Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/8IYRG8qXItcp19Bg_ow91w0w0Qg.roa
File: 8IYRG8qXItcp19Bg_ow91w0w0Qg.roa (raw, json)
Hash identifier: xnlIr6CEjpUyKsbMk4336PLULNionkJngBe2bWUQpcc=
Subject key identifier: F0:86:11:1B:CA:97:22:D7:29:D7:D0:60:FE:8C:3D:D7:0D:30:D1:08
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 0188B9B937B066653695280E9F2F510584A9
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/8IYRG8qXItcp19Bg_ow91w0w0Qg.roa
Signing time: Wed 14 Jun 2023 11:45:03 +0000
ROA not before: Wed 14 Jun 2023 11:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 2a00:1558::/32 maxlen: 48
2a02:27c8::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 Jun 2023 11:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:b9:37:b0:66:65:36:95:28:0e:9f:2f:51:05:84:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Jun 14 11:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f086111bca9722d729d7d060fe8c3dd70d30d108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:b7:d1:d9:97:7a:6a:28:fe:0a:ca:3d:a9:
b3:c6:da:c5:6b:d6:e8:98:18:cf:25:22:46:1e:36:
51:1e:db:db:8c:33:02:06:01:51:1a:ed:5a:5d:25:
d3:fa:c1:77:41:cb:f1:89:ae:8a:f9:53:97:2c:a0:
00:01:8a:bd:d4:ad:84:1d:b3:61:46:ef:82:c9:81:
70:f4:4c:a6:7a:43:99:09:75:be:4b:8d:37:ba:a7:
e9:cc:8e:94:61:15:2a:58:cf:e7:3c:35:84:96:54:
6b:1a:fe:ec:04:85:05:da:ca:c1:10:ed:6c:2d:51:
db:e7:08:b4:2d:12:ac:7a:51:56:3e:c7:28:70:84:
87:f0:f3:8e:fa:7f:30:e0:4e:67:10:16:bc:9b:35:
7c:b9:52:69:98:18:f3:13:07:f3:80:42:4d:22:7a:
60:f6:5d:99:7e:3a:bb:77:1f:d4:89:92:84:79:bf:
02:57:17:89:1a:bf:d3:4b:f2:89:95:c0:b8:a2:2b:
0b:4d:19:8f:7d:3e:c5:d7:d1:91:b6:17:e0:0a:68:
8a:fd:b5:9b:74:63:83:db:73:64:4c:fa:56:76:68:
d3:e9:ea:c5:5f:f0:dd:73:6c:0f:3d:5d:cd:87:47:
15:c9:62:52:74:89:d5:f8:dd:c0:c5:73:13:60:2e:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:11:1B:CA:97:22:D7:29:D7:D0:60:FE:8C:3D:D7:0D:30:D1:08
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/8IYRG8qXItcp19Bg_ow91w0w0Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1558::/32
2a02:27c8::/32
Signature Algorithm: sha256WithRSAEncryption
5e:0b:84:58:6c:10:4a:91:a0:7e:a7:f1:0a:33:35:aa:17:75:
18:3b:11:9d:67:28:62:3f:de:37:09:e8:59:2e:ea:4f:59:dc:
3b:9a:2b:67:c3:6a:77:f7:67:d6:dc:85:9d:36:6a:53:e5:38:
6f:60:30:b7:88:f4:64:39:18:e3:b2:67:ec:4e:dd:49:30:e7:
c0:94:11:0d:4b:fb:f8:89:52:43:e2:44:cc:7f:c8:e2:00:61:
13:f2:5b:4b:00:f3:3d:f7:ee:5b:4d:91:41:ff:30:34:eb:b2:
25:08:b9:34:03:65:d6:e7:c3:bd:4f:0a:49:8b:c3:ae:65:ae:
7d:89:61:8a:3f:1b:74:82:99:c4:3e:e7:84:8f:87:c2:55:7e:
e5:61:14:64:1b:06:ec:1e:54:15:60:bc:82:5b:14:47:23:bd:
8b:6b:23:37:18:21:fc:9e:db:94:76:36:52:41:7a:21:c5:8c:
b8:24:5e:8d:51:44:c2:15:f7:67:3a:11:46:41:a1:70:80:f6:
39:17:30:63:8f:36:cb:47:60:c2:c9:bc:c4:78:2f:09:aa:7b:
2c:f0:a5:5e:12:c9:c7:7f:c5:93:02:e1:03:50:bd:54:f9:f3:
c9:f2:a4:f4:f3:88:fe:b2:0f:16:36:18:98:b0:af:07:a6:12:
6e:7c:b7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-fra.rpki-client.org