Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/_9Cai9ATdgg1TVqaR8aNnz9U9cw.roa
File: _9Cai9ATdgg1TVqaR8aNnz9U9cw.roa (raw, json)
Hash identifier: MrNKitr1ieUKNLGJ8QjISdG55D7H3lr2e42yjKKAJpg=
Subject key identifier: FF:D0:9A:8B:D0:13:76:08:35:4D:5A:9A:47:C6:8D:9F:3F:54:F5:CC
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 018DFA97CBB3C427FEB52FA1658BCEC43F25
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/_9Cai9ATdgg1TVqaR8aNnz9U9cw.roa
Signing time: Fri 01 Mar 2024 15:17:48 +0000
ROA not before: Fri 01 Mar 2024 15:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2a0c:2f07:666::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Mar 2024 17:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:97:cb:b3:c4:27:fe:b5:2f:a1:65:8b:ce:c4:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Mar 1 15:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffd09a8bd0137608354d5a9a47c68d9f3f54f5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:51:e1:ea:48:a0:31:e3:a0:e6:31:f9:d7:
5e:a6:8d:b3:80:5a:e0:bd:1d:5a:47:4b:1a:0e:32:
5a:27:95:c2:91:5b:f8:60:48:ea:25:d2:92:c6:46:
92:d1:6e:71:41:d3:06:1f:b3:3d:75:70:58:fc:96:
b7:31:2c:c7:c0:98:22:62:76:b8:43:68:2a:bf:6f:
01:ea:93:a7:6e:58:78:7d:52:d4:5e:15:fb:51:ec:
d2:b7:03:53:74:69:ed:16:67:57:63:85:60:0c:f3:
6f:64:9d:d8:da:e9:cc:c4:e3:c0:05:65:20:3c:af:
45:b5:58:45:f0:e7:b3:3e:1a:5a:8f:44:aa:f1:87:
58:c9:89:20:fc:b3:49:8a:9f:e4:60:da:80:e1:18:
af:14:16:30:56:30:39:43:24:3f:92:38:34:67:52:
04:21:d7:a9:6d:5b:9b:e9:3e:de:1d:fc:f2:67:03:
9b:57:60:ea:71:03:e9:83:1b:60:57:11:24:13:dc:
17:af:c0:5a:cd:ac:de:97:ae:90:db:7c:8d:d4:b6:
bd:b8:a4:56:32:03:33:f0:fb:d3:63:0b:46:06:f0:
07:1d:28:a0:65:5c:0a:09:ed:ea:4e:0c:23:a9:da:
85:d4:75:c8:e5:70:a9:db:eb:68:c6:53:44:72:88:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:9A:8B:D0:13:76:08:35:4D:5A:9A:47:C6:8D:9F:3F:54:F5:CC
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/_9Cai9ATdgg1TVqaR8aNnz9U9cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:2f07:666::/48
Signature Algorithm: sha256WithRSAEncryption
6a:75:20:aa:2b:30:79:cf:0c:7b:0e:98:02:a1:54:bf:96:57:
bb:15:5e:47:d6:ae:52:00:b7:cf:06:c6:09:08:8e:6c:c9:f1:
14:d4:41:ef:ec:2a:ca:8e:c6:4e:14:74:ef:d4:e5:40:b1:df:
09:0d:d1:e9:ee:be:a5:3e:0d:1d:41:b8:cc:ed:20:a1:19:dc:
ad:42:03:76:5b:0c:80:da:f2:58:5b:7f:e0:24:06:56:0b:9c:
14:d9:bb:a4:ee:16:05:77:c9:1e:7e:55:08:40:55:69:9f:8a:
ee:ab:50:0d:1d:e1:29:cf:dd:6f:30:22:d4:1d:c6:f0:ef:d7:
7c:6f:9a:e2:a4:ee:a0:52:46:01:90:ef:55:13:47:ca:b8:45:
67:6d:b6:2e:e6:5d:6a:f1:da:25:10:37:60:35:dd:27:9f:58:
0a:48:42:38:4f:4a:ac:aa:d0:0c:71:d8:25:43:99:6b:de:f7:
7e:66:50:9f:e0:b2:ba:63:6e:74:c2:8b:11:a7:18:a8:05:a8:
fb:7c:f8:a7:e8:ec:e3:31:34:14:d5:42:b9:1e:bb:ba:d9:3a:
63:33:8b:12:57:a1:af:3b:8e:fb:e0:9e:5c:62:77:1d:8c:c3:
46:b2:dc:b7:5b:3b:79:8c:93:0d:00:a8:f3:a4:98:93:a0:de:
1a:a8:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 00:12:43 2024 by rpki-client on console.sobornost.net