Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/j5K1iiM7V4OfKiw2kfjkuAjDufk.roa
File: j5K1iiM7V4OfKiw2kfjkuAjDufk.roa (raw, json)
Hash identifier: lHLB1cXG4kcja4U9UXKOjh3JjnTmiGnaMty/Il4HnFQ=
Subject key identifier: 8F:92:B5:8A:23:3B:57:83:9F:2A:2C:36:91:F8:E4:B8:08:C3:B9:F9
Certificate issuer: /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial: 01877A63F3034E457B8031901067E230DEAB
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/j5K1iiM7V4OfKiw2kfjkuAjDufk.roa
Signing time: Thu 13 Apr 2023 11:33:03 +0000
ROA not before: Thu 13 Apr 2023 11:33:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48550
IP address blocks: 2001:67c:4e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:63:f3:03:4e:45:7b:80:31:90:10:67:e2:30:de:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Validity
Not Before: Apr 13 11:33:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f92b58a233b57839f2a2c3691f8e4b808c3b9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:a7:f7:71:50:24:b0:0c:d9:21:17:45:6a:
f4:93:c1:41:78:4d:4b:61:97:b6:72:a3:7c:6a:ad:
cb:4b:7e:37:50:90:b6:eb:1d:4d:d0:8e:ce:44:cf:
5c:6c:d8:33:aa:fc:f9:70:e2:ec:26:10:29:62:d2:
1a:d2:88:ef:a8:c1:be:b8:03:31:dc:d9:90:6d:6a:
66:c1:92:fc:b2:14:84:81:8a:cd:64:6b:b9:c8:79:
06:5f:53:28:66:a7:86:7e:df:7f:83:ca:86:30:5c:
0a:2e:85:98:b2:80:46:2f:aa:dc:fd:b1:db:f2:f0:
58:f9:c8:7e:1c:40:1b:b4:4c:b8:11:11:86:a4:5f:
09:9f:af:ee:f3:f1:8b:e9:04:9a:ae:65:2c:c7:a2:
2e:95:d6:1c:0d:6f:57:09:ee:c6:0f:15:76:e4:b2:
5a:2e:19:d4:27:f2:91:00:d7:6e:99:21:83:44:2b:
5c:01:79:73:2c:97:7f:12:8e:f1:52:5c:1d:1a:07:
c9:d6:25:6d:93:dc:dd:64:f0:84:98:50:db:26:e9:
8f:28:8a:5e:1d:9a:e2:a8:fc:d2:41:c6:c6:23:a9:
fb:41:19:ed:55:46:d9:39:3b:3f:82:86:ea:4c:e6:
b9:3f:02:60:8a:b9:d4:6a:bd:47:45:5c:20:d2:72:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:B5:8A:23:3B:57:83:9F:2A:2C:36:91:F8:E4:B8:08:C3:B9:F9
X509v3 Authority Key Identifier:
keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/j5K1iiM7V4OfKiw2kfjkuAjDufk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4e0::/48
Signature Algorithm: sha256WithRSAEncryption
7c:01:80:6d:1e:1e:ad:de:33:31:cb:d2:25:89:d4:8f:bf:c7:
66:61:18:46:59:de:52:6b:48:f1:6a:76:02:47:d4:3d:c4:e4:
1b:dc:fa:f3:6a:28:17:25:63:84:71:37:f5:8a:de:21:71:50:
90:d4:2f:9b:87:27:f7:db:d5:01:a2:c2:37:11:26:76:fe:fc:
32:58:44:86:d7:6c:6f:89:d8:95:22:a2:23:38:68:b1:8c:d3:
e8:1f:90:e1:64:be:6a:c7:bf:29:93:b8:27:a4:eb:90:a5:43:
a5:75:b4:aa:3e:4e:f0:6a:cf:86:7c:91:58:42:5e:02:ef:af:
48:46:c0:23:fe:c7:f1:89:b4:54:02:6d:e3:f1:db:65:59:ba:
99:41:f9:49:94:cf:c5:f5:a5:25:78:b2:56:04:ad:47:01:33:
9b:ae:16:28:e4:98:99:10:ea:e8:b9:02:44:a6:9c:58:dc:27:
79:74:db:db:ac:c8:5a:fd:e0:09:df:16:1a:49:f4:5e:a5:77:
89:66:31:66:54:9c:af:67:c3:3d:56:1f:e6:3b:d1:de:24:ba:
a1:f5:c5:8c:84:87:e1:69:4b:86:23:c7:a0:e2:81:7f:7d:97:
5d:cc:f7:f2:a8:3c:2f:c2:70:00:e4:0e:7f:ac:db:8d:92:ca:
c7:0b:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:42 2024 by rpki-client on console-ams.rpki-client.org