Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/wvl5FkE9pGEKU34sBSLq3Gs3g6I.roa
File: wvl5FkE9pGEKU34sBSLq3Gs3g6I.roa (raw, json)
Hash identifier: 4MzxO6LIe44ADreBSksQrDbwArNEs1fZNo7XlgYWDaY=
Subject key identifier: C2:F9:79:16:41:3D:A4:61:0A:53:7E:2C:05:22:EA:DC:6B:37:83:A2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0189DF1A6D3A5FF042DA361013AD0FED45A1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/wvl5FkE9pGEKU34sBSLq3Gs3g6I.roa
Signing time: Thu 10 Aug 2023 10:59:58 +0000
ROA not before: Thu 10 Aug 2023 10:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47757
IP address blocks: 2a0c:b641:aa0::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:1a:6d:3a:5f:f0:42:da:36:10:13:ad:0f:ed:45:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 10 10:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2f97916413da4610a537e2c0522eadc6b3783a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:f7:14:af:b2:b1:b3:71:27:ce:e1:4c:2c:
d8:b1:49:db:1c:7b:e0:9c:4b:e2:4c:ef:4e:de:bf:
d9:1d:d6:6b:8b:25:86:56:47:bf:9a:ea:8b:30:d8:
46:be:a6:8c:f7:f3:56:7d:60:07:38:01:7a:00:1c:
f3:21:b3:16:d2:d4:7b:63:9a:46:f6:c4:67:20:56:
eb:a6:fd:5c:3f:41:85:74:5b:cb:e0:31:6e:c8:43:
4e:2a:1a:a9:c6:a9:1d:ca:57:e5:61:ab:04:6f:b7:
42:fa:1d:21:93:7e:7c:5d:c3:7d:94:1e:08:1f:8a:
5c:c4:c8:62:bc:25:a0:4d:15:47:85:9a:c9:45:64:
83:fb:0f:fb:37:9c:df:73:bf:83:a0:50:3f:eb:d0:
44:2a:9f:78:65:bf:26:f0:84:60:ad:d3:01:57:d1:
b7:88:be:2d:02:fd:eb:12:af:76:a1:b3:5d:de:1d:
a8:56:5f:d1:48:16:38:15:14:cd:f4:7f:db:82:a7:
77:da:38:c1:27:27:df:dc:83:64:a9:4f:af:2e:33:
ee:16:da:e4:4d:ea:62:4b:e5:d5:96:62:88:19:df:
11:14:6d:18:28:93:12:62:9a:c2:bc:08:56:5e:4d:
8e:22:a7:70:e7:9e:16:b8:93:1c:34:67:98:99:9d:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:79:16:41:3D:A4:61:0A:53:7E:2C:05:22:EA:DC:6B:37:83:A2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/wvl5FkE9pGEKU34sBSLq3Gs3g6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:aa0::/44
Signature Algorithm: sha256WithRSAEncryption
9d:7b:bf:8d:df:0a:01:1a:89:81:65:d4:70:70:8a:3b:00:98:
6e:3b:1a:95:a9:7e:56:6a:1e:1f:95:20:ad:ed:08:bf:cc:c3:
12:34:16:c9:c1:98:2b:33:44:fc:2b:aa:e2:60:e3:92:c9:38:
ed:ce:17:55:bc:1b:ed:b2:45:42:97:0c:ca:6c:2a:21:77:34:
0a:fd:e4:0c:4d:fb:cd:5c:83:31:2a:29:70:d7:8c:01:28:64:
a2:41:58:f9:c0:97:98:11:5c:45:5d:2c:6f:32:18:3b:53:5d:
dd:73:af:6b:f5:d2:38:1c:43:e6:5c:4c:81:29:6c:b4:96:b7:
92:d2:7f:3e:67:1f:33:42:3d:1d:9c:58:c5:7b:3e:b9:bf:69:
6a:ff:53:14:b4:43:d7:ea:e8:b6:0b:63:7a:2b:23:12:17:19:
cb:07:10:ac:b2:ae:ad:dc:44:95:7c:ff:17:74:5a:64:d8:22:
83:3e:d9:07:de:5f:77:36:3a:e8:9c:f4:1d:23:dd:90:c6:00:
c1:3e:a3:f3:5f:3a:c0:3d:0e:95:0f:9b:85:49:0a:c4:2f:da:
ce:5c:fa:f8:73:bd:f7:a7:44:e6:ca:ac:54:7c:16:17:24:52:
bc:29:f3:b6:06:f1:25:40:02:49:57:6f:ab:13:e3:81:0e:be:
66:81:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:16 2024 by rpki-client on console-fra.rpki-client.org