Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/W101A5zAdy6EPzZwOA7os-dulRw.roa
File: W101A5zAdy6EPzZwOA7os-dulRw.roa (raw, json)
Hash identifier: dD7aKPeHSTqCImiFWr6DUviaQJ3RcXgeS6/VVeagcR0=
Subject key identifier: 5B:5D:35:03:9C:C0:77:2E:84:3F:36:70:38:0E:E8:B3:E7:6E:95:1C
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01868C275BDF1D4458571DCDCF2EC1EAB560
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/W101A5zAdy6EPzZwOA7os-dulRw.roa
Signing time: Sun 26 Feb 2023 05:17:15 +0000
ROA not before: Sun 26 Feb 2023 05:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200566
IP address blocks: 2a0a:280:1000::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 17 Jun 2023 15:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8c:27:5b:df:1d:44:58:57:1d:cd:cf:2e:c1:ea:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Feb 26 05:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b5d35039cc0772e843f3670380ee8b3e76e951c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:f6:f8:27:17:d0:54:e5:ac:99:a3:9f:a9:
77:1e:44:28:35:e0:0b:aa:d7:53:48:8f:30:2d:d4:
a0:8e:f5:bd:34:74:38:ad:cb:26:cc:e6:1e:37:44:
27:95:0e:ca:64:81:ab:c3:57:bb:9f:3a:f8:60:50:
3a:09:9e:66:1a:a5:fe:f1:64:7c:c2:80:75:4b:2b:
5b:59:ee:34:c7:ba:9c:cd:f1:41:fe:e9:7d:32:82:
dc:b1:69:05:89:23:f4:7e:16:b9:eb:c3:41:aa:d9:
dd:bb:cd:a7:1f:76:8b:f8:13:f2:6a:ce:29:ac:11:
30:c9:0f:d9:38:82:ce:07:ba:97:b9:98:9c:76:3a:
fe:a0:e8:e1:80:ff:6b:51:f8:dc:d9:25:b8:cb:2b:
5a:af:95:c0:91:65:ca:39:ff:ae:74:7f:87:f4:10:
9b:c5:d9:67:3e:f3:53:bb:2e:9b:e8:2f:59:58:3d:
39:bb:ce:d9:74:58:dc:8a:53:b9:e7:48:89:74:9b:
35:a0:20:da:9f:50:90:e0:8e:5c:2c:38:96:43:00:
a8:da:92:8b:f5:f4:03:f5:c4:99:98:a5:c8:a9:7a:
8b:62:de:aa:7f:0f:65:dd:30:22:97:5b:3d:13:d1:
67:24:dc:1d:07:e2:62:76:3c:13:dd:f1:bb:1b:f2:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5D:35:03:9C:C0:77:2E:84:3F:36:70:38:0E:E8:B3:E7:6E:95:1C
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/W101A5zAdy6EPzZwOA7os-dulRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1000::/40
Signature Algorithm: sha256WithRSAEncryption
1c:f7:3a:43:0f:70:1e:bc:d9:a2:48:25:b6:0a:d4:8b:b9:86:
59:2c:ab:e5:ae:52:68:57:16:f1:e0:2b:67:f1:9f:80:cc:89:
46:e8:74:6d:02:45:45:66:79:60:9a:1f:62:ad:49:be:3f:a3:
78:2e:e7:f0:4f:0d:a0:f9:10:33:50:61:41:0e:bb:46:7d:d0:
5a:ce:a4:56:97:6f:da:7d:50:51:04:bc:a0:26:e2:6e:54:95:
ca:1e:63:a5:18:c8:27:32:4e:db:65:bd:68:5d:6e:ca:57:13:
39:e5:a4:9f:7e:80:5f:c4:c7:96:89:73:68:79:d2:9e:01:e7:
c7:ce:1c:3e:ea:b0:f3:53:b4:c1:d1:01:85:c8:d0:cd:72:e1:
49:06:22:c2:14:a7:6a:a2:82:f7:67:b7:8b:20:6a:24:85:05:
0e:64:0c:63:87:58:e1:41:11:79:27:f0:7f:6b:9c:f8:e8:34:
8a:eb:4f:11:61:22:14:a3:52:64:31:db:30:e2:8c:06:6a:47:
0b:1f:cd:e7:93:4d:88:da:72:7e:60:dc:bf:83:18:2f:e5:76:
79:53:89:e5:32:52:8b:44:b9:aa:f2:34:49:31:54:fb:47:ec:
a3:9e:08:47:b2:bf:e4:ce:bd:d7:0d:70:c0:f9:d9:d8:df:29:
d8:f9:5f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:22 2024 by rpki-client on console-fra.rpki-client.org