Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/jEFy5xQTxGlzsJhw6NO6UOjQ_9Q.roa
File: jEFy5xQTxGlzsJhw6NO6UOjQ_9Q.roa (raw, json)
Hash identifier: b7CasG0T8emBC/QSn4gidEJxV5hpkQbnweZp69dENrY=
Subject key identifier: 8C:41:72:E7:14:13:C4:69:73:B0:98:70:E8:D3:BA:50:E8:D0:FF:D4
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 0185720C6AF9901F2C4BC6C958F0E12E5A39
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/jEFy5xQTxGlzsJhw6NO6UOjQ_9Q.roa
Signing time: Mon 02 Jan 2023 10:34:54 +0000
ROA not before: Mon 02 Jan 2023 10:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206402
IP address blocks: 2001:67c:990::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:6a:f9:90:1f:2c:4b:c6:c9:58:f0:e1:2e:5a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Jan 2 10:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c4172e71413c46973b09870e8d3ba50e8d0ffd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:07:35:08:26:12:69:2b:f9:7d:19:95:a2:
e1:7c:48:63:14:e1:c1:0b:01:f0:05:91:8e:8e:2c:
0b:5e:a9:87:11:db:90:94:f1:ff:7b:e2:12:3f:f7:
e0:67:74:2b:08:23:9f:58:0e:34:a4:dd:e7:55:1e:
01:9b:68:49:e7:01:cc:f1:5f:dd:3e:08:80:c0:11:
a2:09:34:9e:23:4d:9b:5a:e0:11:45:8c:9f:90:f4:
de:8d:37:c7:ef:4e:dd:50:b8:7f:be:e7:7d:09:c8:
ee:e2:03:f2:07:2a:12:09:60:9a:b6:5c:01:d9:cf:
97:8a:23:1d:82:fd:1f:40:c0:f2:aa:3f:ab:5e:49:
0f:97:98:b1:c7:9d:de:cf:24:fa:ff:e6:4f:bd:73:
71:5e:1b:7e:9e:e2:3e:c6:65:82:cc:ba:8d:c4:81:
cd:f9:3e:c3:84:f6:50:14:6e:b0:46:a5:d4:5a:c3:
de:aa:8f:5c:ce:d8:ec:4b:94:5d:ff:2f:86:b3:b5:
96:b4:1c:f0:ea:22:aa:57:a4:e4:4d:ad:c7:b4:55:
32:92:64:fd:d6:43:c6:df:56:da:b7:57:95:f6:56:
fd:74:75:c2:66:55:e8:6b:83:a7:c1:7f:38:d2:6e:
ee:4c:c0:4b:9b:8e:c4:0d:a9:c1:0c:a0:51:83:79:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:41:72:E7:14:13:C4:69:73:B0:98:70:E8:D3:BA:50:E8:D0:FF:D4
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/jEFy5xQTxGlzsJhw6NO6UOjQ_9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:990::/48
Signature Algorithm: sha256WithRSAEncryption
7f:9b:5b:15:b7:c7:53:9f:da:e6:61:d7:ed:34:b3:d0:26:ff:
fa:f8:03:aa:8b:81:f0:99:05:cf:98:b6:a2:48:37:08:94:4b:
52:05:9a:38:77:56:11:a8:08:fe:70:e3:f6:15:68:a4:0d:9c:
78:3b:8b:0b:f6:27:95:d2:da:44:2b:05:62:fd:cb:02:4e:2e:
0b:89:e0:e5:22:d4:fe:34:76:36:39:86:76:fa:38:64:f4:54:
62:05:65:35:0e:6e:a2:d6:e2:c0:20:cc:36:b3:aa:a8:78:de:
a8:a7:c9:ee:e6:1f:d2:3b:45:97:95:c4:9a:4b:b3:d3:5c:e8:
e5:25:de:8c:49:f5:45:1f:cf:1f:19:42:bd:9b:08:c2:ef:8d:
fa:55:89:85:aa:78:e3:9d:48:67:25:f0:9b:e8:13:6a:9f:6d:
7d:7c:37:05:bf:63:57:81:4f:b4:e2:81:cc:7c:a0:bc:0b:fc:
5e:6a:08:36:51:b5:6f:12:16:1c:70:e3:01:40:f6:d8:f1:bf:
99:19:44:7e:2a:aa:68:ea:94:63:ea:0d:c6:b1:14:bf:da:26:
a9:f4:ea:55:fd:55:79:c5:7c:8a:ff:0f:09:c2:1e:e5:9f:ad:
44:e0:44:3b:7e:98:1e:42:f7:58:30:2d:c0:23:5d:b4:dc:13:
bc:a6:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:15 2024 by rpki-client on console-fra.rpki-client.org