Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/_UUdkLlCZreiLPjeuOXEdhuTeRQ.roa
File: _UUdkLlCZreiLPjeuOXEdhuTeRQ.roa (raw, json)
Hash identifier: QncHwfoWbdZ0WOxZrrR+57e0NhGWmytizq15vlx9ntw=
Subject key identifier: FD:45:1D:90:B9:42:66:B7:A2:2C:F8:DE:B8:E5:C4:76:1B:93:79:14
Certificate issuer: /CN=716da86c536c62157483b633c185362ba7f7d1f2
Certificate serial: 01859C488EE50196BF47766C2F3C8E9C55EC
Authority key identifier: 71:6D:A8:6C:53:6C:62:15:74:83:B6:33:C1:85:36:2B:A7:F7:D1:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/_UUdkLlCZreiLPjeuOXEdhuTeRQ.roa
Signing time: Tue 10 Jan 2023 15:24:38 +0000
ROA not before: Tue 10 Jan 2023 15:24:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200236
IP address blocks: 2001:67c:b6c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:48:8e:e5:01:96:bf:47:76:6c:2f:3c:8e:9c:55:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716da86c536c62157483b633c185362ba7f7d1f2
Validity
Not Before: Jan 10 15:24:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd451d90b94266b7a22cf8deb8e5c4761b937914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:9e:f7:34:c7:0a:fd:37:85:5a:83:ff:3a:
df:55:4f:ab:0d:91:af:d8:18:ad:6c:04:1f:b8:57:
f5:c4:f7:31:4a:c0:92:6d:2c:ab:56:2b:5f:cb:ab:
e3:16:e8:00:b7:c9:cb:d1:55:0a:34:ab:6c:61:d8:
96:c1:7e:25:78:2b:38:d9:d7:a1:82:db:ce:76:30:
d3:3d:93:01:f8:65:3d:3b:44:1c:44:e5:21:cf:d5:
64:8e:d0:f9:79:a6:95:2d:64:bc:f4:8f:a7:da:fb:
76:1d:f2:2d:1c:98:2b:14:14:c7:a5:bb:fa:41:48:
ec:8f:ce:4c:99:24:a8:70:24:f7:7c:14:ed:fc:31:
eb:24:bd:17:14:b0:bb:01:a5:37:a8:57:09:24:0b:
42:b4:96:e2:31:a8:40:11:25:d3:d2:af:89:58:2f:
88:25:b6:70:f3:02:71:10:f5:9d:81:87:64:b4:ea:
fa:28:12:aa:87:2c:01:c9:db:dc:15:a6:f9:76:e4:
00:65:a1:fa:17:99:8a:34:b4:59:6c:01:17:47:40:
1f:8a:b7:d4:2a:8f:af:15:44:62:47:7a:f1:9f:5e:
0d:33:9d:76:10:4e:c8:9a:3b:21:60:c4:7d:e4:16:
1d:5e:b0:92:c4:89:80:eb:07:56:3f:de:7e:59:86:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:45:1D:90:B9:42:66:B7:A2:2C:F8:DE:B8:E5:C4:76:1B:93:79:14
X509v3 Authority Key Identifier:
keyid:71:6D:A8:6C:53:6C:62:15:74:83:B6:33:C1:85:36:2B:A7:F7:D1:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/_UUdkLlCZreiLPjeuOXEdhuTeRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b6c::/48
Signature Algorithm: sha256WithRSAEncryption
44:c9:2a:45:92:64:2a:45:11:31:d3:39:24:7c:55:4f:39:40:
00:65:9d:c9:04:f0:13:4b:12:2d:c2:f6:59:95:a6:3b:03:4f:
22:76:8e:e8:dd:f1:d5:db:17:c5:a8:3d:e6:c1:72:08:de:72:
36:0b:47:db:e9:fd:bb:f9:73:fd:99:3e:3e:c1:91:69:36:84:
97:05:12:94:a3:ac:96:4f:d0:14:b1:82:68:0d:e5:74:ce:4c:
60:59:66:c7:41:be:41:67:79:9c:8c:ef:07:6e:4d:d7:bd:b8:
27:5c:15:56:74:af:42:7a:4d:eb:8b:b7:c1:1b:7e:29:74:04:
78:57:80:f1:b7:ff:5d:71:1f:e9:6c:ad:7b:3a:63:32:ea:aa:
5a:89:f6:73:fe:c7:33:1c:c1:e8:fb:19:e3:62:9a:20:ba:82:
05:75:2b:e0:c1:21:c9:d5:91:74:e1:50:14:6f:11:51:15:5a:
13:05:69:8f:0f:e1:86:35:36:60:c5:e5:05:05:2d:d0:e4:cd:
7d:a4:25:c9:bb:62:a5:6f:a5:03:e3:4c:ee:af:73:d4:65:12:
fd:25:ad:2e:d1:41:90:c5:a4:62:97:44:eb:16:43:26:a8:d2:
e3:e2:2b:dd:0c:e9:b5:d1:5a:29:56:b3:5c:11:a5:0e:46:e0:
76:a6:87:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:46 2024 by rpki-client on console-fra.rpki-client.org