Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/ps5tUeY_aueNMZmFA6AOVIRDWAY.roa
File: ps5tUeY_aueNMZmFA6AOVIRDWAY.roa (raw, json)
Hash identifier: gAmoN0Pht0QzNhPc7xRRQj1tJuYgAsO2IQVdLXvBagQ=
Subject key identifier: A6:CE:6D:51:E6:3F:6A:E7:8D:31:99:85:03:A0:0E:54:84:43:58:06
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 018901E28DA66BD26B32DF172C99704E264E
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/ps5tUeY_aueNMZmFA6AOVIRDWAY.roa
Signing time: Wed 28 Jun 2023 12:02:51 +0000
ROA not before: Wed 28 Jun 2023 12:02:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a05:1500:910::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:e2:8d:a6:6b:d2:6b:32:df:17:2c:99:70:4e:26:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jun 28 12:02:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6ce6d51e63f6ae78d31998503a00e5484435806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:d4:d1:0d:57:72:60:d2:55:e8:85:e2:e2:
2d:65:39:fa:24:db:35:75:86:2a:63:19:2f:5e:27:
c7:1b:0e:a4:15:9a:50:5d:5e:3c:13:e9:2c:77:7e:
72:86:50:af:82:d6:c3:35:94:a1:d8:f7:7d:0f:7e:
dd:6b:4d:90:b1:c2:08:63:76:28:d3:4d:a8:49:7a:
e2:ae:42:a0:0f:04:6c:3b:4a:79:44:a0:b8:e1:87:
2a:b6:5e:50:0b:94:1d:7f:24:b7:cf:44:45:fb:bb:
f2:a4:7f:1b:42:7f:26:56:8d:89:3e:15:d4:90:da:
78:c8:10:16:c3:29:b3:34:5a:f6:39:a1:78:f5:ae:
c9:67:eb:3f:cc:72:de:e6:bc:d0:53:ea:00:f5:15:
0d:99:90:e5:78:c7:40:13:a3:41:82:c3:c3:37:a0:
1f:3f:66:f6:1c:3f:81:64:1f:09:13:3c:9e:c2:d3:
4f:a3:2f:eb:0d:ec:f9:55:dc:f6:79:d2:0a:52:1e:
e6:99:ea:ab:b1:41:81:d1:11:1a:cf:5d:0d:a4:2d:
34:45:cb:09:b9:20:30:38:f7:ac:58:75:ca:92:fa:
d4:37:c4:b1:d7:9a:1a:af:aa:6e:fe:9c:46:ca:b6:
3e:6b:01:9f:e7:0d:0b:59:82:ef:49:8c:8d:f8:18:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:6D:51:E6:3F:6A:E7:8D:31:99:85:03:A0:0E:54:84:43:58:06
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/ps5tUeY_aueNMZmFA6AOVIRDWAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1500:910::/44
Signature Algorithm: sha256WithRSAEncryption
1d:ed:d3:d3:da:55:6d:54:6a:30:df:53:04:05:1a:d2:16:61:
24:82:01:33:46:ce:f6:0e:b5:45:ef:90:10:eb:17:98:e2:a3:
8d:9d:ee:9c:eb:6f:8a:1b:a2:1c:ee:99:fd:44:6b:43:48:b9:
a7:b1:e6:c6:4c:de:34:f3:4f:37:94:61:47:fc:ee:47:b9:32:
31:fc:01:8c:d2:75:6d:79:68:2d:58:ba:60:cf:cc:c3:84:47:
43:7a:3c:ef:ce:16:c6:48:94:3b:ab:69:17:c5:53:06:55:59:
07:00:45:73:e3:14:54:94:85:3a:93:e1:26:e0:fa:25:29:da:
f0:7a:6c:92:e0:58:f6:6d:56:9e:a2:1a:6b:54:35:74:b3:12:
a9:d7:5b:bf:87:9d:4c:06:c5:18:80:62:5a:18:00:2d:db:a4:
94:0e:1d:87:46:a8:84:c6:5b:3e:9a:63:ce:a7:80:f3:f7:ee:
54:fc:bc:97:64:09:5d:69:39:68:71:42:b4:b0:1b:58:ae:6e:
4a:d5:ab:9b:0e:35:82:2e:f9:75:73:60:49:d5:2e:5a:a3:57:
b4:1d:d2:8d:27:d9:d2:0e:29:39:4d:8b:5d:f0:1f:50:66:61:
ac:5f:57:d2:0b:73:34:db:a0:8b:fd:29:61:58:69:a7:8e:e6:
22:ea:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:15 2024 by rpki-client on console-fra.rpki-client.org