Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/PoljgrRWDI9uX95XTgYRIs7RcHk.roa
File: PoljgrRWDI9uX95XTgYRIs7RcHk.roa (raw, json)
Hash identifier: dLWYkd1o+qdpj3wl+I7B2Xr6i9LqGtcyuAd8GB7q+MQ=
Subject key identifier: 3E:89:63:82:B4:56:0C:8F:6E:5F:DE:57:4E:06:11:22:CE:D1:70:79
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 01856CCAF0394CAF69C752F624463B35BA8A
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/PoljgrRWDI9uX95XTgYRIs7RcHk.roa
Signing time: Sun 01 Jan 2023 10:05:17 +0000
ROA not before: Sun 01 Jan 2023 10:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212834
IP address blocks: 2001:678:de8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f0:39:4c:af:69:c7:52:f6:24:46:3b:35:ba:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Jan 1 10:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e896382b4560c8f6e5fde574e061122ced17079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:c9:5d:4f:27:fa:65:43:a2:21:15:07:9b:
11:c9:76:e9:c2:66:e3:ed:eb:72:00:0a:20:9d:98:
e8:dc:c5:2a:6f:69:cc:7d:86:16:9b:16:d2:d0:f1:
18:ad:86:61:9e:c9:96:88:6e:8b:98:0a:49:45:95:
82:bb:70:fb:0d:c6:b1:3a:b3:18:38:3c:71:cb:d1:
bb:ae:7c:76:37:7c:70:f1:78:4a:40:90:ca:cf:a8:
07:71:2e:d5:1a:cb:e1:73:f1:10:ab:1a:fc:9d:f0:
1b:90:db:51:57:fe:aa:4d:79:1e:b9:f1:c8:40:fe:
26:03:d0:69:e1:fa:43:25:49:78:01:ef:e3:32:2f:
a8:d4:8e:4b:60:2e:8c:da:ab:2d:86:dd:3d:06:cd:
87:8c:84:e3:b9:77:85:07:85:00:35:29:d7:7c:b6:
81:a7:a6:6d:86:56:dc:cc:18:89:6a:cd:e8:a6:b1:
d5:19:57:d4:68:93:69:6f:c5:aa:94:1f:64:07:b3:
8c:35:82:41:12:8d:a1:62:eb:b4:41:52:9d:11:7b:
42:78:35:2f:53:83:39:d7:ce:8e:a4:35:e7:eb:56:
5d:ab:00:6f:95:2c:02:5f:39:74:25:3e:18:ef:0b:
be:08:7a:73:fc:65:a1:b5:f5:cd:45:e6:ec:6d:6d:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:89:63:82:B4:56:0C:8F:6E:5F:DE:57:4E:06:11:22:CE:D1:70:79
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/PoljgrRWDI9uX95XTgYRIs7RcHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:de8::/48
Signature Algorithm: sha256WithRSAEncryption
84:77:97:52:6c:3f:70:bf:d2:dd:50:ee:4d:00:8e:d9:43:0b:
5c:34:56:66:22:15:24:20:20:ca:6b:5e:d4:82:cc:2d:73:a5:
98:1b:f3:68:bb:1d:b4:8e:18:d0:36:ef:e6:26:cd:31:68:85:
8f:6c:99:2f:da:b1:ed:24:7f:9c:56:49:90:9b:6e:de:d7:9a:
41:13:cd:8b:ae:28:a0:5a:20:38:22:6b:86:6d:22:32:e0:3c:
52:18:56:d9:ed:85:76:75:ee:b8:0c:77:14:0f:1f:73:5b:af:
e5:36:be:43:47:0c:39:dd:02:82:d0:4e:f5:f7:a7:4d:ba:95:
a6:d8:33:55:86:dd:69:70:0c:c0:b5:0e:eb:fe:1a:d3:08:c6:
49:c2:74:49:f3:16:48:f6:3f:6e:75:93:91:98:9e:03:90:1d:
20:24:f5:40:b0:6b:86:02:15:d6:f0:28:25:76:28:b1:27:aa:
f3:81:82:ef:2e:04:1c:d3:a6:7f:67:03:a0:fc:7e:e0:db:09:
77:59:fc:a5:d8:4d:d2:41:05:44:8e:36:d4:e5:8e:07:a5:c4:
ef:84:ba:b0:d7:5e:27:30:40:87:40:39:b3:dc:fc:b7:a0:90:
0b:c0:0c:38:98:e3:0d:21:8f:2e:4b:8a:ea:b6:dc:46:21:2f:
0e:fa:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:45 2024 by rpki-client on console-fra.rpki-client.org