Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/wxscPVOo_TdQqLD5hXySWPR-sA8.roa
File: wxscPVOo_TdQqLD5hXySWPR-sA8.roa (raw, json)
Hash identifier: 94sO6f/JJxLC1zmCjGOoxjmkpgS+WRPR+ATusf2J+Fo=
Subject key identifier: C3:1B:1C:3D:53:A8:FD:37:50:A8:B0:F9:85:7C:92:58:F4:7E:B0:0F
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 0188250EF5A26527D6C60506010947C9DCB6
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/wxscPVOo_TdQqLD5hXySWPR-sA8.roa
Signing time: Tue 16 May 2023 14:55:17 +0000
ROA not before: Tue 16 May 2023 14:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:5901:8000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 16 May 2023 15:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:0e:f5:a2:65:27:d6:c6:05:06:01:09:47:c9:dc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: May 16 14:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c31b1c3d53a8fd3750a8b0f9857c9258f47eb00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:22:a4:ee:c3:0a:13:f2:a7:5a:e5:1b:32:
a6:e5:2a:a1:20:ed:a4:82:c2:fb:03:33:cd:5c:4a:
03:a3:41:b2:e4:51:67:35:42:ea:fe:30:27:46:db:
98:86:2b:b8:38:82:52:2e:81:07:15:09:26:bd:66:
6d:9d:6f:4f:69:f8:70:84:41:95:a6:70:9a:6c:16:
c1:59:1a:9b:af:95:21:42:c0:a2:d1:7b:18:2f:3f:
05:50:f8:a5:7e:04:13:ed:19:7b:c0:27:92:17:f3:
72:c9:0f:52:09:53:7a:a3:40:0d:bd:59:37:68:69:
cf:a8:c9:74:ba:e9:8f:c4:95:0b:9b:c2:f5:8a:ef:
6b:0c:72:1f:7d:b9:43:c7:26:53:14:1b:18:59:d6:
a4:3a:50:7d:b4:65:b1:26:39:6e:68:a3:4e:09:50:
98:05:4d:e6:40:23:0f:16:05:66:7d:bd:06:10:e8:
a7:47:e4:9a:66:57:2d:a7:9b:44:11:ed:5e:ef:a8:
60:e8:1b:c7:e8:34:7f:8c:28:06:57:3a:31:59:c1:
b7:f4:2f:e1:53:46:68:b6:62:82:03:7c:56:37:d0:
0e:13:09:08:e5:1d:65:bc:db:89:a0:6c:96:37:4f:
4d:5c:11:65:1a:78:19:55:bf:1c:ea:72:4c:b4:8a:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1B:1C:3D:53:A8:FD:37:50:A8:B0:F9:85:7C:92:58:F4:7E:B0:0F
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/wxscPVOo_TdQqLD5hXySWPR-sA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5901:8000::/40
Signature Algorithm: sha256WithRSAEncryption
5e:fb:4c:a0:3f:39:80:89:24:e8:e2:24:bf:2e:ce:c3:57:00:
e1:72:d9:a0:67:84:d8:23:ee:3c:b5:3c:19:2d:8b:31:ed:a1:
09:ce:cc:b3:3a:bc:a6:7a:4e:00:f3:aa:8e:2f:54:ad:7d:53:
2d:61:a3:77:de:ad:3d:71:65:e4:b4:15:67:ac:64:0e:47:fe:
23:ef:c9:1e:6f:de:dd:11:0c:59:8d:64:e7:f9:0a:fa:f3:ae:
87:90:0b:46:0a:41:d1:43:74:a6:91:86:52:a1:98:51:ed:cf:
ab:ba:84:8c:f2:c2:7c:87:83:0f:36:51:3b:04:fc:28:48:24:
99:d4:c0:89:46:34:92:dc:fd:6a:cf:0f:29:16:08:87:e2:57:
84:f5:88:99:0a:8a:aa:1b:b7:49:01:7f:d9:f0:1b:bc:97:b5:
f5:61:5e:24:bf:ca:a6:5b:14:b8:ee:9e:d1:32:42:d7:0a:a6:
c1:ad:44:ca:96:b8:fe:18:d7:ac:d6:cc:ed:1c:aa:31:bc:18:
21:3b:6f:ba:a1:d6:e7:a0:d4:15:48:89:ec:1c:b1:03:63:7c:
0e:58:7a:11:53:3f:0b:bb:50:01:36:ac:0c:14:86:ef:b0:31:
6c:86:3f:b9:31:f8:c7:93:f8:22:ed:63:40:c0:40:bc:8b:ab:
22:c2:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:23 2024 by rpki-client on console-fra.rpki-client.org