Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/LId9H1fCTIIZQW0qXyOF5uWvi1I.roa
File: LId9H1fCTIIZQW0qXyOF5uWvi1I.roa (raw, json)
Hash identifier: WVB9AvCGN0a3EwvrXyh8rt2H+TVCyogfY0zUpbDKXgY=
Subject key identifier: 2C:87:7D:1F:57:C2:4C:82:19:41:6D:2A:5F:23:85:E6:E5:AF:8B:52
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 01875BDF6F62689477F2B584B86E2A7FABC4
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/LId9H1fCTIIZQW0qXyOF5uWvi1I.roa
Signing time: Fri 07 Apr 2023 13:19:42 +0000
ROA not before: Fri 07 Apr 2023 13:19:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199018
IP address blocks: 2a05:4140:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Jul 2023 14:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:df:6f:62:68:94:77:f2:b5:84:b8:6e:2a:7f:ab:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Apr 7 13:19:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c877d1f57c24c8219416d2a5f2385e6e5af8b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ce:cf:6b:4f:df:7b:7d:fe:4e:5c:9a:65:56:
01:76:f0:2c:d0:6a:3a:6d:dc:18:e7:b5:cc:a1:4d:
15:86:06:6d:e1:06:7a:60:9d:68:70:53:50:0a:dc:
22:83:fb:b8:bc:63:67:35:a2:e9:8f:47:00:de:26:
50:30:f6:e6:3c:15:bc:9e:ca:a4:49:ea:45:a4:0b:
7e:bb:77:86:0f:9a:3b:62:92:85:4f:bd:e8:13:9d:
6b:35:7a:7b:1c:cb:0b:02:24:06:96:32:3d:f7:09:
bb:8f:39:4a:88:e4:fb:12:7d:c9:7d:96:4a:27:87:
61:ce:07:2b:14:66:d9:b3:fd:8c:df:82:7f:21:9f:
ce:1b:cb:f4:47:c7:1b:4c:27:90:18:18:02:65:28:
6b:14:4e:73:e7:b4:f1:e1:79:92:18:3b:59:e5:57:
bd:21:3b:da:d6:c1:42:54:a9:08:f3:32:06:85:8f:
f3:21:56:26:f6:d5:50:8a:af:d5:37:47:d5:33:ad:
b6:4a:f8:f9:d2:5f:6e:d3:35:4a:b8:5b:d4:25:12:
ea:58:13:54:da:fb:3f:56:f9:5f:fb:ed:6f:d9:83:
08:c3:13:47:17:2b:a9:d1:8b:05:a4:d0:32:01:d4:
f1:87:a8:8d:62:6f:61:2c:d0:16:b6:eb:ec:d1:de:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:87:7D:1F:57:C2:4C:82:19:41:6D:2A:5F:23:85:E6:E5:AF:8B:52
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/LId9H1fCTIIZQW0qXyOF5uWvi1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:25::/48
Signature Algorithm: sha256WithRSAEncryption
53:d0:19:0c:45:7f:32:d7:e1:ce:05:ad:98:06:03:84:47:74:
c8:1e:9d:4e:17:ef:52:52:55:0c:af:8a:a8:a8:02:35:30:b9:
09:25:ee:59:2d:12:40:51:63:25:6c:4a:28:47:fd:14:fb:18:
0c:93:00:a4:aa:fd:93:ff:d0:e5:f1:09:dd:81:bb:48:ef:36:
8e:85:64:2c:71:19:2d:ef:d8:eb:61:df:08:09:3c:cf:4f:db:
c5:78:e3:19:81:a6:0e:f9:0a:fb:51:6b:25:15:e2:5c:b9:90:
f5:43:80:0e:f5:28:ee:2b:93:90:f8:db:2f:f0:d0:1c:45:72:
32:ec:9e:c6:a1:79:b5:5c:6f:f7:7f:6c:d5:78:48:3c:35:a3:
e5:cc:b1:ee:3c:bc:9e:9b:4a:84:4a:4f:40:68:a4:31:79:a2:
55:a0:2e:da:b9:d9:cc:c8:aa:99:79:e9:d0:94:96:db:d0:7c:
1d:45:7d:6c:f4:12:ed:8c:7d:9e:1b:d5:ea:80:c4:86:5f:c9:
a5:16:7c:4f:ec:36:1c:5c:6a:58:5b:bb:92:6f:eb:fc:4c:97:
d6:38:8c:ab:ad:23:dc:a4:17:44:a6:91:13:76:59:4f:26:f3:
ab:d0:8e:30:85:2d:12:92:99:97:b1:13:20:22:04:15:49:e2:
4e:c4:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org