Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Z_xFtd4Y88Id5_BKSPqwrq95QAU.roa
File: Z_xFtd4Y88Id5_BKSPqwrq95QAU.roa (raw, json)
Hash identifier: 87hI5TEXnCA9tlfHSIuEGC25ivT3AnOvA6BRYZAtpKc=
Subject key identifier: 67:FC:45:B5:DE:18:F3:C2:1D:E7:F0:4A:48:FA:B0:AE:AF:79:40:05
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01888ACCB799A6E51B6176F7E6EF78BF09B8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Z_xFtd4Y88Id5_BKSPqwrq95QAU.roa
Signing time: Mon 05 Jun 2023 09:04:12 +0000
ROA not before: Mon 05 Jun 2023 09:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198510
IP address blocks: 2a0c:9a40:8c80::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:cc:b7:99:a6:e5:1b:61:76:f7:e6:ef:78:bf:09:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 5 09:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67fc45b5de18f3c21de7f04a48fab0aeaf794005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:c8:9a:61:22:27:4f:b5:06:98:3f:e1:51:
64:6e:3d:68:1d:b4:2d:b3:17:ad:af:5f:53:da:f4:
2f:e9:ad:23:f7:30:92:13:78:c5:73:fa:6f:6c:46:
5c:03:26:f7:53:f7:74:0c:66:76:7c:45:98:e4:f5:
50:e1:cd:94:b1:16:8b:b1:55:11:b6:29:be:6f:e7:
81:af:b2:9b:2f:33:bd:e5:3d:e9:e0:58:72:14:96:
5b:92:4d:f2:43:be:39:12:a9:56:a4:14:39:07:90:
d7:bb:02:27:f9:02:ce:2d:91:3b:45:4e:99:b7:f4:
8c:1b:63:d1:6b:e1:9c:41:96:32:e5:76:7d:61:ab:
e1:32:bd:ba:72:be:d2:4b:85:15:70:c2:b3:2d:dd:
cd:be:26:20:e5:20:49:01:a5:77:a3:da:04:df:c0:
c8:37:e2:53:00:45:a5:2e:64:06:58:43:af:95:03:
53:f2:ac:39:d9:66:34:cd:b6:f2:cc:b6:48:b0:7f:
f7:ca:75:30:84:4c:f8:ee:de:14:4a:c2:4f:c9:fd:
37:d1:f7:3b:4f:91:1a:bb:0e:4d:15:86:5e:83:34:
b1:05:13:54:d4:8f:7c:e1:3f:5a:0a:14:80:f9:62:
6d:cb:b3:e9:10:e9:eb:f4:03:06:5d:84:86:72:6f:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:45:B5:DE:18:F3:C2:1D:E7:F0:4A:48:FA:B0:AE:AF:79:40:05
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Z_xFtd4Y88Id5_BKSPqwrq95QAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c80::/44
Signature Algorithm: sha256WithRSAEncryption
5e:a4:20:ab:85:67:75:68:c3:8c:aa:54:52:41:ea:d6:31:ca:
a5:c1:60:40:eb:34:15:fc:f4:79:8e:e6:89:c7:0f:c4:4a:16:
4d:ae:ec:09:17:d3:ac:b8:b5:7c:ed:85:15:26:36:d0:ea:f1:
c8:a3:19:7c:8e:b1:ac:93:5f:b1:a2:9d:1b:12:4f:2b:90:94:
02:40:10:e5:27:6e:04:9f:8e:a7:2b:3e:fb:0d:a9:b6:65:c7:
5e:10:d8:cc:cb:85:18:d0:05:8f:4a:75:18:20:12:11:a4:81:
12:d9:8e:3a:ed:b6:7c:35:f7:a0:5c:b6:96:9e:36:d1:b6:16:
8b:9b:7a:97:81:dd:98:07:ef:12:3b:a0:0b:50:06:04:09:16:
a7:de:89:7a:c6:de:de:5a:4e:3f:ac:4a:d5:45:18:ba:da:64:
4c:58:d9:b3:9f:b8:88:39:13:3a:1c:5d:fb:65:29:f8:fe:1b:
38:2d:94:e8:25:03:97:a0:df:64:59:bf:42:d8:39:2c:0f:ee:
68:5b:ff:60:bb:35:50:d2:ea:35:fc:d9:9c:86:96:38:df:5b:
0a:21:ad:ab:7c:3d:87:dd:7c:71:df:c4:38:b1:51:21:d7:fb:
79:c2:d4:ba:37:c3:8b:1d:88:aa:1f:f2:cf:84:e6:f9:0d:39:
73:87:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:15 2024 by rpki-client on console-ams.rpki-client.org