Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3olUTy4OHmUocWHvbpOtVtZSNwE.roa
File: 3olUTy4OHmUocWHvbpOtVtZSNwE.roa (raw, json)
Hash identifier: p6yz7It4Cq7rHYM6/MeSySuI5MfK7m1CzaqaXSpuUoU=
Subject key identifier: DE:89:54:4F:2E:0E:1E:65:28:71:61:EF:6E:93:AD:56:D6:52:37:01
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018E92826DF527C91F6569C2548410ED25F8
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3olUTy4OHmUocWHvbpOtVtZSNwE.roa
Signing time: Sun 31 Mar 2024 03:16:45 +0000
ROA not before: Sun 31 Mar 2024 03:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202984
IP address blocks: 2a10:4102::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 26 Apr 2024 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:92:82:6d:f5:27:c9:1f:65:69:c2:54:84:10:ed:25:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 31 03:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de89544f2e0e1e65287161ef6e93ad56d6523701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:19:ca:d3:78:dc:6d:64:85:b7:5e:78:8f:
f0:c8:60:e5:55:c7:45:af:ee:7a:1c:d6:d3:f7:bf:
a5:4c:57:64:73:69:ff:b7:cd:f1:80:ea:3b:99:bf:
22:66:5a:50:04:90:30:17:db:5f:7b:3d:85:4a:f5:
7b:31:79:dc:b6:1f:f4:ee:6d:1d:bd:91:45:d5:02:
31:9a:8d:56:68:5e:74:31:29:ee:43:fd:c0:37:ab:
82:8b:5f:19:59:fd:14:16:58:59:cb:08:86:d4:39:
68:3e:a8:2b:42:e9:e9:c1:27:f3:89:81:bb:aa:35:
88:b1:86:66:b4:bb:54:37:af:3f:fe:ce:05:02:95:
c2:b8:34:46:75:07:82:c9:44:3f:c5:9e:c3:45:d9:
9a:eb:62:33:f2:32:0a:13:06:da:4d:e5:49:55:ad:
8f:19:7e:54:b1:47:a8:6a:b5:ca:00:3b:8f:f7:b3:
f7:45:da:4f:75:fc:44:25:96:a5:0e:03:fa:15:14:
5e:34:62:ee:56:13:8e:86:76:ee:b5:bc:06:ea:b3:
cb:1e:22:0f:14:d1:67:b5:f5:9f:da:47:ec:9c:6b:
22:76:93:5a:02:f5:d6:4c:e8:7a:4b:e7:35:ef:0f:
86:9d:e6:99:b6:11:29:4b:5c:4a:70:45:0d:a9:a2:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:54:4F:2E:0E:1E:65:28:71:61:EF:6E:93:AD:56:D6:52:37:01
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3olUTy4OHmUocWHvbpOtVtZSNwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4102::/32
Signature Algorithm: sha256WithRSAEncryption
0d:3e:8e:eb:b0:fc:d1:e0:c3:74:5d:b6:6f:0e:aa:db:5b:1e:
e6:bc:4c:cd:ab:30:2a:f0:75:64:cf:ec:d3:3f:fc:43:28:0c:
c8:b3:1e:02:d5:87:c4:96:b2:04:66:67:af:f2:50:33:ff:29:
cf:a8:e5:d2:77:f2:44:03:33:27:5b:7b:81:9a:da:00:e8:0d:
b4:f4:f9:56:12:1f:61:e8:02:79:ed:c0:15:4a:99:6b:ef:47:
a4:de:01:b1:56:a2:c8:01:f8:8a:8a:12:13:47:5c:39:15:5b:
3c:54:09:c3:eb:8a:23:8e:81:49:7e:1f:f3:5b:70:f5:61:be:
f1:7a:de:3e:b7:8a:df:37:4c:26:1e:de:e3:3c:62:d0:8b:5b:
f3:46:e9:3a:19:6d:29:8a:61:e7:c2:72:d7:d1:8a:a1:e4:e8:
75:9b:5c:8f:13:1c:b3:82:85:b7:e9:a3:de:cb:df:72:05:78:
78:63:06:2f:5a:7d:a8:5c:b3:05:28:46:ad:79:1f:13:09:d2:
2f:b0:5b:ca:e5:5a:ba:76:26:33:17:fb:89:30:80:5e:44:b3:
d9:14:cb:16:c9:d5:0c:66:f8:d8:a1:a3:7a:29:3d:49:ee:f7:
cf:cb:7d:2d:e5:b5:51:c7:3b:b6:c9:5d:25:20:bc:cf:90:c9:
3c:51:b8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:01 2024 by rpki-client on console-fra.rpki-client.org