Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/wfYZ2h_2hoOCdbqLTkTAjT_jqiM.roa
File: wfYZ2h_2hoOCdbqLTkTAjT_jqiM.roa (raw, json)
Hash identifier: 1TyA8cqwOLrbkin1mgK2Ug1kq9HfUMVjkNUhYGTy1cw=
Subject key identifier: C1:F6:19:DA:1F:F6:86:83:82:75:BA:8B:4E:44:C0:8D:3F:E3:AA:23
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 01894E2ABF2A81E003A6DBBA395BB0F78E62
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/wfYZ2h_2hoOCdbqLTkTAjT_jqiM.roa
Signing time: Thu 13 Jul 2023 07:32:51 +0000
ROA not before: Thu 13 Jul 2023 07:32:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47909
IP address blocks: 2a05:a7c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:2a:bf:2a:81:e0:03:a6:db:ba:39:5b:b0:f7:8e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Jul 13 07:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1f619da1ff686838275ba8b4e44c08d3fe3aa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:87:71:e6:46:dd:8d:7f:9d:29:85:07:12:
15:2a:c8:71:02:2d:38:37:d0:4c:5a:81:c1:a7:be:
ca:80:fb:4b:27:53:48:e7:61:f5:02:46:0e:5d:94:
60:50:77:29:88:a6:46:42:eb:a0:66:76:30:0d:a1:
d5:a7:c4:56:15:5c:88:a5:77:80:ff:c2:47:d3:d9:
b4:e0:8f:d9:6c:38:d8:f8:dc:55:47:6f:76:c2:34:
6d:87:2c:b6:38:95:c1:26:b7:c3:26:e9:b2:6a:d0:
0c:21:61:19:51:84:64:57:77:2b:07:ec:fe:ea:35:
3c:32:d4:fd:4c:38:bd:67:3f:10:3d:46:e3:b1:62:
bc:af:b8:0a:e1:56:6c:a8:cb:ce:75:eb:dd:99:c2:
94:68:b9:e7:9f:32:ae:92:da:0d:a7:0a:88:4c:1b:
19:5a:74:77:63:0b:1e:04:2f:6f:8f:c0:26:c6:45:
63:ab:e9:16:71:e2:28:6a:e5:9f:e3:60:f8:b1:59:
fc:6f:cb:e7:52:c4:3a:a0:dc:2a:42:5f:30:62:b3:
b7:ae:40:c7:27:f6:52:e1:47:48:8b:36:8b:b7:e8:
e8:ef:1a:ff:14:e1:2e:84:6f:8e:75:14:46:65:85:
42:70:49:3f:ea:42:cd:b0:63:7d:9a:5d:28:cd:ca:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F6:19:DA:1F:F6:86:83:82:75:BA:8B:4E:44:C0:8D:3F:E3:AA:23
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/wfYZ2h_2hoOCdbqLTkTAjT_jqiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:a7c7::/32
Signature Algorithm: sha256WithRSAEncryption
61:a2:81:6d:ab:5e:0a:4f:85:ac:e9:53:9b:ff:74:c2:d7:b1:
61:1c:79:24:c7:f9:6c:47:c1:df:db:58:f1:fa:64:28:e5:db:
ee:24:51:a8:ee:be:8c:c2:ee:c0:b6:fe:2c:d0:7f:e6:48:51:
ea:77:33:91:19:81:f7:f1:f9:68:23:dd:b6:e1:10:09:e5:d7:
28:91:13:2b:b1:46:4b:f7:4a:bf:9f:74:7c:22:e1:fb:32:92:
a7:2f:b4:54:74:78:cf:2d:9b:ea:88:a2:50:f1:db:ea:e6:33:
76:9d:fb:31:06:ff:f7:c3:33:39:18:43:18:fc:c8:61:aa:89:
bf:56:0e:37:83:4e:a9:2e:1c:3a:b5:d3:bb:dd:c8:c1:58:c5:
03:27:6f:5f:10:27:59:d9:c0:2d:56:9b:ca:69:e5:eb:92:86:
dd:25:19:fa:96:0b:77:d1:41:f5:8f:d6:d1:37:90:75:b4:ed:
8f:63:d3:71:82:90:5f:80:8f:93:7d:ec:92:ab:0d:f5:b4:a7:
bc:63:ff:47:55:a7:f9:5e:9c:c8:20:48:8e:5f:6a:64:89:48:
fa:4b:c2:da:86:04:6f:72:d7:50:8a:97:60:9e:e3:68:63:9e:
99:e1:cd:72:8b:b8:b3:26:79:17:28:4c:18:37:40:75:e4:80:
c4:5e:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org