Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/71RBf5IJlTlo0Ov0E7nFC64KKug.roa
File: 71RBf5IJlTlo0Ov0E7nFC64KKug.roa (raw, json)
Hash identifier: NdWbYGw9RAWtcg8n/nT4ysQrfvYAbkBMUSd9zkqprms=
Subject key identifier: EF:54:41:7F:92:09:95:39:68:D0:EB:F4:13:B9:C5:0B:AE:0A:2A:E8
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01856C6F0B08D3EA47A58AF902E1C8132715
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/71RBf5IJlTlo0Ov0E7nFC64KKug.roa
Signing time: Sun 01 Jan 2023 08:24:54 +0000
ROA not before: Sun 01 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 141.42.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:0b:08:d3:ea:47:a5:8a:f9:02:e1:c8:13:27:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Jan 1 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef54417f9209953968d0ebf413b9c50bae0a2ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:6d:a5:f4:ba:62:fa:bb:61:60:ba:41:16:
18:71:b5:0c:62:a7:17:82:a6:2b:34:dc:2a:09:53:
8a:ef:ac:df:96:ba:ab:6a:57:0e:42:ac:ef:e1:df:
57:89:4b:70:bb:cb:c5:28:c5:11:c3:df:2e:9b:df:
df:dc:d4:e0:51:a9:a1:61:fe:bd:c5:01:65:db:67:
c7:f7:52:ac:2d:55:c7:d9:ac:e0:dd:91:50:4c:87:
c5:70:e4:5a:b1:73:3d:71:17:7e:3b:10:19:34:29:
2f:89:06:fd:8a:9c:d7:e8:76:76:9e:5c:94:0f:51:
ac:9d:fa:93:2c:3b:e7:c4:65:86:f2:7e:f2:3c:f3:
57:cb:fc:47:3e:7f:a1:81:7d:6a:f8:68:f8:bd:e6:
2b:39:e0:b6:4a:f9:5b:7a:21:52:91:51:11:29:49:
d3:da:2c:b3:0b:5f:8e:2a:c1:b0:88:19:a5:e1:52:
07:3c:60:11:8b:c6:69:08:3b:04:0e:40:ed:05:13:
cb:d6:fb:00:2e:9b:80:2f:5a:69:a6:38:aa:f1:27:
5d:f3:39:44:98:fb:20:eb:90:1c:b5:e1:76:15:22:
00:6b:b9:84:39:f3:a7:07:36:74:15:88:f2:9e:3c:
b2:60:ac:7e:39:19:aa:92:d5:29:e9:48:29:97:cb:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:41:7F:92:09:95:39:68:D0:EB:F4:13:B9:C5:0B:AE:0A:2A:E8
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/71RBf5IJlTlo0Ov0E7nFC64KKug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.42.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:8c:3a:9d:4c:d4:e5:e9:9b:34:5c:ab:fe:16:06:7b:bc:56:
bc:01:25:58:40:b7:8b:4b:68:38:f1:bc:a1:8f:35:a3:f8:9e:
9a:f4:eb:a4:f2:e0:37:f6:f8:7a:bd:1d:3f:42:55:9f:65:ce:
b9:6b:41:98:66:5d:de:b4:f3:e9:bb:f1:f3:36:73:e4:b0:35:
78:cc:79:39:03:e1:0b:d5:eb:79:08:c9:ea:f7:f4:ac:b0:71:
12:11:c4:5d:45:e1:4a:c2:75:78:b3:b6:61:4c:bb:8c:33:ef:
a7:54:0b:58:fc:65:43:bd:5d:93:d3:f7:c3:28:29:b8:13:b6:
b3:03:f5:f0:fc:21:40:e0:2f:86:92:78:b0:57:b6:1c:ce:03:
2e:3a:03:31:8f:04:83:b3:69:07:9a:b0:54:a3:54:eb:95:ee:
1d:50:6b:ef:75:e6:67:7f:c9:ef:45:de:02:60:16:56:d4:90:
f7:3b:00:e7:46:b0:03:ba:06:e6:d6:8b:6b:61:4a:53:31:bc:
bf:c9:91:a0:fa:4f:fd:f7:d6:11:84:4c:e3:65:f6:08:e6:f4:
83:f2:23:b1:5c:78:a0:34:be:59:d6:38:59:41:0d:09:8e:b7:
24:f9:1f:6f:89:ec:f9:b2:bd:75:cf:e8:29:3f:bd:47:16:ca:
45:c9:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:42 2024 by rpki-client on console-ams.rpki-client.org