Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/Xq1Fa0cTyzRmuBSM1EP_rjiwbuA.roa
File: Xq1Fa0cTyzRmuBSM1EP_rjiwbuA.roa (raw, json)
Hash identifier: hhNk1GgCMhPjLlFvtBInPvPZEgwSWLQ6PPnhubLMvtI=
Subject key identifier: 5E:AD:45:6B:47:13:CB:34:66:B8:14:8C:D4:43:FF:AE:38:B0:6E:E0
Certificate issuer: /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Certificate serial: 018B0E51314479EB5D0B4675E0A1CB33D921
Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/Xq1Fa0cTyzRmuBSM1EP_rjiwbuA.roa
Signing time: Sun 08 Oct 2023 08:04:43 +0000
ROA not before: Sun 08 Oct 2023 08:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216428
IP address blocks: 2001:67c:11e4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0e:51:31:44:79:eb:5d:0b:46:75:e0:a1:cb:33:d9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Validity
Not Before: Oct 8 08:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ead456b4713cb3466b8148cd443ffae38b06ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:ba:da:e6:8c:48:b9:03:08:44:c1:c9:40:
27:b0:6c:43:cd:ed:94:41:2a:b1:9f:4a:0c:ce:2e:
4e:4a:d0:db:5f:74:9d:f2:8e:17:8d:8a:1d:04:27:
26:8d:76:e2:08:f0:e2:0b:79:a7:78:d0:d6:7f:a8:
2e:9a:f6:bb:7d:21:48:2b:ac:1d:cf:bb:2d:ef:ec:
06:5f:70:ef:a1:cc:75:14:df:3a:52:f5:b0:df:0e:
01:09:92:f4:9d:be:b4:97:b8:05:42:1c:84:f9:15:
bb:61:08:13:e6:ae:79:50:97:84:e6:a0:09:de:18:
7e:93:ba:53:96:d6:73:6a:d0:c2:bf:3f:e9:cd:39:
fd:28:3c:ea:2d:4c:8c:63:7b:94:0f:82:0b:6b:a0:
18:27:09:1f:41:e6:47:aa:7a:ee:8d:a5:06:8f:a1:
07:f6:5d:4c:8d:52:bc:08:49:65:68:fe:c2:15:88:
60:d9:76:49:58:30:09:1f:2e:89:9c:93:00:2f:4b:
d4:41:65:48:f8:88:43:5c:b5:b5:fd:b8:16:26:0e:
8b:d1:83:a6:0f:64:1e:67:c3:fc:54:a6:b2:bf:f1:
76:44:6d:f4:a0:2d:42:59:d7:dd:74:00:a2:45:40:
4d:87:5c:a7:1b:ff:75:86:8f:e0:a9:f3:4e:db:db:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:45:6B:47:13:CB:34:66:B8:14:8C:D4:43:FF:AE:38:B0:6E:E0
X509v3 Authority Key Identifier:
keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/Xq1Fa0cTyzRmuBSM1EP_rjiwbuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:11e4::/48
Signature Algorithm: sha256WithRSAEncryption
76:d5:ab:b5:63:5a:51:4e:0a:32:33:c3:07:ef:6e:a7:ee:3a:
91:fa:e8:ce:2b:b7:47:a9:a3:be:b2:2f:80:69:af:4b:9a:0d:
9b:b1:bc:bd:90:a8:da:1e:d3:46:a6:8d:ba:89:f1:cf:0e:99:
48:03:0d:87:6a:82:c3:7d:8c:de:25:37:f9:74:27:3a:3f:f1:
2a:28:05:e2:f1:0a:4f:95:7d:a4:a1:d8:cf:2a:34:a7:06:09:
cb:f5:d0:54:ca:52:75:93:bb:1d:87:73:08:fa:1c:b4:52:9a:
cb:7f:cf:96:3e:53:1d:94:f5:b6:bf:a4:b6:65:e5:40:b6:92:
8e:9b:e2:32:32:25:59:03:50:01:27:94:d2:6b:5d:58:aa:5e:
60:5e:8d:4e:10:b0:3d:f9:bd:1a:2a:67:b2:1a:97:58:5a:21:
9f:6b:be:e6:b5:33:12:fc:dc:97:61:77:f4:cf:7e:02:a0:b4:
7c:5c:d9:c2:c4:dd:b4:3d:8a:d2:c3:97:40:73:c1:5d:e1:29:
9f:00:d8:9e:ca:35:1b:a6:21:49:c9:7b:47:f2:fb:a8:fa:63:
a0:c3:f2:3b:f7:ac:43:8a:55:fa:c7:73:ae:1c:d0:48:9e:06:
1c:af:2c:aa:39:d6:c9:b8:49:0b:e3:dd:97:b3:89:4a:23:42:
15:74:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:40 2024 by rpki-client on console-fra.rpki-client.org