Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/PvIpjjxlnWledmsvPqPLmfCm1eM.roa
File: PvIpjjxlnWledmsvPqPLmfCm1eM.roa (raw, json)
Hash identifier: HVwYJKsFhB3Mv9tMWm2iTaObjf9/JySq4wG/Q/VL/LM=
Subject key identifier: 3E:F2:29:8E:3C:65:9D:69:5E:76:6B:2F:3E:A3:CB:99:F0:A6:D5:E3
Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial: 0192FE4B9DD480A22943FF930D9FAF1D78B4
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/PvIpjjxlnWledmsvPqPLmfCm1eM.roa
Signing time: Tue 05 Nov 2024 21:47:01 +0000
ROA not before: Tue 05 Nov 2024 21:47:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201342
IP address blocks: 2a03:24c0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Nov 2024 22:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fe:4b:9d:d4:80:a2:29:43:ff:93:0d:9f:af:1d:78:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Validity
Not Before: Nov 5 21:47:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ef2298e3c659d695e766b2f3ea3cb99f0a6d5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:7c:2a:48:cc:16:4f:dc:26:0e:92:cd:e2:
8a:4b:a0:f9:10:6f:ba:a8:fe:a5:00:4e:ac:fa:8e:
fb:60:37:44:cd:0d:dd:a4:90:43:cf:1b:4b:23:1a:
1a:63:54:42:dd:78:68:4b:5f:80:ea:c3:c6:cf:c3:
43:88:19:48:e5:76:73:ed:d0:a9:11:15:84:1c:31:
37:0c:3d:c5:4e:9c:6f:d2:26:a7:97:82:7c:64:09:
4a:8d:c8:61:2f:4d:2b:e0:e0:0d:a8:6e:41:f8:a1:
08:89:9e:13:d9:3d:7b:ff:5d:b4:a2:b5:2e:3e:a3:
60:3a:9c:e7:52:73:60:2c:54:33:fb:70:48:6a:e1:
ef:bc:23:ed:90:a6:95:00:10:84:d9:13:c5:d8:0b:
9c:37:af:93:a3:ec:bf:74:12:98:62:4a:8c:ba:27:
98:67:49:d9:93:fe:f1:f8:8d:68:33:61:02:04:60:
16:68:fa:97:4c:52:71:35:76:01:1a:e5:40:4b:7a:
fa:8b:6f:c2:48:f0:0b:e4:21:43:f7:76:a2:12:86:
4b:ea:a9:91:fb:3d:80:92:cc:14:a7:ba:0d:7b:1e:
ab:e7:6b:05:12:40:76:85:24:79:de:4e:89:b4:e1:
8f:e6:83:c6:bc:b1:04:e0:c9:87:39:a8:1c:1c:76:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F2:29:8E:3C:65:9D:69:5E:76:6B:2F:3E:A3:CB:99:F0:A6:D5:E3
X509v3 Authority Key Identifier:
keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/PvIpjjxlnWledmsvPqPLmfCm1eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:24c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
90:d1:95:b7:99:98:f6:30:6e:f6:48:7c:4d:41:2f:60:80:01:
22:f1:48:d7:77:e7:df:99:dc:da:56:87:66:ad:a3:1f:5a:10:
f9:89:11:be:1a:47:88:30:e2:1f:d0:1f:26:50:14:00:d4:4f:
5a:42:dc:a5:d9:f5:fa:7b:33:4a:f2:6b:36:a3:fe:f3:1f:49:
f8:68:bb:bf:bb:db:da:d0:87:dd:28:33:92:c5:27:4c:e5:72:
5c:6b:91:59:ed:71:cf:4f:27:11:1a:3a:47:e8:74:a0:01:29:
40:d8:c6:12:c7:a8:48:12:f9:ca:2f:7e:83:41:40:81:4c:13:
2e:c7:61:c3:e3:c7:62:54:f8:12:9a:ec:14:12:3a:5c:56:c0:
a4:9c:4a:94:72:f7:42:19:40:27:c1:e7:d5:75:b2:66:55:f0:
78:c6:35:68:19:60:7f:8c:66:30:5a:da:a7:0a:56:7a:18:b3:
09:c8:cb:37:ac:51:91:eb:df:8c:fe:2a:53:91:48:75:33:52:
e0:ae:c3:85:cd:6e:7c:f9:3c:2d:bd:4b:49:f3:bb:b6:91:35:
61:71:4d:87:45:03:97:1a:ba:73:3b:99:1c:4c:0c:d2:55:37:
ab:04:bb:37:4f:0f:56:1c:6a:d3:35:ab:ba:f8:8a:e9:c1:70:
41:bd:b6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:40 2025 by rpki-client