Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/RPiLPhTFQJtJKrMW6PdSX2L3c_4.roa
File: RPiLPhTFQJtJKrMW6PdSX2L3c_4.roa (raw, json)
Hash identifier: g40PIyttRV9jF0DPC7tjuhY/8xxIQSPAkQknoHsdrtY=
Subject key identifier: 44:F8:8B:3E:14:C5:40:9B:49:2A:B3:16:E8:F7:52:5F:62:F7:73:FE
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 01856C4135A4CC5999833F5047740783C200
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/RPiLPhTFQJtJKrMW6PdSX2L3c_4.roa
Signing time: Sun 01 Jan 2023 07:34:50 +0000
ROA not before: Sun 01 Jan 2023 07:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61290
IP address blocks: 2a0f:8900::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:35:a4:cc:59:99:83:3f:50:47:74:07:83:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jan 1 07:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44f88b3e14c5409b492ab316e8f7525f62f773fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:0d:cd:e6:37:07:1b:c2:50:60:8e:de:4b:
4f:af:75:e9:75:28:e5:49:78:0e:01:20:76:36:b7:
50:e4:b5:50:b8:44:ab:4c:c2:ca:3a:e4:aa:6c:5e:
c0:dd:00:54:9c:b1:fc:52:d3:e9:2b:e5:5b:d6:fe:
05:9c:53:92:73:03:08:e8:4f:b8:7f:2a:7e:cb:9c:
42:f3:2f:02:56:3e:8f:2d:e6:36:2e:fc:e7:02:72:
42:77:5a:c4:ef:0c:08:83:95:3e:d2:d2:82:66:0f:
fc:d8:98:bc:20:51:1b:a5:d6:c6:32:c6:9b:89:70:
97:37:16:f7:65:5a:fc:1d:f1:fb:c8:75:57:bf:9c:
9c:4d:e4:3d:b2:42:65:c3:07:15:d4:c4:6f:7a:e9:
cd:d0:43:7b:d3:01:ff:ad:dc:e1:29:db:92:49:2e:
f6:df:0c:00:8d:d3:25:97:17:57:e7:84:ac:aa:81:
e0:55:7c:40:c8:5e:54:b3:cf:bd:aa:af:2c:5a:10:
ec:51:ad:29:64:aa:4e:ed:41:58:fc:a5:c7:b6:8e:
cb:7c:53:94:76:8a:00:54:5a:09:f6:d3:60:2e:67:
88:b0:a0:47:29:98:61:bf:dc:f1:1b:58:21:d5:87:
31:c1:8f:ca:00:7b:74:43:63:70:5c:5f:58:da:b2:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F8:8B:3E:14:C5:40:9B:49:2A:B3:16:E8:F7:52:5F:62:F7:73:FE
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/RPiLPhTFQJtJKrMW6PdSX2L3c_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:8900::/29
Signature Algorithm: sha256WithRSAEncryption
ac:5f:4c:8d:ad:70:fe:0d:14:97:27:16:09:fb:da:3a:b2:0a:
11:f4:7b:f3:34:e4:e6:15:90:e2:c6:59:9c:d7:3f:65:6e:1c:
8c:ce:cb:ce:9a:76:0b:c1:8d:91:00:f3:05:d8:3a:81:10:5d:
8c:23:2e:7b:a2:fc:9d:99:d9:68:12:14:df:9e:5b:1a:ad:be:
6b:2f:08:01:33:c4:b9:a7:18:9e:1c:92:12:c2:1a:10:88:0a:
77:ce:5b:3a:81:e5:0e:38:bf:2d:2e:1f:92:9e:0d:ce:9f:4f:
2d:d0:aa:5e:87:42:8f:b8:87:5d:6a:50:74:cb:33:93:7c:14:
2f:f4:20:0b:91:23:f8:66:f2:f2:25:ca:d2:32:09:34:ea:10:
47:ff:7e:dc:3f:4c:ca:b1:76:04:b3:dd:d9:dd:a3:48:71:1e:
ee:60:b3:d0:f5:42:fe:ac:6c:a8:57:1a:6f:ee:11:13:a6:af:
3f:4a:86:70:7c:19:6b:2a:15:3c:ff:df:ca:bb:b1:9e:cc:2b:
0d:4c:d0:57:00:1f:96:19:27:aa:39:07:9e:52:b0:4a:60:2b:
ca:50:49:3b:47:35:5e:f4:84:bd:e5:dd:1f:0c:f5:8f:ee:81:
58:9a:b7:05:ce:8d:2d:91:da:89:57:88:c7:9b:8f:ae:71:da:
65:d5:40:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:18 2024 by rpki-client on console-ams.rpki-client.org