Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/B40C7YW-N9hXwWowrtsU1ttcSPU.roa
File: B40C7YW-N9hXwWowrtsU1ttcSPU.roa (raw, json)
Hash identifier: JJ3g4Edgy2wG1sBzc25oSkPOApE1E4Co8IyTMqy+1yI=
Subject key identifier: 07:8D:02:ED:85:BE:37:D8:57:C1:6A:30:AE:DB:14:D6:DB:5C:48:F5
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 01857139D65A891F817E6DBCF5F55A3681F0
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/B40C7YW-N9hXwWowrtsU1ttcSPU.roa
Signing time: Mon 02 Jan 2023 06:44:53 +0000
ROA not before: Mon 02 Jan 2023 06:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43623
IP address blocks: 2001:67c:4a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:d6:5a:89:1f:81:7e:6d:bc:f5:f5:5a:36:81:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Jan 2 06:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=078d02ed85be37d857c16a30aedb14d6db5c48f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:00:65:33:bd:f5:cb:47:eb:11:9e:47:8f:
ef:29:a2:1a:5b:41:7c:cd:60:29:25:b2:49:78:c9:
b7:00:a8:11:14:2f:3f:df:26:d1:05:04:b9:17:a4:
ee:ed:b5:95:11:73:d3:67:4f:3b:2b:d4:6e:31:81:
5b:d1:dd:f6:f0:0d:a0:87:bf:fd:36:b7:a7:42:be:
0e:1a:d4:2c:12:fa:8c:f1:5f:0a:d4:42:54:ae:c5:
89:e2:0d:e5:89:00:81:c2:a6:5a:a0:7d:05:49:97:
05:56:39:95:4f:70:c7:93:1a:99:15:de:bb:e3:54:
ba:ad:2b:43:05:03:33:b6:55:47:4d:f8:e6:a3:fb:
67:a7:09:1f:8b:6a:14:83:12:62:5e:85:1e:fa:65:
39:ef:5d:4f:32:2b:27:a5:6c:a0:74:b9:c0:d1:33:
de:f9:e5:4f:e1:9d:26:c8:30:b2:ee:91:85:48:20:
75:9a:ef:a9:16:7a:cf:cd:49:da:b9:83:b2:11:fc:
6d:02:3f:39:d4:0d:13:1b:c7:b1:b2:13:89:f7:6d:
eb:0b:5b:c8:cd:75:39:c8:95:88:62:70:bb:1a:fa:
4c:b9:4a:ab:02:b7:0f:50:fa:d2:04:59:2f:55:fa:
df:fd:ce:0d:ac:a6:fc:c3:8c:8e:c2:a4:37:a6:32:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:02:ED:85:BE:37:D8:57:C1:6A:30:AE:DB:14:D6:DB:5C:48:F5
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/B40C7YW-N9hXwWowrtsU1ttcSPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4a0::/48
Signature Algorithm: sha256WithRSAEncryption
85:20:09:a3:bb:7c:ee:65:77:a7:8d:06:b6:d2:98:df:b9:00:
fa:5d:75:36:2d:bd:6d:6d:b1:7e:16:20:a7:39:d5:26:68:17:
6c:e4:df:1e:ab:b9:60:ae:45:e4:56:f3:d4:40:d1:85:49:ca:
cf:88:f4:38:be:0a:21:c6:9d:ea:fb:e6:0b:8f:86:71:26:79:
5d:a3:02:33:5d:0e:bf:18:c7:67:0e:4a:8b:3c:12:53:6d:1b:
1a:c1:01:4e:55:ee:e6:2b:bf:15:2a:d9:95:27:1d:61:d2:14:
13:38:44:0e:e1:ae:c5:a0:c8:5e:ca:58:4a:b7:a5:f1:fc:97:
db:df:20:d1:68:df:af:23:56:cf:fb:02:cc:89:bd:7e:3e:09:
07:08:68:e6:96:bc:53:93:fd:53:a4:c8:09:a1:38:f0:0e:09:
6e:1c:b6:0c:8b:41:49:cc:0b:ae:af:48:f1:c5:b0:21:6e:6a:
9a:07:95:a5:03:ed:42:a8:bf:e6:89:45:66:31:23:2a:8a:f5:
bd:51:63:d1:80:13:1c:48:09:c7:84:03:e3:1d:9b:86:de:ff:
89:ff:7b:25:8e:99:f8:95:b5:a6:31:38:b9:c3:9a:86:b4:64:
93:1e:3f:9a:85:17:1c:d6:58:40:bc:79:43:cb:79:55:35:6f:
81:8a:f2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:29 2024 by rpki-client on console-ams.rpki-client.org