Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/98GPVS7x1kalqrgImA7SBB6A2Oc.roa
File: 98GPVS7x1kalqrgImA7SBB6A2Oc.roa (raw, json)
Hash identifier: EEh7Dodc6jxIHAcfgaCLi88PaxHJH3rI6kZtSGeCTmQ=
Subject key identifier: F7:C1:8F:55:2E:F1:D6:46:A5:AA:B8:08:98:0E:D2:04:1E:80:D8:E7
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 018570D51BF2B36F4B8EC54B0066CF4F2E00
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/98GPVS7x1kalqrgImA7SBB6A2Oc.roa
Signing time: Mon 02 Jan 2023 04:54:52 +0000
ROA not before: Mon 02 Jan 2023 04:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7922
IP address blocks: 2a0c:93c0:8002::/48 maxlen: 48
2a0c:93c0:c002::/48 maxlen: 48
2a0c:93c0:8000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:1b:f2:b3:6f:4b:8e:c5:4b:00:66:cf:4f:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jan 2 04:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7c18f552ef1d646a5aab808980ed2041e80d8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:53:02:31:39:ac:9c:bd:96:aa:49:e7:90:
7d:42:47:c1:11:43:23:e9:83:01:33:07:a5:c5:81:
43:f4:2d:d0:59:ae:d9:5f:53:2a:ec:70:56:58:6f:
67:43:27:39:04:d3:72:9d:7a:58:79:e9:d3:3a:2b:
89:0a:4c:8c:f1:7c:31:b4:3b:e8:45:ab:fb:42:1c:
39:0c:c6:6a:fb:b9:7e:39:29:6f:90:3b:41:4e:11:
92:bb:89:73:f3:31:d8:d1:87:da:4e:79:5d:e1:0c:
ee:b5:24:2c:fa:be:d8:cc:c2:fe:d3:8b:17:5a:ed:
b6:a7:44:fb:40:c5:31:ad:75:da:48:fd:f4:e6:30:
25:2a:3d:d7:b0:60:92:18:f2:80:f4:f4:e7:de:17:
69:48:af:d1:c5:f3:36:90:c3:94:19:75:c5:86:52:
a0:d1:af:8d:0a:63:01:e7:87:86:a7:10:40:d5:fd:
a8:60:58:f9:fc:10:83:12:98:6d:e9:38:a3:c6:00:
04:9c:35:79:29:48:bb:b2:86:28:49:73:6f:8d:3d:
17:92:2b:a5:f7:8f:a5:eb:98:82:03:83:fe:54:0d:
75:9e:43:1d:b7:7a:69:f9:91:ba:b8:e2:86:47:d7:
1a:90:95:42:37:0f:90:f0:90:11:cc:a3:29:71:19:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C1:8F:55:2E:F1:D6:46:A5:AA:B8:08:98:0E:D2:04:1E:80:D8:E7
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/98GPVS7x1kalqrgImA7SBB6A2Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:93c0:8000::/48
2a0c:93c0:8002::/48
2a0c:93c0:c002::/48
Signature Algorithm: sha256WithRSAEncryption
0f:91:2e:66:85:f7:1b:c1:0b:0b:cb:27:c1:d4:63:ff:db:c0:
54:a3:04:71:81:4b:3c:0a:d7:e2:03:75:f6:b5:44:d9:bc:d2:
4f:2a:e5:c4:ec:0f:0a:5a:ae:e0:91:cb:39:08:a1:67:e9:16:
e8:63:41:28:7b:cb:54:20:14:3e:db:39:e6:dc:9e:36:e9:90:
a2:73:02:f1:57:79:1c:b9:f2:c7:37:33:ed:a0:45:e9:e9:3c:
00:81:d6:1c:44:cb:7f:4b:a1:ef:48:d7:e6:0e:b5:36:e1:30:
78:33:d4:d2:73:26:2a:d7:91:4b:27:b5:53:5b:ff:b4:2d:ad:
7b:15:54:ad:1e:2d:5f:f8:3b:12:38:d7:a7:9b:06:73:3a:ee:
14:61:a6:cc:16:ad:fa:20:4d:32:31:7d:3c:62:c7:88:54:57:
d4:fb:0c:e1:5b:af:79:e1:63:96:35:fe:e0:6e:fb:be:81:d0:
37:8e:f5:3c:10:94:a7:5f:04:3e:88:29:d3:e9:7c:b9:46:14:
45:22:15:fd:fd:97:7f:ee:d0:ab:46:30:02:44:c7:3a:e0:2c:
8a:34:89:21:3d:d1:88:18:87:87:bd:0c:58:51:c2:00:f4:b5:
33:3a:bd:2a:83:e0:bf:cc:fa:26:b8:9a:a0:4d:20:5e:fa:25:
73:e3:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org