Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/sW4M5GQ_QIopqL-r1FOswMxaxWk.roa
File: sW4M5GQ_QIopqL-r1FOswMxaxWk.roa (raw, json)
Hash identifier: 9T3AAavT75utLv36ioZVgqKMmweX9hSzRzG37UybBxc=
Subject key identifier: B1:6E:0C:E4:64:3F:40:8A:29:A8:BF:AB:D4:53:AC:C0:CC:5A:C5:69
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01856CCB0226836F8E4A4D7CEE57A246BD79
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/sW4M5GQ_QIopqL-r1FOswMxaxWk.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64487
IP address blocks: 2a0d:2406:2000::/39 maxlen: 39
Validation: Failed, certificate revoked on Tue 17 Jan 2023 18:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:02:26:83:6f:8e:4a:4d:7c:ee:57:a2:46:bd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b16e0ce4643f408a29a8bfabd453acc0cc5ac569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:c7:85:67:76:1d:ff:5f:f4:32:a8:e7:66:
42:9a:ae:21:0a:aa:3e:4c:a1:0e:98:7f:b3:98:78:
77:cd:3f:fb:67:f7:6f:9b:fc:2f:89:fb:a7:83:ee:
c9:55:17:5b:6d:7b:31:5c:94:63:e4:8e:e6:e9:38:
93:be:9c:0c:19:dd:1e:2b:60:7c:7f:a4:de:1c:b8:
e2:7a:03:8b:12:ac:d1:7e:52:6a:a1:eb:cd:2c:a6:
2a:d9:9d:ef:60:20:3e:2d:f5:fd:2d:3c:85:97:1c:
78:8c:da:69:59:a6:6f:b9:aa:83:bd:92:94:e1:e1:
d8:6f:b4:33:80:d2:87:af:fc:6e:a4:5d:6b:67:f8:
73:05:67:54:db:bf:ea:d9:9c:ed:bc:24:80:14:f6:
e1:7c:67:85:78:fc:a6:dc:1c:93:09:7f:0c:88:3a:
88:85:44:51:41:40:64:a5:c1:64:ee:5a:6d:1b:ce:
05:54:57:6b:a4:aa:cd:5b:da:4b:77:b0:fd:4b:72:
ef:7d:2b:bc:39:f0:12:ee:a0:02:02:2c:5c:1e:28:
be:32:6d:1f:a3:a4:c3:e7:b0:bc:ca:11:29:3b:59:
6f:4a:9d:61:11:a4:69:da:03:06:ac:36:a7:68:b3:
b8:c3:bf:15:07:04:71:60:55:b9:36:6a:5d:0f:31:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6E:0C:E4:64:3F:40:8A:29:A8:BF:AB:D4:53:AC:C0:CC:5A:C5:69
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/sW4M5GQ_QIopqL-r1FOswMxaxWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:2000::/39
Signature Algorithm: sha256WithRSAEncryption
8a:58:51:eb:be:52:41:c5:f1:83:64:9a:b5:0e:17:48:f5:8f:
b8:e0:ed:7f:cb:c7:bd:3c:0a:7d:ba:8f:e4:fc:47:22:c2:cb:
e4:dc:58:6f:5c:9c:49:f4:bb:6a:ea:2b:9a:99:48:ec:8c:57:
83:d8:d3:90:40:83:fe:c9:b5:2e:4b:44:fc:0d:fe:b7:59:31:
51:a6:79:34:45:12:00:74:b6:55:33:68:98:e6:25:2d:7c:d0:
08:ff:4f:fc:e9:68:dc:a4:22:ea:5e:5a:c7:1c:ce:25:8c:eb:
fc:e5:91:63:80:99:03:c7:d7:30:dc:7e:8a:14:41:44:14:cb:
3d:f5:32:0d:be:00:59:58:f2:f6:4f:6b:09:c9:8f:9e:c0:97:
36:a0:ae:93:8a:eb:f5:de:d3:58:3c:2e:7d:ab:7d:03:10:ac:
a9:94:3c:5e:48:1e:e3:7a:e7:0a:21:4e:be:e9:4c:6a:f4:ba:
c7:5a:60:eb:a5:42:4d:1e:bb:cd:ed:ca:cf:5c:ce:be:9f:55:
ac:5d:dc:3e:0d:93:10:1f:bb:fd:d2:43:b6:99:c7:75:71:44:
be:a4:51:63:dc:0f:6d:66:75:14:78:16:c5:45:ec:38:7c:7e:
85:95:c8:03:d5:dd:06:30:02:ae:6a:df:db:98:67:32:7c:ea:
aa:58:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:00 2024 by rpki-client on console-ams.rpki-client.org