Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/RPI54B1C9GsrczTyJIwzIEEssuc.roa
File: RPI54B1C9GsrczTyJIwzIEEssuc.roa (raw, json)
Hash identifier: Lx7+3pT7mOreOuPnw/9FIRDFkrJaNExD4JUT7a3gLHI=
Subject key identifier: 44:F2:39:E0:1D:42:F4:6B:2B:73:34:F2:24:8C:33:20:41:2C:B2:E7
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 018CC726271B949CDCEEC3C65C9F5F3CFEE6
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/RPI54B1C9GsrczTyJIwzIEEssuc.roa
Signing time: Mon 01 Jan 2024 22:30:15 +0000
ROA not before: Mon 01 Jan 2024 22:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208626
IP address blocks: 2a11:5a41::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 16 Jan 2024 14:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:27:1b:94:9c:dc:ee:c3:c6:5c:9f:5f:3c:fe:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jan 1 22:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44f239e01d42f46b2b7334f2248c3320412cb2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:2f:f9:f8:27:c3:e7:27:c7:89:40:8d:89:
d5:47:b3:39:eb:24:a9:9b:cc:b6:75:68:2e:67:52:
1f:ab:7d:83:38:38:fb:9c:5c:a7:e4:f2:dd:07:16:
6f:bf:a3:9a:71:6e:56:96:cf:b5:b4:f3:ab:f4:a9:
1c:be:69:b9:8e:b2:a2:43:e8:f4:62:cf:d4:da:a4:
db:e1:c4:e7:b1:a4:a3:3d:4e:ca:9e:50:69:ba:e3:
5f:b7:ec:66:41:29:ff:96:14:40:5f:c4:d2:6f:4d:
df:be:b0:ad:aa:6b:1c:79:06:24:20:04:b3:f0:1f:
8a:1e:88:3f:2c:d0:09:83:0c:d1:2c:2f:42:20:89:
e3:2a:25:a4:b4:4c:48:47:25:d1:23:43:1b:b1:e1:
67:31:b4:6d:09:04:3f:51:1a:b2:b7:6b:52:4d:75:
00:ff:62:57:12:a1:04:36:37:02:bc:bc:d4:31:8f:
9e:a1:39:5e:67:39:cb:73:14:35:0c:85:20:d3:f7:
75:53:b9:0e:37:ef:5d:95:8b:a5:57:54:e4:af:dd:
fb:29:0d:87:73:81:63:61:af:7a:6a:d8:e2:0e:f3:
28:0c:42:b6:7e:33:cf:d1:d8:99:91:e8:91:ed:0d:
11:c0:09:b5:d9:00:94:0f:e7:35:6e:1e:28:b8:ba:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F2:39:E0:1D:42:F4:6B:2B:73:34:F2:24:8C:33:20:41:2C:B2:E7
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/RPI54B1C9GsrczTyJIwzIEEssuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5a41::/32
Signature Algorithm: sha256WithRSAEncryption
89:5e:4d:9f:c3:9c:22:b0:ca:39:ad:c0:b8:e5:99:43:23:bd:
14:0c:65:0e:62:ba:e5:72:a0:b7:7b:41:b5:52:40:83:a4:e6:
d5:80:de:e9:5b:72:4f:59:bf:8b:ec:9b:b6:c5:c8:aa:bd:51:
3b:14:99:fb:8b:56:8a:32:a5:7b:52:16:d5:db:9e:d2:93:ec:
f5:07:9a:d0:61:2a:d9:be:19:3c:e8:08:e8:53:ae:a6:e3:cc:
47:09:3b:28:35:50:b3:5e:d9:6a:a1:4f:1f:17:a5:2c:87:1c:
1e:3a:ec:b0:2d:6e:53:f1:28:03:6d:d1:25:c2:f9:66:72:ee:
2c:fe:4b:76:4b:73:49:46:c3:55:49:99:3d:5c:be:8d:f4:05:
a7:5d:62:cc:7f:d6:62:b4:a7:68:31:e0:52:2c:7e:57:82:82:
53:46:7c:db:7a:5c:df:9a:aa:4f:43:c2:32:ce:e6:14:32:40:
07:12:92:f6:38:10:53:e8:89:17:4f:81:1d:e2:4f:3a:c9:39:
2d:f2:4c:6d:3f:2d:20:e4:33:7d:0a:cb:a7:c7:96:d8:d3:76:
de:78:27:c9:6b:96:a8:c6:36:de:9c:00:70:1d:68:9f:8b:88:
74:8f:80:d0:9d:16:1e:9e:36:1d:af:74:62:ba:99:6e:9c:92:
f1:e7:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 19:12:48 2024 by rpki-client on console-fra.rpki-client.org