Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/WYGQCtF4yCQQAdm1zOWQcHI-Ncw.roa
File: WYGQCtF4yCQQAdm1zOWQcHI-Ncw.roa (raw, json)
Hash identifier: S4XftMQuVqTTpSzGvP15hrx0Lu+c/YltOI097lX0s3U=
Subject key identifier: 59:81:90:0A:D1:78:C8:24:10:01:D9:B5:CC:E5:90:70:72:3E:35:CC
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 01856F2FD1E2C428345EC244D9025A4DC115
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/WYGQCtF4yCQQAdm1zOWQcHI-Ncw.roa
Signing time: Sun 01 Jan 2023 21:14:42 +0000
ROA not before: Sun 01 Jan 2023 21:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207632
IP address blocks: 2001:678:be0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d1:e2:c4:28:34:5e:c2:44:d9:02:5a:4d:c1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Jan 1 21:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5981900ad178c8241001d9b5cce59070723e35cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:c9:4c:3a:12:da:d7:85:5a:ad:6c:7e:88:
7a:d7:c4:84:eb:4e:ee:7e:12:97:5a:ea:c6:91:cf:
39:c1:aa:7b:b1:e4:08:17:98:6b:53:7d:07:90:9d:
9c:d0:a6:1f:7c:0b:27:e3:19:f7:b6:46:79:0c:83:
fb:4f:b5:82:ed:18:ab:59:84:b6:b9:9d:4a:d5:25:
bb:9a:21:5b:6c:57:71:60:08:bc:88:ec:f8:e1:a4:
a7:3b:b2:0b:a7:e4:20:72:3f:87:29:77:92:dc:76:
8f:bb:99:95:f3:df:86:7f:73:62:be:cb:87:f2:a2:
bc:71:09:e9:cd:27:b5:9e:df:44:e8:57:99:77:e1:
c9:98:92:45:8c:5f:4a:c8:60:56:e5:f2:8d:de:ff:
a9:9e:7f:a6:ca:32:bf:b9:db:01:80:c5:0e:7d:50:
bb:27:c6:a9:b5:77:ea:80:74:b7:e2:6f:21:3e:f5:
ff:b2:93:92:17:ae:fe:44:fe:0f:02:d8:fc:c3:10:
e3:f1:52:e3:b1:43:5f:50:84:e0:a6:26:f6:dc:eb:
ad:c4:3a:16:2e:42:60:15:8c:23:9b:02:bd:f1:24:
7e:07:35:58:0b:9b:5c:f7:8f:72:19:8e:9a:b3:46:
d1:8a:61:e5:3e:23:ab:f9:ad:ce:7a:91:0c:66:d4:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:81:90:0A:D1:78:C8:24:10:01:D9:B5:CC:E5:90:70:72:3E:35:CC
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/WYGQCtF4yCQQAdm1zOWQcHI-Ncw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:be0::/48
Signature Algorithm: sha256WithRSAEncryption
ad:5a:f8:8b:00:e0:0b:9f:d1:fd:d0:3a:f9:d5:f7:2c:0a:98:
d7:e9:e8:35:11:f2:50:61:a1:9e:c6:03:7d:60:f1:6e:a7:29:
b0:63:30:6a:de:78:9d:d2:19:eb:13:9a:25:3c:63:ed:fa:1a:
57:0b:98:46:74:45:4b:de:e5:db:fc:4a:2c:5b:ac:d3:f3:b4:
17:13:05:eb:9e:5d:cd:2b:1c:b8:f3:4b:69:03:e4:57:0d:db:
e5:4b:90:a3:fb:75:83:e6:f9:5e:0c:e3:2b:57:89:79:b9:65:
5e:b8:91:07:68:a3:e5:64:a0:99:f5:da:a8:2c:02:87:11:9c:
16:8a:9b:e7:5e:89:98:65:76:d9:e9:d1:9d:3f:1e:fc:21:51:
3e:41:fd:7e:d6:ee:3e:32:1d:59:19:85:87:cb:a9:1d:3c:2e:
97:be:9d:a0:7d:f4:83:65:2d:50:36:d3:64:dd:16:24:89:75:
87:db:c2:7b:e4:e3:d8:6a:6a:53:95:03:18:a4:5b:c0:c6:c3:
95:55:fb:0a:f1:17:7b:7f:52:bf:38:7a:f7:a0:9e:97:29:be:
bd:e3:99:1c:9b:60:68:8b:9b:fa:48:2d:c0:9e:99:e3:00:f7:
0c:35:3a:2b:15:56:22:ea:ee:d5:df:f3:e9:d0:83:8d:73:cc:
01:4c:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:11 2024 by rpki-client on console-fra.rpki-client.org