Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/5V9h9R5m-uTxD34AdgmVa2x3RMs.roa
File: 5V9h9R5m-uTxD34AdgmVa2x3RMs.roa (raw, json)
Hash identifier: WGWgu8riclEXotN/NuEYO+lGPhuJ1oMQQrPmAvGdkvo=
Subject key identifier: E5:5F:61:F5:1E:66:FA:E4:F1:0F:7E:00:76:09:95:6B:6C:77:44:CB
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018573900E99A26F4525CE765826B226AD67
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/5V9h9R5m-uTxD34AdgmVa2x3RMs.roa
Signing time: Mon 02 Jan 2023 17:38:18 +0000
ROA not before: Mon 02 Jan 2023 17:38:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211849
IP address blocks: 2a0b:b86:ffc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:0e:99:a2:6f:45:25:ce:76:58:26:b2:26:ad:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e55f61f51e66fae4f10f7e007609956b6c7744cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:16:ba:04:04:89:63:55:5c:e6:fe:42:a4:
68:0b:ab:a4:86:b2:b6:3e:a1:b0:91:ab:08:6b:40:
2c:16:01:e6:b5:58:1d:e5:6b:e7:92:f7:e0:e1:ee:
92:62:6f:11:f0:2d:70:49:6f:4d:5e:ed:7c:7d:32:
7f:24:8b:f9:a1:3f:dc:1f:d8:18:fb:50:02:0a:4e:
cf:29:66:f3:8f:76:ee:ce:30:4c:7f:67:ca:cb:ba:
ad:50:83:ca:80:88:80:0f:45:e2:65:87:63:cb:44:
0f:40:bb:d9:b3:2b:bc:47:fb:0e:59:eb:0b:4a:bd:
fa:bb:10:c8:fe:7a:4d:1a:3c:de:89:dc:08:60:60:
a8:30:ee:e8:28:23:d8:5f:cc:b5:c0:23:7c:6d:72:
62:cf:bf:c6:1c:3b:5d:76:67:4b:40:5b:6d:70:a2:
60:b9:1c:cb:66:35:a7:39:70:5d:c2:95:7a:8e:54:
5a:7b:58:10:cb:b2:c5:bb:58:6b:f8:ad:40:59:1c:
80:18:bb:4a:1f:d3:1e:a3:29:48:57:62:24:60:ca:
db:a1:62:4c:81:84:5a:b6:4a:88:f0:51:ab:ed:81:
0b:e6:44:12:20:23:f5:ba:74:2f:9e:5a:c6:11:2a:
65:29:ae:8a:fb:36:ec:91:94:38:7a:a0:b5:8d:c1:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:61:F5:1E:66:FA:E4:F1:0F:7E:00:76:09:95:6B:6C:77:44:CB
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/5V9h9R5m-uTxD34AdgmVa2x3RMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
b5:88:1d:b1:cc:59:f9:00:d2:c0:e0:97:69:8d:42:49:6d:53:
ca:5a:59:06:21:91:f0:59:1e:f3:be:a3:9d:c4:31:07:71:c7:
67:d2:4b:21:23:ad:42:00:29:94:17:5e:72:86:33:96:71:9e:
ea:31:83:7b:27:5f:bf:97:83:49:5e:3b:ea:6c:fb:b5:ff:5c:
a8:8b:e8:f9:94:d9:7e:8b:97:51:5e:ff:a3:15:79:28:80:03:
3d:7d:0c:14:a8:77:15:30:f1:0c:63:d1:0a:d5:37:40:05:36:
8c:b6:cd:31:05:3d:10:ad:22:4a:07:6e:fc:2d:ab:30:8f:fa:
3b:00:87:bc:ac:ae:5c:e4:d2:76:d4:ba:e5:bc:a6:fd:ee:b3:
4d:6c:16:32:88:47:44:ea:05:5f:ee:05:9c:36:1a:d2:43:83:
f7:fd:ff:3d:64:0b:5d:26:5f:77:89:eb:a3:60:05:5d:30:41:
ba:3f:3d:83:ef:f8:c3:f0:d1:fa:8a:4b:1b:70:06:e2:b0:4b:
66:09:0b:96:95:14:66:e7:75:97:6b:ba:d8:42:c4:09:d0:f4:
e9:57:9f:d6:46:2e:d1:bb:b9:75:ee:9d:da:87:7b:cb:f3:9d:
d6:6b:ba:ab:75:ca:f2:b7:b3:d2:37:d5:bb:24:1b:0d:c2:1f:
29:16:3b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org