Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/0CxWPwvccQ31WpTMor-o04FPiLU.roa
File: 0CxWPwvccQ31WpTMor-o04FPiLU.roa (raw, json)
Hash identifier: b3cpeWfSV0IjVcMJaxqpeU5lQ5gn02zLAwF9qET0vUk=
Subject key identifier: D0:2C:56:3F:0B:DC:71:0D:F5:5A:94:CC:A2:BF:A8:D3:81:4F:88:B5
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 01856FE71BFED7A2234D5B13056B5B834AE6
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/0CxWPwvccQ31WpTMor-o04FPiLU.roa
Signing time: Mon 02 Jan 2023 00:34:55 +0000
ROA not before: Mon 02 Jan 2023 00:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57763
IP address blocks: 2001:67c:2c2c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:1b:fe:d7:a2:23:4d:5b:13:05:6b:5b:83:4a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Jan 2 00:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d02c563f0bdc710df55a94cca2bfa8d3814f88b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:f0:05:77:b4:19:07:01:40:8e:24:84:6e:
8e:11:da:23:a1:c5:ce:91:b3:d7:de:10:c5:af:85:
20:ba:96:26:89:f2:20:9e:4e:b4:6e:68:02:95:0b:
cf:c4:0c:15:c2:1b:5b:8c:de:f1:f0:d1:75:ef:1a:
f6:1d:0d:23:b8:9d:e4:e4:6c:92:2b:38:4e:14:f6:
96:76:d5:a1:1a:82:19:5c:44:e1:94:3b:20:ad:b8:
82:a1:5a:0a:49:33:da:a0:81:9d:cc:89:9c:0a:24:
4d:dc:1b:dd:24:d9:c0:3b:2c:a2:6d:26:4a:68:2c:
33:cf:8c:91:e7:41:c7:3a:2a:a7:03:c3:8d:77:f5:
c4:69:5b:2a:c3:43:77:bb:a8:11:6f:e5:15:6c:14:
ce:f6:82:e5:76:72:eb:da:f7:17:57:ff:5a:fe:bf:
59:9a:e4:5a:c9:bb:42:c7:be:20:a2:f9:46:ae:e0:
2e:71:57:eb:b8:ed:73:46:08:c0:b7:23:d3:55:fd:
db:ea:54:4b:84:e3:37:53:bf:53:23:28:5b:6c:e6:
2f:09:ee:0b:e0:c5:75:26:a2:26:ab:67:a8:8a:59:
28:13:ef:05:e4:25:fe:dc:3d:0b:40:ce:64:3f:07:
a1:dc:3e:f2:51:77:2b:5b:d4:dc:b1:b3:ab:21:44:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:56:3F:0B:DC:71:0D:F5:5A:94:CC:A2:BF:A8:D3:81:4F:88:B5
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/0CxWPwvccQ31WpTMor-o04FPiLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c2c::/48
Signature Algorithm: sha256WithRSAEncryption
42:4e:fd:d6:ca:5e:03:4c:17:c5:ab:3d:7f:0b:27:99:68:2d:
c0:b0:85:9f:f5:96:3d:3a:60:46:4d:c2:eb:f1:8a:f9:94:28:
36:81:b2:1b:69:2b:5f:d6:4c:67:30:9c:30:9e:da:dd:f6:2c:
7a:70:88:64:d6:5f:8a:ac:ac:aa:18:13:f5:b8:b7:fa:28:09:
ae:00:89:4b:6f:87:f4:e2:be:be:78:06:63:5d:f2:96:ae:a5:
1e:9c:4a:d8:b0:66:3c:7e:85:7c:b5:0d:67:0c:b4:af:32:d9:
51:35:6d:c9:12:d8:67:93:a6:e4:99:31:34:53:a1:bd:b5:c1:
02:18:c8:cc:fc:1e:18:08:3a:c3:b2:f0:a2:15:24:1a:75:44:
70:a5:4b:ef:64:bc:36:f0:c0:ff:28:3c:b9:ff:f5:f2:22:30:
c6:9d:91:2e:30:4f:b5:a7:93:e9:c3:b4:36:6f:3d:8d:2b:15:
03:4f:c5:ed:87:b6:7d:12:64:10:64:d8:33:9b:84:2b:b3:75:
85:2c:f7:93:4e:4b:3d:1f:6c:7b:d7:42:d3:e3:11:f6:ea:93:
58:c9:54:09:f6:23:bd:84:9a:0e:c2:ee:41:85:ad:c1:b6:de:
eb:2a:c3:65:ec:d2:75:4e:00:44:0e:aa:6a:13:19:60:e9:e2:
43:25:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:27 2024 by rpki-client on console-ams.rpki-client.org