:50:28:47:4c:f7:0a:7d:6a:
6a:74:1b:f0:02:18:7e:9f:ab:df:5a:c0:84:bc:11:cd:9d:72:
23:3f:4b:02:23:a8:af:8f:e4:a7:27:95:c7:98:ee:f8:6f:6e:
06:b5:d7:5a:f5:ad:d6:d7:82:81:72:77:c2:2c:3d:ea:21:6b:
42:17:fc:90:3a:36:29:2f:6f:f4:b8:c2:13:02:c5:51:03:ca:
8b:d7:05:dc:1d:1c:07:91:48:37:07:7d:29:34:3f:51:36:82:
dd:fd:ed:fe:e2:89:d1:31:46:86:ba:cf:fa:c4:b9:7b:20:8d:
e7:06:81:f6:a8:41:be:07:e4:f9:06:7e:f8:5d:58:b4:6b:08:
7d:f9:18:21:17:46:39:35:1c:36:89:78:38:32:a5:ee:43:ed:
b2:cd:0f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:25 2024 by rpki-client on console-fra.rpki-client.org