Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/Tp57CAFZXN2I3clcnruD1Ct9PH4.roa
File: Tp57CAFZXN2I3clcnruD1Ct9PH4.roa (raw, json)
Hash identifier: 1mGTyGS73GFlgdYFnHtLpu4fM/Kpjs8iqCmXGWjgKJg=
Subject key identifier: 4E:9E:7B:08:01:59:5C:DD:88:DD:C9:5C:9E:BB:83:D4:2B:7D:3C:7E
Certificate issuer: /CN=87de085975de6588e07fed135513aa38acedb763
Certificate serial: 0185A4FA48FAE77BEE13DADE22C8FE60146A
Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/Tp57CAFZXN2I3clcnruD1Ct9PH4.roa
Signing time: Thu 12 Jan 2023 07:55:44 +0000
ROA not before: Thu 12 Jan 2023 07:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 2001:67c:2350::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:fa:48:fa:e7:7b:ee:13:da:de:22:c8:fe:60:14:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87de085975de6588e07fed135513aa38acedb763
Validity
Not Before: Jan 12 07:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e9e7b0801595cdd88ddc95c9ebb83d42b7d3c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:93:db:8e:13:61:91:9f:a4:e1:37:2b:8a:
92:1d:a1:b9:c6:b0:e2:68:cc:39:47:65:51:6f:ec:
6e:53:3e:3c:dc:59:60:f2:54:95:18:b9:a9:68:13:
e4:11:c1:71:f3:b5:d6:32:fd:9c:36:01:d7:27:c4:
76:f2:53:8f:6d:a0:f8:a5:1f:0a:e7:99:e5:ad:10:
46:3c:98:6b:ae:89:a8:3a:10:d1:a8:6d:cb:3b:98:
20:e6:79:de:f9:d4:cc:e3:f9:4e:fe:b6:86:6a:d6:
fe:80:6d:18:6e:6f:f0:59:0c:57:48:8d:3b:2a:a1:
b8:49:29:58:0a:a7:49:f0:69:8e:97:d3:be:b0:d0:
75:c9:1c:b1:85:13:6c:ef:fd:f2:76:dd:fe:a7:38:
7f:62:12:ee:e1:2c:d7:4d:fc:01:1b:16:2a:aa:e3:
92:01:6b:9e:3c:fb:11:d9:03:4a:17:1f:a3:e9:96:
03:00:f8:e5:01:3f:a8:69:4a:69:cc:7b:5e:73:26:
c8:e4:e6:a5:93:a6:17:5c:6f:7e:ad:04:13:07:52:
34:50:de:4f:60:30:d7:97:69:0f:9d:99:b3:8b:a5:
3a:96:b0:d0:c9:23:13:4e:b9:01:4b:29:3c:e8:6d:
26:0f:dc:32:fa:d6:6e:44:37:8f:01:06:82:06:4d:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:7B:08:01:59:5C:DD:88:DD:C9:5C:9E:BB:83:D4:2B:7D:3C:7E
X509v3 Authority Key Identifier:
keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/Tp57CAFZXN2I3clcnruD1Ct9PH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2350::/48
Signature Algorithm: sha256WithRSAEncryption
b7:45:b2:fe:3e:bb:b3:c7:6b:b4:44:fb:4c:81:bd:ec:e8:cf:
66:aa:2e:76:4b:8e:b2:e3:4c:99:57:c4:f7:76:31:46:2e:a5:
52:14:2f:ae:a8:f9:88:2b:07:a1:5a:7a:ff:88:43:ec:df:15:
05:5d:b6:6e:2d:a3:f4:37:95:59:99:f8:e4:99:f2:ad:42:e9:
8f:16:7c:7b:d7:6c:f4:da:27:4a:38:31:ab:39:55:a0:3c:aa:
79:e4:be:3b:79:b8:de:79:04:c0:ca:9a:a8:20:44:48:e4:3f:
94:ae:c5:0b:38:a6:19:f6:83:21:78:c7:a1:d7:4a:45:50:3b:
b3:4c:51:5e:56:61:6b:eb:b8:0a:92:0f:77:55:ad:df:88:03:
f8:e0:51:81:14:88:ae:4e:42:8c:a8:21:77:3e:de:4b:2a:6f:
db:0d:67:6b:43:6f:3f:4f:fe:72:17:a6:9a:17:8e:b0:fc:b1:
89:fe:6a:1c:ea:61:c9:93:86:07:c5:b0:26:fc:2a:d1:48:84:
24:b3:c7:76:18:c3:f9:13:55:44:61:cd:d9:60:4c:18:40:88:
a4:df:f1:fd:6b:49:7a:2f:32:cb:8b:c7:ce:3c:6e:63:c6:67:
35:78:f5:43:8f:26:06:93:18:52:98:3a:bc:4d:d5:1b:38:52:
5b:e1:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:45 2024 by rpki-client on console-fra.rpki-client.org