Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/4uldjsaUG_6Ok0ufCWbcRtJXAaw.roa
File: 4uldjsaUG_6Ok0ufCWbcRtJXAaw.roa (raw, json)
Hash identifier: N/4qTncQJNi2MAwg/vSKLUt6tk8h0IHR5quIeiZojGo=
Subject key identifier: E2:E9:5D:8E:C6:94:1B:FE:8E:93:4B:9F:09:66:DC:46:D2:57:01:AC
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 01856CAF361AB7C2881012803BA85FB017D9
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/4uldjsaUG_6Ok0ufCWbcRtJXAaw.roa
Signing time: Sun 01 Jan 2023 09:34:59 +0000
ROA not before: Sun 01 Jan 2023 09:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51861
IP address blocks: 2001:67c:374::/48 maxlen: 48
2001:67c:374:4000::/50 maxlen: 50
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:36:1a:b7:c2:88:10:12:80:3b:a8:5f:b0:17:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Jan 1 09:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2e95d8ec6941bfe8e934b9f0966dc46d25701ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:93:6e:fa:c3:98:56:94:e5:81:f8:4d:04:
ff:75:ba:d2:ed:0e:ca:7e:ec:f1:94:3a:96:3e:a5:
96:09:82:ab:94:f0:49:a6:12:e0:b5:81:e5:a5:b6:
d5:79:bc:f8:41:b3:99:ca:fb:a6:c6:76:1c:d1:2d:
78:05:10:19:c7:2e:54:85:4a:33:d6:09:e7:2f:f6:
96:42:30:93:e8:16:06:2e:1b:6d:db:7c:fb:cf:88:
73:c0:94:90:cf:04:f1:a5:f2:03:04:35:1a:ab:fd:
79:55:22:17:08:20:cf:01:73:a2:42:df:51:7a:cb:
42:e7:db:9f:55:a9:1e:f4:ea:6c:5e:cc:73:b4:fb:
84:a1:2e:ce:91:2e:41:e2:86:46:3b:29:41:2d:fb:
bf:a8:cb:2f:6a:97:8e:83:87:40:a6:c3:47:0e:c2:
83:9c:d3:11:3f:4d:e6:fb:46:ba:7b:00:7a:71:e0:
47:b3:59:48:b1:81:76:61:47:5f:53:b5:9c:12:c6:
be:bd:73:21:b8:de:84:84:0b:b8:5e:fe:f2:0c:81:
92:e9:30:0b:2b:ce:7e:19:dc:6e:45:d3:d8:9d:f0:
fc:71:52:72:80:d0:d3:d3:1d:24:f2:7e:eb:d5:2c:
49:5b:c6:3a:db:e6:0e:88:39:82:cc:47:49:ae:6c:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E9:5D:8E:C6:94:1B:FE:8E:93:4B:9F:09:66:DC:46:D2:57:01:AC
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/4uldjsaUG_6Ok0ufCWbcRtJXAaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:374::/48
Signature Algorithm: sha256WithRSAEncryption
97:83:28:86:cc:d5:ab:2e:74:d6:93:b4:cd:86:42:a6:f4:c5:
2d:e1:41:66:e9:b6:58:52:d4:6b:40:13:89:12:73:0a:33:a8:
2e:10:34:c3:21:00:d3:a6:35:8c:52:83:85:a4:4e:93:ad:bd:
83:38:7f:57:19:6a:cb:6c:14:37:ed:6e:e4:4a:ab:e3:f5:82:
4d:07:a7:3f:7d:f0:31:33:64:8a:fe:f3:f8:73:43:0f:b6:ac:
fe:a7:68:9a:9b:20:a3:8f:67:bb:c8:f3:83:25:72:d4:d8:35:
e8:51:1b:c3:12:4c:37:3d:16:5c:50:89:35:25:ca:2a:4a:aa:
a1:65:2d:d1:2b:09:5b:ba:37:7f:5d:d4:cd:0f:7f:f2:c4:d8:
d0:5a:2d:6c:c5:35:a6:92:d3:5e:8d:d7:a3:90:1e:39:c7:26:
03:5a:d5:1b:6a:46:1f:fc:6e:9c:2d:6d:31:cc:14:e6:4d:d6:
d4:11:bf:f5:94:e5:5f:ff:af:40:dc:e7:0e:80:fc:2e:4c:2a:
62:b4:fb:da:cb:be:d7:22:04:ef:fa:fb:0c:34:f5:64:8a:fa:
2c:31:03:47:77:22:57:9d:21:0b:ee:21:3b:04:b7:35:4a:ed:
6b:0f:76:7f:e0:99:f5:55:78:49:66:4a:65:f5:46:8c:0b:43:
f5:25:9d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:50 2024 by rpki-client on console-ams.rpki-client.org