Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/Ws03scwes2YflQSiRCniLNHTkEo.roa
File: Ws03scwes2YflQSiRCniLNHTkEo.roa (raw, json)
Hash identifier: z9ZHdbNMmvZhDIJ++JbjUjHVIvjz9XQjJdFCin+/J2I=
Subject key identifier: 5A:CD:37:B1:CC:1E:B3:66:1F:95:04:A2:44:29:E2:2C:D1:D3:90:4A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 018AD38ED3188266D249CCFC455E3C92AC29
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/Ws03scwes2YflQSiRCniLNHTkEo.roa
Signing time: Tue 26 Sep 2023 22:14:27 +0000
ROA not before: Tue 26 Sep 2023 22:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216352
IP address blocks: 2001:67c:c4::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 29 Sep 2023 07:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d3:8e:d3:18:82:66:d2:49:cc:fc:45:5e:3c:92:ac:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Sep 26 22:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5acd37b1cc1eb3661f9504a24429e22cd1d3904a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:50:3b:3a:3c:e8:3a:9a:dd:08:8f:3c:fe:
cf:32:1d:49:7a:3e:8d:c2:a4:c8:68:8c:c5:5b:4b:
06:db:55:cb:41:7b:69:2b:28:4b:93:44:46:67:88:
5f:f9:ca:7d:2d:1d:21:b3:8b:d1:db:23:00:ff:0d:
57:6c:cb:6b:3f:0c:04:a1:ec:c2:6c:eb:d7:39:bd:
35:4d:b3:7a:11:94:bb:90:32:af:83:cb:b4:73:4e:
53:c9:30:4a:38:45:b8:72:38:0b:02:9f:fe:46:ac:
30:79:7d:fd:f6:c1:75:02:2a:97:3d:b8:5b:e4:1f:
9c:cb:31:da:ef:35:3e:e8:b3:b8:52:a3:ef:cf:83:
49:ee:1f:6d:9e:65:ed:82:78:be:92:78:8a:91:a7:
71:a3:35:56:a7:88:6b:58:1a:13:cb:bf:0c:b5:58:
ed:31:79:a5:f1:08:fa:ba:98:1c:93:41:58:40:6d:
ff:2b:af:f1:07:4d:18:24:38:24:15:4f:60:7d:5e:
4b:cb:d7:74:f4:ef:1f:a9:43:68:26:2d:a8:06:e3:
cb:71:80:93:a0:db:f8:55:cf:df:5d:f0:2c:20:3e:
89:c5:31:1f:1d:ed:b3:88:26:51:b6:62:f5:5c:cc:
2d:a3:42:07:23:4a:15:e0:fc:9b:ae:88:74:fc:8d:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:37:B1:CC:1E:B3:66:1F:95:04:A2:44:29:E2:2C:D1:D3:90:4A
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/Ws03scwes2YflQSiRCniLNHTkEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c4::/48
Signature Algorithm: sha256WithRSAEncryption
14:c3:2e:38:fe:16:a0:f2:1d:86:df:5f:8f:d8:5c:5e:2c:44:
33:fe:3c:f4:07:d8:62:1e:d8:f5:13:b2:f8:50:a9:69:f3:9e:
9f:d4:ce:8f:a2:85:c5:e7:2c:9a:38:d1:0b:4a:ca:7d:e9:5c:
3b:f6:ef:12:29:cb:bb:80:be:72:77:8c:28:18:d9:82:aa:d7:
32:75:89:ff:3f:9a:31:ba:60:7e:b4:49:4e:e3:f9:45:a7:f0:
5a:00:84:5a:f0:b7:3a:86:97:eb:39:5e:92:3d:a6:eb:1c:55:
4e:de:4c:6c:a2:ce:2e:25:90:f6:11:c9:d2:e2:b0:57:5c:07:
29:16:a4:8d:1f:93:bc:2a:b9:f2:99:26:b0:4b:84:9a:62:c1:
22:e2:e5:8d:03:04:da:a5:00:22:8f:79:e4:19:97:74:16:02:
46:42:a1:0b:6f:0b:a8:bb:d2:c2:37:b3:06:40:3e:cd:ce:75:
03:84:95:fc:e2:c3:78:2e:75:86:76:2f:fd:71:d8:e0:39:c9:
c9:33:72:30:64:55:6f:e1:02:60:95:b6:90:2f:8e:0e:f5:2a:
89:89:c3:7b:7c:4d:9d:a1:2e:f7:8d:94:4b:7b:f5:c6:31:90:
bc:e2:fa:e4:11:07:c7:0c:f9:bc:d8:de:77:3c:87:1e:30:eb:
ac:7c:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:18 2024 by rpki-client on console-ams.rpki-client.org