Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WRPOe85dTN_nvbkQ1aSZKArZGGc.roa
File: WRPOe85dTN_nvbkQ1aSZKArZGGc.roa (raw, json)
Hash identifier: oJVgcS0j7c5NqakBhmlbsDm3UtF1iI6dW6j5q8n0iPA=
Subject key identifier: 59:13:CE:7B:CE:5D:4C:DF:E7:BD:B9:10:D5:A4:99:28:0A:D9:18:67
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739012057B04DB0FA07E8C34FF432756
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WRPOe85dTN_nvbkQ1aSZKArZGGc.roa
Signing time: Mon 02 Jan 2023 17:38:19 +0000
ROA not before: Mon 02 Jan 2023 17:38:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212647
IP address blocks: 2a0b:b87:ffa0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:12:05:7b:04:db:0f:a0:7e:8c:34:ff:43:27:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5913ce7bce5d4cdfe7bdb910d5a499280ad91867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:bf:14:83:df:c2:64:f0:da:d1:7b:c3:e4:
3b:a5:8b:20:83:f1:44:46:70:09:a4:1f:5b:e4:e8:
64:a8:00:3d:ba:c7:58:1a:97:ca:b6:44:ea:3a:61:
54:b7:71:b5:11:cc:88:b6:98:50:9e:eb:0d:bd:06:
3b:d2:e8:80:d0:2f:5b:97:e3:7d:7c:15:c1:d0:9f:
a0:16:f4:b0:4e:a1:0c:5c:7b:98:eb:c5:0e:d8:d1:
05:5a:f0:a1:3e:fb:d4:22:01:26:7d:35:a7:90:9e:
ca:18:5b:93:46:ec:f2:43:48:0e:8f:02:07:3b:a4:
84:d3:80:78:f5:59:6a:8a:c4:eb:23:db:2f:c1:57:
90:46:4f:22:91:a3:6e:36:10:1c:60:a9:9b:c8:04:
78:81:37:d8:2d:21:89:27:32:cb:de:67:7e:54:50:
cf:03:b3:8d:86:2a:3c:6b:40:1d:e5:a3:47:0f:fa:
6d:49:70:db:7a:a6:b5:4b:26:19:b9:57:3a:f6:7f:
5e:b3:19:b6:51:40:05:d1:43:13:62:5f:3f:65:08:
00:41:6d:3f:e3:73:dd:2d:6d:1f:78:4a:00:41:a7:
7e:f9:e9:79:82:13:28:f8:16:2c:ca:d7:a7:14:b2:
1a:69:bf:37:af:fb:4e:81:6d:dd:ea:36:6a:e5:55:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:CE:7B:CE:5D:4C:DF:E7:BD:B9:10:D5:A4:99:28:0A:D9:18:67
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WRPOe85dTN_nvbkQ1aSZKArZGGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffa0::/48
Signature Algorithm: sha256WithRSAEncryption
41:bb:d6:1b:58:9b:e3:c2:7f:0e:57:6a:74:45:85:55:13:5c:
ca:a3:1b:99:a8:ae:1f:fd:af:e5:72:76:4a:19:a0:b6:61:70:
8f:c0:e9:7a:b4:a8:d3:0d:dd:95:6f:c6:1a:3c:5c:5a:ed:2e:
6a:12:34:d5:a3:dc:fe:56:20:16:ce:58:af:c5:a1:d8:ee:95:
be:60:fc:17:83:ca:8e:3b:36:10:34:8e:7a:f5:e5:c5:7d:a8:
00:7a:65:4c:c3:f8:3f:dc:92:96:4c:f8:40:93:ea:70:44:97:
a1:b8:eb:fc:12:89:6d:04:05:09:19:29:38:75:84:17:ba:07:
41:c3:1c:bd:9c:b1:0f:62:71:33:66:04:7f:38:3d:50:ff:59:
9f:58:e1:f6:31:a1:29:ce:91:d9:79:14:8f:63:36:b6:ff:04:
3f:89:fd:4b:03:d6:49:d7:8a:7c:76:8b:4f:eb:62:58:4b:3f:
42:02:89:db:28:01:c5:80:8d:d7:d9:26:00:85:54:9c:75:f6:
2d:58:cd:5b:ff:be:57:2d:01:b8:5e:f6:18:35:5a:ba:da:68:
5e:76:86:b4:15:ef:a8:d2:da:54:96:b1:df:17:11:78:64:61:
dd:80:b4:cf:2c:c1:22:e5:a4:99:0b:a9:6b:10:1d:49:ce:5a:
c8:d5:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org