Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/wrw_pqeW4aSGswlmf1q8bbTsKnA.roa
File: wrw_pqeW4aSGswlmf1q8bbTsKnA.roa (raw, json)
Hash identifier: 3PLoyoWZ72MvSt8sgJ0HjDiL9QzZEIAI0CWYekxMlbo=
Subject key identifier: C2:BC:3F:A6:A7:96:E1:A4:86:B3:09:66:7F:5A:BC:6D:B4:EC:2A:70
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 01856ECBA8E302B2AD083428D715BED17138
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/wrw_pqeW4aSGswlmf1q8bbTsKnA.roa
Signing time: Sun 01 Jan 2023 19:25:18 +0000
ROA not before: Sun 01 Jan 2023 19:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48011
IP address blocks: 2a01:4ac0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:a8:e3:02:b2:ad:08:34:28:d7:15:be:d1:71:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jan 1 19:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2bc3fa6a796e1a486b309667f5abc6db4ec2a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2e:9e:e1:c2:05:ff:fa:2f:e5:c5:53:42:dd:
d0:c6:64:24:81:50:26:24:36:53:dc:af:c9:eb:65:
0b:de:3a:d2:fe:8c:bf:90:fd:02:b1:d1:69:44:cd:
52:86:db:1c:15:a6:19:30:d1:09:32:b5:5f:c6:cc:
b6:74:cc:b5:ce:73:3d:c7:e7:f4:ea:98:70:bb:11:
a8:38:49:52:99:64:52:6b:10:1f:43:82:b6:e0:f0:
a6:bd:64:2e:f1:f2:db:1b:eb:f1:75:7c:21:b3:d8:
a4:22:31:89:ef:04:bf:e1:07:62:12:dd:0e:13:d4:
3a:65:e6:7b:47:0b:9e:b0:d0:03:06:3a:f5:4a:67:
27:5c:da:4d:a2:94:5b:6c:19:41:ba:4f:77:d7:8f:
d3:7c:f2:3e:be:52:f8:4c:f4:6d:d0:34:95:cd:f2:
1c:cc:f9:b3:10:af:6e:5f:77:34:20:b5:c6:fd:34:
d9:c5:1c:c2:fd:40:92:ba:bf:85:23:1d:c3:b6:75:
b1:62:7f:05:df:fb:8d:03:87:39:31:03:09:86:7a:
de:dd:62:6a:ad:6c:83:74:7d:73:ac:ef:26:90:e0:
ed:62:75:27:23:a5:bf:48:af:a2:12:82:f0:3a:cd:
e5:f6:ab:81:bf:ae:36:99:0c:4c:ef:67:8e:a2:f4:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:3F:A6:A7:96:E1:A4:86:B3:09:66:7F:5A:BC:6D:B4:EC:2A:70
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/wrw_pqeW4aSGswlmf1q8bbTsKnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4ac0::/48
Signature Algorithm: sha256WithRSAEncryption
59:65:07:52:65:3e:ec:17:eb:b2:c5:36:81:5e:ed:46:aa:67:
b0:46:a0:b9:a8:75:9b:29:b6:b9:b0:b3:59:4c:ef:75:b3:ae:
c7:76:34:96:a4:6a:15:3b:cb:bd:ba:ce:64:f1:d2:7e:9e:5e:
4c:21:43:f9:2c:40:e6:71:4b:25:eb:96:0c:a9:c7:3a:ff:32:
1b:e8:e5:4c:61:7f:02:31:cb:5a:a0:2d:2d:ed:a3:29:36:31:
12:f3:fa:60:7e:51:ad:34:b2:6f:6a:a7:e7:60:05:09:99:dc:
9f:85:2f:60:4f:27:24:d9:17:87:b5:60:2f:6a:e5:f0:4f:50:
ad:84:3d:85:f7:66:bc:a4:3d:51:d1:3b:7f:1f:8a:9a:02:65:
85:c7:81:13:d3:56:97:79:ca:a7:42:93:13:74:20:1e:bc:49:
df:8e:8d:7b:a0:3e:ca:c5:ab:08:5b:4d:ef:82:2f:1c:7c:ac:
02:ef:98:c7:91:50:22:ba:0f:91:2f:7b:78:b3:66:e6:4a:b7:
9b:ce:31:9c:dc:40:dd:b2:c9:cb:a9:62:d4:72:c9:cf:3d:93:
8b:af:4d:44:3a:87:5c:7c:e1:74:1d:9a:ed:54:20:94:81:41:
7f:29:f7:28:25:bc:87:27:b9:15:b1:1b:9e:f2:70:ae:6b:9c:
94:cc:e4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:48 2024 by rpki-client on console-fra.rpki-client.org