Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/I8a6LZuL0D9nII41h0Sms0sF27I.roa
File: I8a6LZuL0D9nII41h0Sms0sF27I.roa (raw, json)
Hash identifier: r+UD8SdbbyquSOItY1gSKLRbUIn+xPYXtgqWv7y/bVc=
Subject key identifier: 23:C6:BA:2D:9B:8B:D0:3F:67:20:8E:35:87:44:A6:B3:4B:05:DB:B2
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 0185727A1F56399F1FECF5C67FDEF2729B4A
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/I8a6LZuL0D9nII41h0Sms0sF27I.roa
Signing time: Mon 02 Jan 2023 12:34:43 +0000
ROA not before: Mon 02 Jan 2023 12:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210887
IP address blocks: 2001:67c:864::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:1f:56:39:9f:1f:ec:f5:c6:7f:de:f2:72:9b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Jan 2 12:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23c6ba2d9b8bd03f67208e358744a6b34b05dbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:74:6c:9a:c2:c9:d4:23:0a:ec:e1:b4:fd:
bd:d9:b1:e0:f2:50:0e:9f:7a:52:0b:3e:d3:d8:d8:
fd:46:f5:61:cf:17:1c:51:e9:eb:80:53:34:bf:be:
49:80:60:9f:34:35:84:3d:05:cd:1a:98:55:17:ca:
5b:f4:2a:47:0d:e0:02:18:b3:60:bc:ae:43:2e:29:
91:0f:c7:b9:d3:62:6e:82:d8:79:35:6c:48:2e:03:
39:af:c7:36:a6:36:06:79:a1:61:d4:f3:06:a2:db:
fd:83:7b:d6:22:c7:a1:0e:5c:d4:42:ee:c4:88:63:
82:db:ee:76:e9:59:27:05:ae:b9:3d:32:ae:b3:00:
f9:95:61:70:a3:b8:f7:7e:9e:5b:e0:a6:0f:59:67:
b1:ea:dd:89:b9:2e:96:e6:35:c8:b1:96:72:6c:11:
30:bd:8e:4d:37:1b:a2:6e:0c:02:30:58:55:6e:30:
35:51:46:b3:c0:17:7f:c2:06:35:14:3d:73:50:ee:
ba:06:b4:3b:d6:0b:e7:b4:10:1d:7f:16:c7:36:fd:
ca:ae:07:15:07:44:bc:57:e3:1d:51:79:9b:4d:ff:
83:92:19:9a:8a:ee:b0:b9:12:44:6a:c9:d8:2a:89:
1a:fb:ae:9b:ca:9a:61:87:62:19:a5:b7:77:5d:96:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C6:BA:2D:9B:8B:D0:3F:67:20:8E:35:87:44:A6:B3:4B:05:DB:B2
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/I8a6LZuL0D9nII41h0Sms0sF27I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:864::/48
Signature Algorithm: sha256WithRSAEncryption
5a:7a:97:7f:42:23:9c:b6:02:55:40:7e:b6:63:eb:a7:45:6a:
7b:4f:27:56:b2:d7:94:0f:7f:2d:0f:12:d9:7e:af:bd:f9:11:
d3:db:fc:86:1d:7b:10:e5:53:d7:9e:d9:21:b0:a0:4e:5b:3c:
d7:40:f1:39:46:4b:b6:f1:74:4b:31:91:ba:81:17:a0:37:39:
a6:a1:d0:76:07:7e:d3:13:c3:95:3a:04:dc:4e:75:8c:b5:9d:
66:da:1a:3e:6c:01:bb:e0:3d:1a:db:fb:09:ff:22:a0:9e:37:
3e:93:3b:a3:46:98:a3:30:2b:bd:27:07:ca:d8:17:d8:9e:1a:
e8:35:d5:57:8f:12:8b:c0:07:92:dd:27:de:6a:9e:e2:75:19:
e7:f7:be:78:e4:c3:07:ac:98:25:cf:24:6e:29:5a:56:37:3a:
d3:3d:28:fb:9b:eb:b7:4f:8a:dc:87:bc:bd:ee:40:d8:9b:cf:
52:bf:f8:f2:73:ac:0a:66:cd:ae:89:f4:00:f0:da:9e:05:2b:
07:5c:90:62:bc:23:8c:1e:92:1a:f3:d8:7e:70:43:91:be:f0:
ab:c0:e2:3b:bf:68:66:31:5f:c1:b6:e4:85:50:f7:c0:7b:f2:
5f:f9:e2:63:33:93:dc:e5:d7:04:c1:f6:fb:e6:9f:26:62:06:
66:86:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:03 2024 by rpki-client on console-fra.rpki-client.org