Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/PI-sASY5J4dnHKFcnqoum30_ibE.roa
File: PI-sASY5J4dnHKFcnqoum30_ibE.roa (raw, json)
Hash identifier: 4HdKx62Ct+8zfVHJ5qnCSXwRfU6kDhCOrnrLmVBEzJg=
Subject key identifier: 3C:8F:AC:01:26:39:27:87:67:1C:A1:5C:9E:AA:2E:9B:7D:3F:89:B1
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018D93A316E1D62DB5E639B8627145C83AB0
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/PI-sASY5J4dnHKFcnqoum30_ibE.roa
Signing time: Sat 10 Feb 2024 15:29:15 +0000
ROA not before: Sat 10 Feb 2024 15:29:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198571
IP address blocks: 2a0d:c980::/29 maxlen: 29
2a13:3f81::/32 maxlen: 32
2a13:3f82::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 17 May 2024 17:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:93:a3:16:e1:d6:2d:b5:e6:39:b8:62:71:45:c8:3a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Feb 10 15:29:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c8fac0126392787671ca15c9eaa2e9b7d3f89b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:d9:13:11:49:b0:8a:da:b9:41:d3:d7:f1:
7e:7f:6c:5b:98:6a:f1:2d:73:ff:2c:c9:3d:05:63:
a4:b3:12:7c:4c:a2:26:86:d0:f6:67:47:57:e1:e2:
7a:12:c2:23:5a:a5:40:f5:9d:b2:bc:18:13:54:0e:
82:4c:67:4b:7c:10:36:10:b2:b3:37:e9:eb:81:f2:
79:58:5d:37:cd:95:78:37:e7:fb:d3:5c:78:d1:e2:
cf:6d:46:2a:7b:bb:38:a1:c7:dd:0d:d3:bd:93:0c:
13:9c:31:ac:ca:8b:8b:63:d9:37:00:df:a9:91:8c:
09:07:8c:21:f2:8f:14:b9:3b:f7:28:c3:5f:87:b7:
f3:42:e4:f8:79:74:3d:52:74:3b:80:2e:0c:bb:0e:
b4:45:bb:77:3d:9d:56:06:6c:f1:e0:8f:6c:9e:e6:
fb:65:a5:25:ec:b6:05:c6:65:68:d1:1d:ba:28:6c:
19:fb:c5:2b:b3:27:cc:8d:1d:02:c4:52:78:aa:be:
e2:f0:52:7c:72:1e:e2:22:3d:0c:8c:c8:58:2c:d6:
ed:07:8e:2e:48:6e:40:67:62:4e:6c:5b:14:fa:3a:
e7:0e:f4:e9:6f:46:dc:8d:3d:e4:59:42:ab:5e:1b:
2b:1c:44:07:15:51:cb:b9:16:7b:19:64:c5:b6:57:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:AC:01:26:39:27:87:67:1C:A1:5C:9E:AA:2E:9B:7D:3F:89:B1
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/PI-sASY5J4dnHKFcnqoum30_ibE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:c980::/29
2a13:3f81::-2a13:3f82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9f:29:46:67:2a:ba:0a:42:d2:6e:72:d5:a9:8d:8b:4b:d5:4b:
fb:f1:36:e7:fa:a9:97:50:b8:8f:b6:67:96:f4:96:01:83:0b:
a6:7b:e0:9b:98:ab:91:bf:f0:4e:9d:f3:ec:31:4e:0e:90:37:
8e:32:e0:84:f8:1c:98:a7:13:f2:2a:c2:f4:79:37:11:86:3d:
69:49:34:84:07:1a:34:9f:0a:9f:9b:10:e4:74:66:be:c9:79:
85:c4:2e:ac:5a:31:00:45:a3:41:21:e1:42:36:be:ad:c5:c1:
0b:02:42:8b:46:f8:35:61:33:82:72:96:7d:6c:8e:7e:f1:1d:
d6:89:d2:55:a0:0b:9b:1e:ff:d2:7e:a1:87:fb:44:e1:32:ad:
e4:6d:33:2f:0f:e4:be:72:97:5a:97:18:67:78:a3:8b:fa:d7:
0a:68:d7:38:d3:58:c2:c2:c0:38:10:df:04:16:06:30:9d:15:
f0:1b:24:16:ba:f3:9f:92:28:96:9a:36:17:37:f9:05:a2:10:
4f:3c:50:01:d8:46:9c:10:26:ee:8f:25:dd:dc:67:d3:8d:c6:
78:b4:b2:7d:44:7b:7b:cc:aa:6b:e7:9a:b7:4e:b1:ad:b6:3b:
0a:ee:31:07:97:5a:97:34:a9:7c:5b:f3:6c:87:cf:8d:5d:04:
b1:12:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:11 2024 by rpki-client on console-ams.rpki-client.org