Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/6-WBPpT6XdBAqFnhi9XRplRZqwQ.roa
File: 6-WBPpT6XdBAqFnhi9XRplRZqwQ.roa (raw, json)
Hash identifier: okEsVm1Sc+LDMmt6zUBNgjfBtjk/K6MLS9coRRFFaRI=
Subject key identifier: EB:E5:81:3E:94:FA:5D:D0:40:A8:59:E1:8B:D5:D1:A6:54:59:AB:04
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 018571D7B7BD3F4CF5EE4B9A17B230EFAC1E
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/6-WBPpT6XdBAqFnhi9XRplRZqwQ.roa
Signing time: Mon 02 Jan 2023 09:37:20 +0000
ROA not before: Mon 02 Jan 2023 09:37:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43193
IP address blocks: 2a02:1140:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:b7:bd:3f:4c:f5:ee:4b:9a:17:b2:30:ef:ac:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jan 2 09:37:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebe5813e94fa5dd040a859e18bd5d1a65459ab04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:37:70:ab:b5:09:46:f6:da:d8:7f:34:9f:
aa:90:3a:c9:cb:be:2e:1b:56:70:c3:69:75:84:87:
3b:8d:fc:af:5a:d5:69:54:9c:f5:30:f8:ab:ec:a9:
9e:79:ae:16:e9:95:c4:40:46:c5:a4:f5:7c:1a:80:
3d:9a:dc:90:8e:3c:84:62:75:79:26:f0:8f:91:3b:
21:68:31:35:dc:26:ac:70:09:d2:5d:bb:76:1e:9e:
4c:88:20:3e:40:09:a4:a5:9f:5e:0f:cc:86:d0:32:
25:cf:20:7c:47:f4:1c:94:5b:de:43:83:8c:82:3b:
fb:9e:79:a3:fa:3a:b7:54:1e:42:9b:f4:fe:f0:2e:
06:a9:35:79:d6:5f:5c:26:fa:05:1d:04:4c:a6:00:
2d:3b:ca:1e:af:5f:20:3d:34:80:97:bd:fe:29:29:
a5:b6:64:a6:38:9b:0b:0c:24:0b:b6:2b:1b:3e:d0:
03:4f:54:7c:be:23:73:12:f8:e9:ac:76:7c:c8:8f:
02:32:2a:20:28:6d:18:67:59:f9:89:f0:13:44:bc:
b1:5b:71:08:7c:b7:73:b6:0b:f6:ed:b4:7d:67:70:
93:a6:e7:8d:e5:53:1e:24:e7:69:7e:16:b4:60:3e:
15:ba:39:00:6a:ac:ce:46:7d:19:77:d3:4e:4a:e5:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E5:81:3E:94:FA:5D:D0:40:A8:59:E1:8B:D5:D1:A6:54:59:AB:04
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/6-WBPpT6XdBAqFnhi9XRplRZqwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:1140:100::/40
Signature Algorithm: sha256WithRSAEncryption
c9:c3:bc:64:c6:7d:05:b7:1f:93:c3:fd:f6:9c:86:db:e3:da:
25:bb:21:62:a2:27:73:88:9b:1f:dd:f6:ba:76:ac:7f:c8:2c:
0f:97:c4:cd:57:56:6d:95:c7:0a:2c:dd:bc:2c:cb:35:f2:59:
6f:a6:6c:0b:0f:8c:48:a0:dd:62:06:a4:e8:a7:a5:31:3e:35:
ee:15:c7:ed:b1:92:79:53:9a:6a:b8:55:f9:2d:28:b5:58:ce:
ab:8f:db:cc:d8:05:b3:73:f5:9a:5d:fb:9b:11:4b:cf:c6:c8:
5d:bd:87:94:be:e2:6c:e8:fd:25:13:f1:18:30:08:7b:ea:16:
86:2e:18:f1:5f:34:cb:97:b6:b8:37:b2:f2:25:70:21:7a:a3:
91:03:d1:ec:19:ec:d7:f9:0f:7f:20:9d:22:4d:ff:f5:7f:d3:
5b:66:27:d7:63:39:65:c2:61:de:80:09:79:ce:0a:e3:db:c5:
88:95:5b:db:0a:82:18:29:08:9d:9b:c0:75:02:66:16:d8:b8:
ea:db:43:ba:29:63:b8:4c:1d:a2:d0:18:28:99:00:71:48:ac:
85:bc:34:91:a1:37:fc:c0:52:54:37:e6:ac:d9:54:60:b4:a2:
ef:29:d2:67:72:61:81:22:37:b7:6e:4c:d5:1a:3c:f3:5a:04:
78:09:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:30 2024 by rpki-client on console-ams.rpki-client.org