Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/wenvF-EOWz673CK_kyEzZ7y-9Sc.roa
File: wenvF-EOWz673CK_kyEzZ7y-9Sc.roa (raw, json)
Hash identifier: HBNTE0FEpzA/Iia6zaG5JH+5EAFq2Yp5AOBvi0fgLns=
Subject key identifier: C1:E9:EF:17:E1:0E:5B:3E:BB:DC:22:BF:93:21:33:67:BC:BE:F5:27
Certificate issuer: /CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Certificate serial: 018573438D45DA365E858BF4DE422A7542DA
Authority key identifier: C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/wenvF-EOWz673CK_kyEzZ7y-9Sc.roa
Signing time: Mon 02 Jan 2023 16:14:44 +0000
ROA not before: Mon 02 Jan 2023 16:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20932
IP address blocks: 2001:67c:1368::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:8d:45:da:36:5e:85:8b:f4:de:42:2a:75:42:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Validity
Not Before: Jan 2 16:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1e9ef17e10e5b3ebbdc22bf93213367bcbef527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5f:32:46:fa:f8:ec:66:56:d0:5a:76:94:74:
ad:24:4d:86:8d:85:ed:31:fa:87:4e:ef:50:4d:c9:
ec:22:44:0d:5b:ff:36:c9:a1:63:7b:e9:87:db:68:
bf:6c:49:10:58:7a:93:83:0c:29:dc:11:6c:5e:59:
13:a2:58:25:73:42:9f:a1:5a:b9:81:9f:8c:37:bc:
03:c6:fa:bd:0d:24:24:55:fa:16:ed:8c:80:65:b0:
18:c6:75:fd:b6:a1:39:3e:d3:85:20:c1:9b:22:9c:
da:3e:78:2e:a9:47:c0:a7:bc:c5:36:c5:b9:c3:30:
6e:c4:c7:b9:59:c3:fc:00:9e:c0:f3:0c:1f:22:54:
b4:9c:12:ef:6a:8b:b4:10:de:f8:ba:e3:41:9b:13:
28:06:b3:ad:58:62:26:ea:1c:80:91:43:07:8e:28:
b5:d2:7b:d5:d8:1d:36:52:da:4f:42:90:6e:64:a3:
aa:67:82:31:d3:07:78:97:c0:8a:12:e2:cf:9e:4f:
6c:d5:9b:8f:a1:f4:ac:5e:2f:7c:6b:94:11:a3:01:
81:48:ae:93:84:20:a8:d1:f9:3e:3f:14:0a:5d:82:
ee:2a:4c:5a:e5:e7:c4:df:36:89:d8:90:35:db:ee:
88:b9:93:23:5c:65:21:e3:ca:44:8d:6c:ca:34:97:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:EF:17:E1:0E:5B:3E:BB:DC:22:BF:93:21:33:67:BC:BE:F5:27
X509v3 Authority Key Identifier:
keyid:C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/wenvF-EOWz673CK_kyEzZ7y-9Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1368::/48
Signature Algorithm: sha256WithRSAEncryption
0f:90:1c:76:94:e2:83:ab:2b:fe:31:14:4f:d2:07:c0:c6:5b:
5c:c4:7f:02:a0:3c:ab:57:f9:64:80:05:47:27:39:11:21:4d:
92:bc:0f:f4:3e:f2:84:27:e6:16:6a:96:d3:14:55:39:11:1d:
6b:9d:f9:f7:2c:a6:84:90:dc:79:f1:10:d9:07:d8:c1:7f:4c:
d4:a3:28:c9:32:98:5d:c1:01:60:31:7d:68:00:ef:9f:5e:93:
d4:ca:6e:4c:a3:4c:41:ba:79:82:56:1f:68:59:c7:cb:c8:2f:
17:fa:ab:e4:b3:58:4e:11:8e:d9:1c:e8:18:c5:c5:f2:10:11:
98:e3:10:35:4a:10:0c:f9:12:a4:be:bc:4e:ed:8c:4d:ed:1f:
85:bb:ac:54:aa:38:bd:e9:62:7f:94:b8:cf:ae:0e:16:e6:14:
9e:32:75:9c:41:9a:08:4c:f6:d5:e2:7c:30:3a:95:3c:ee:aa:
28:ad:84:c2:55:c7:87:42:35:90:46:21:dc:80:1d:65:94:6b:
16:3f:be:3c:e3:b5:e5:7c:83:3d:8c:4d:02:1c:b6:10:f8:26:
78:33:e2:7e:55:af:a4:7f:65:54:1b:ff:57:78:bb:89:b0:fa:
bc:be:68:ca:88:b2:1a:a1:60:6f:9b:6d:9f:52:5f:2c:49:5c:
fd:8e:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:28 2024 by rpki-client on console-ams.rpki-client.org