Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/SVyi6wkpMrVYIEfBl4fEW5YvylY.roa
File: SVyi6wkpMrVYIEfBl4fEW5YvylY.roa (raw, json)
Hash identifier: aUgTmpqNSPWEn/T20GoSnc68lvbiqYK/MGIc5keaNyM=
Subject key identifier: 49:5C:A2:EB:09:29:32:B5:58:20:47:C1:97:87:C4:5B:96:2F:CA:56
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018AD65E6E2195BCB9CCB48C45F227AC0A44
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/SVyi6wkpMrVYIEfBl4fEW5YvylY.roa
Signing time: Wed 27 Sep 2023 11:20:27 +0000
ROA not before: Wed 27 Sep 2023 11:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198571
IP address blocks: 2a13:3f81::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 18 Nov 2023 19:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:5e:6e:21:95:bc:b9:cc:b4:8c:45:f2:27:ac:0a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Sep 27 11:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=495ca2eb092932b5582047c19787c45b962fca56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:90:0b:f3:1a:08:93:f6:91:79:d3:42:d7:
68:b0:03:27:f9:8c:a7:eb:70:90:23:f2:e3:c4:ae:
36:ea:af:b8:26:83:ac:16:83:cb:01:60:bc:7a:23:
1c:07:dd:26:4e:28:82:33:88:8e:be:35:03:9b:f0:
2a:8f:90:23:fe:03:ce:e2:5e:31:ac:db:7d:6c:35:
39:b0:5a:03:90:be:e9:67:ff:05:9f:e0:5d:44:8f:
5a:cd:ab:85:d4:88:f5:e7:b6:a3:2d:8f:da:d5:ab:
1f:54:7c:ae:50:a1:29:b5:df:d1:1b:12:3f:b6:cb:
0c:78:ee:0c:89:78:34:a8:a8:e7:86:33:cc:c0:51:
6e:f4:95:85:44:7d:9b:12:79:35:d5:e4:ba:5f:7c:
61:fb:b3:f7:49:ec:9d:62:dd:e5:32:0c:e0:7d:77:
fe:36:61:18:d8:e6:b5:58:f0:58:13:65:2e:6a:1f:
97:99:cd:3c:aa:24:7a:f7:d9:8e:a3:a8:73:97:ea:
c8:59:cb:f6:df:89:a3:96:f2:d1:8e:6a:2f:a7:0f:
17:d8:45:53:7a:c8:f8:c1:07:84:7e:5a:d3:19:84:
cf:d7:3c:f6:07:36:f8:d7:62:93:57:10:34:f2:7f:
c2:a6:c1:f7:81:ad:98:55:ff:6a:c2:4d:e2:e4:65:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5C:A2:EB:09:29:32:B5:58:20:47:C1:97:87:C4:5B:96:2F:CA:56
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/SVyi6wkpMrVYIEfBl4fEW5YvylY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f81::/32
Signature Algorithm: sha256WithRSAEncryption
31:7c:f9:4b:59:84:4e:2e:ac:fb:14:63:8b:9b:50:06:87:b8:
f7:a9:9d:a8:d2:f2:af:02:32:83:d7:2d:bd:3b:06:68:df:40:
ad:cc:1c:f6:ec:92:69:26:64:41:1b:5e:dc:2f:64:d3:00:51:
24:1b:f0:bb:04:6d:4f:6a:45:32:43:25:73:fa:cc:10:cd:eb:
5d:e1:df:0c:5f:e6:e4:fb:da:fa:2a:8f:cd:a8:7c:66:8d:19:
85:b8:f2:d5:a1:2c:4c:38:70:66:fb:55:0a:b3:2b:08:ab:b5:
18:d5:4e:1e:0e:f5:23:c9:1f:77:93:b8:26:1b:c7:8a:02:37:
12:e3:e9:9d:95:0e:46:99:c9:56:e8:11:32:c8:01:f6:8c:b4:
4b:17:3b:72:bd:7a:cb:41:39:59:a5:4c:2a:c6:99:61:de:01:
47:0c:94:07:ac:83:9f:d7:59:e4:3f:39:26:4e:f2:0c:ab:4f:
2c:73:e6:cf:18:a7:d5:9d:18:1b:56:f1:fb:7b:40:09:f4:ff:
cc:ce:fa:a0:15:f4:dc:ec:23:f6:c8:45:45:ad:37:32:e5:17:
c4:40:be:78:a9:13:81:f7:24:ea:33:1b:b4:3d:fa:07:be:88:
80:dc:68:81:a5:aa:23:f3:7c:49:33:51:42:ac:7b:84:57:0d:
86:ed:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org