Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/oChZY-AwNVdxAfzu_zkrIVZX__E.roa
File: oChZY-AwNVdxAfzu_zkrIVZX__E.roa (raw, json)
Hash identifier: 0zG1Wa/irvvzBKYfKp82pAZkdAQJ66gikvTLIADLaI8=
Subject key identifier: A0:28:59:63:E0:30:35:57:71:01:FC:EE:FF:39:2B:21:56:57:FF:F1
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 0191313E0AB6117E8F0BFFE6780FE41F2482
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/oChZY-AwNVdxAfzu_zkrIVZX__E.roa
Signing time: Thu 08 Aug 2024 09:07:15 +0000
ROA not before: Thu 08 Aug 2024 09:07:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 2001:3900::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 09 Aug 2024 13:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:3e:0a:b6:11:7e:8f:0b:ff:e6:78:0f:e4:1f:24:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Aug 8 09:07:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0285963e03035577101fceeff392b215657fff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:58:3c:4c:ba:a5:e9:e8:be:47:6f:6c:96:
f9:86:12:b2:c7:4c:cd:d2:94:d3:47:1a:da:b5:e9:
64:3d:d6:fa:a3:8d:65:3e:b1:39:ad:29:a2:99:63:
47:19:96:fa:c4:9a:7b:60:6f:a4:d9:c2:9f:fe:99:
28:b2:46:2b:87:56:2d:ac:c4:95:85:d1:81:c6:86:
ee:2d:0f:7b:64:ce:da:94:a6:d8:09:a7:9a:00:8c:
70:4c:d9:82:46:4d:0f:e6:f4:47:d5:22:51:87:d0:
c6:f4:6b:07:ef:65:d5:18:ae:d4:4c:5c:e7:d9:7f:
a1:38:b6:8d:cb:21:09:8e:84:5a:1d:48:5c:44:90:
c0:ee:88:26:5e:f8:8b:e5:1a:90:8f:25:bb:4a:af:
4c:59:52:26:37:28:1b:bd:fa:4f:2d:25:44:a5:43:
61:36:59:2e:ed:e5:de:68:5a:62:75:d8:f9:2c:1b:
8d:65:72:d7:57:fa:aa:b0:3e:ea:ca:73:65:db:f5:
a0:79:c1:10:4d:cc:a6:2b:b7:b2:82:2b:cc:e8:6b:
05:6a:e2:ed:71:95:76:5f:49:3f:85:94:e4:1d:c8:
24:bd:66:3f:12:3a:55:dd:3b:38:37:f9:26:d4:d6:
74:12:75:77:14:23:3d:ca:a4:58:f1:59:f7:bb:a3:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:28:59:63:E0:30:35:57:71:01:FC:EE:FF:39:2B:21:56:57:FF:F1
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/oChZY-AwNVdxAfzu_zkrIVZX__E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3900::/29
Signature Algorithm: sha256WithRSAEncryption
39:26:22:2a:84:a4:b6:e1:60:92:ba:92:7f:59:35:f2:f7:de:
c0:04:32:a2:15:11:7c:e2:c7:1e:d2:e7:f7:96:4d:37:42:48:
b9:2a:77:1f:98:d3:66:43:5c:55:eb:6d:2e:7d:88:49:ea:fa:
43:b0:ba:b7:41:9e:60:55:e2:46:20:4e:88:c5:23:11:ed:8e:
e4:1d:b6:f7:99:9e:ee:de:33:a1:31:83:0c:92:55:02:72:08:
08:03:21:57:b3:5a:87:fc:14:09:56:3a:57:66:26:8a:48:51:
04:32:04:c2:ef:ff:83:95:fe:73:29:05:7b:01:73:ee:37:39:
d1:5e:82:76:60:9f:02:c3:0b:d3:ed:61:c5:9d:f1:9e:4e:23:
17:fd:ec:bc:c9:b4:07:97:33:e3:24:13:60:42:9e:c8:45:e7:
6e:98:30:26:c4:cc:cf:5d:ef:4c:a9:89:03:73:a3:3f:b7:1a:
af:01:81:a0:4a:e7:f3:01:a4:d6:dc:ec:52:3f:cb:65:41:68:
7f:66:a2:89:85:cf:f9:e3:17:f2:2c:ec:74:84:26:ef:da:f2:
c2:07:11:56:90:d0:4c:d3:86:5e:38:19:a8:59:c5:e0:de:7b:
28:36:52:a8:28:8b:7d:f7:ef:72:d8:a8:32:85:00:a8:bd:8d:
e3:fe:19:45
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 9 16:17:45 2024 by rpki-client on console-fra.rpki-client.org