Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/pTIq5cgrncagxrlpRtHvdxUchpI.roa
File: pTIq5cgrncagxrlpRtHvdxUchpI.roa (raw, json)
Hash identifier: LtNpJ4kY53DltkGwqNRAi+tgpZSTQLQletYdfzMBzrg=
Subject key identifier: A5:32:2A:E5:C8:2B:9D:C6:A0:C6:B9:69:46:D1:EF:77:15:1C:86:92
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 01856C4A7206129956B825290AC9CCAEB8CC
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/pTIq5cgrncagxrlpRtHvdxUchpI.roa
Signing time: Sun 01 Jan 2023 07:44:56 +0000
ROA not before: Sun 01 Jan 2023 07:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211603
IP address blocks: 2a0f:4d00::/29 maxlen: 48
Validation: Failed, certificate revoked on Sun 08 Jan 2023 20:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:72:06:12:99:56:b8:25:29:0a:c9:cc:ae:b8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Jan 1 07:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5322ae5c82b9dc6a0c6b96946d1ef77151c8692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:42:48:8c:b8:65:88:de:51:07:2b:b3:82:5b:
4c:45:67:a0:ef:38:7c:90:81:74:60:c4:a8:85:2b:
7e:ce:ac:f9:7d:de:0b:92:11:14:98:df:da:7c:d5:
dc:f7:98:de:88:af:8c:a5:b9:4f:5b:aa:60:1d:c5:
01:7e:ad:f5:83:51:ae:24:a0:9d:ea:1a:5e:d3:44:
82:fd:f5:72:90:95:24:3e:d2:c2:de:e0:8f:a8:4f:
09:72:75:a4:e1:41:d4:96:b2:ca:80:90:d0:53:c9:
97:22:1e:67:c4:21:63:99:d7:96:b1:08:62:1a:91:
9f:e2:c7:73:76:22:4b:d0:7b:b0:8c:c7:46:c2:d8:
21:4c:6e:55:5d:1d:a1:41:14:ae:3a:be:67:2e:b8:
34:27:3a:e9:96:a6:f2:14:3f:d9:19:84:e2:e0:34:
51:9e:6b:71:3f:97:b7:1f:d7:d1:85:f1:0e:9d:39:
58:f4:8e:18:28:37:bf:9d:f9:62:0e:dd:02:4e:55:
ce:29:15:c5:1a:01:6b:16:27:76:c2:35:f4:c9:ff:
91:03:f9:dd:e6:57:ed:1e:3a:a2:67:83:9f:1c:6c:
00:6c:d1:72:95:ac:22:3f:dd:37:61:83:50:cc:88:
21:b5:0a:26:4c:2c:2a:ff:d4:92:91:9b:18:f6:e1:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:2A:E5:C8:2B:9D:C6:A0:C6:B9:69:46:D1:EF:77:15:1C:86:92
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/pTIq5cgrncagxrlpRtHvdxUchpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
6f:98:a0:7b:9d:7e:32:e2:e3:16:a6:cd:64:06:b7:75:64:20:
cb:a0:1b:0d:d9:44:3c:25:17:0c:eb:7c:13:d5:00:a4:11:ca:
88:94:7a:70:c3:06:1c:ca:43:61:fe:ce:ad:4a:5d:92:5b:4a:
a1:4a:4d:78:73:22:f6:91:37:0d:6a:23:dc:98:68:2c:fb:8d:
86:aa:a1:66:77:2a:79:91:11:b5:0d:bc:29:65:cc:28:e5:19:
e4:9a:ef:37:17:7e:cf:76:39:21:09:e1:ba:a1:24:83:cf:c3:
a3:67:4f:23:fb:ab:8a:c8:15:68:72:a3:ec:a6:32:40:e9:89:
2d:da:a3:f9:90:d9:77:22:7b:d6:b1:83:0b:4d:0d:40:49:cf:
37:4d:c4:29:88:10:0e:cc:bd:25:3d:dd:50:69:a5:54:a9:36:
0d:4a:e5:6a:b6:76:32:82:37:c2:d9:60:0f:7d:46:c2:a1:89:
92:ec:f8:c8:a2:ff:e7:94:01:06:68:36:08:5b:50:a2:28:20:
a9:0d:ac:36:3f:41:17:60:20:9a:e4:6b:07:7a:57:13:2b:05:
ad:76:a0:56:ee:ca:1f:85:d8:82:25:a1:5d:57:59:78:56:c9:
78:06:88:f2:59:67:0f:3c:63:2a:0c:66:54:ec:70:e6:49:41:
30:17:cf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:02 2024 by rpki-client on console-ams.rpki-client.org