Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/W-5yeDnWuGvJ9SroIPUqhKVId48.roa
File: W-5yeDnWuGvJ9SroIPUqhKVId48.roa (raw, json)
Hash identifier: 90gSbxaGR2rNX3BcR3QSZQTsCcvCN0dJiV5i83xcaZU=
Subject key identifier: 5B:EE:72:78:39:D6:B8:6B:C9:F5:2A:E8:20:F5:2A:84:A5:48:77:8F
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0189DF2F7B89FF99CF636963AE29EB0D977D
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/W-5yeDnWuGvJ9SroIPUqhKVId48.roa
Signing time: Thu 10 Aug 2023 11:22:58 +0000
ROA not before: Thu 10 Aug 2023 11:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47778
IP address blocks: 2a13:a5c7:1000::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:2f:7b:89:ff:99:cf:63:69:63:ae:29:eb:0d:97:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Aug 10 11:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bee727839d6b86bc9f52ae820f52a84a548778f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:30:aa:6f:6a:97:06:1b:4e:bf:1f:b0:6f:
f2:45:ec:ad:ff:be:a0:82:55:d3:00:e5:04:64:f5:
bc:04:7f:9f:62:b2:e3:70:4e:74:2c:78:54:33:e1:
47:da:f6:61:23:9b:13:52:95:75:d0:02:64:ac:db:
04:d1:14:07:12:0c:eb:29:71:f8:bb:be:18:2f:75:
87:28:17:94:b6:15:ce:c8:ab:39:52:31:2e:07:cc:
63:91:07:ba:a1:de:83:b8:0d:fd:38:41:62:07:24:
3b:48:fb:25:6c:01:45:95:7d:e9:e2:c9:86:bc:a9:
07:09:d3:80:f2:9b:1a:19:f0:83:3d:a0:b0:8f:ca:
7e:4b:b0:5f:b1:8a:f0:48:fc:c1:2a:ac:7b:c3:2d:
78:91:75:0d:c0:ec:25:6a:19:53:60:ac:20:7d:e8:
24:d6:e0:4e:6e:fc:51:7d:be:46:a6:49:da:d2:fe:
47:cd:32:71:9f:81:34:7f:79:70:4c:69:16:77:5f:
e6:c3:f8:e5:69:44:06:ab:b8:4e:df:4b:b3:4c:50:
43:01:a7:ff:e3:8c:39:72:a1:44:90:77:06:2c:06:
2d:07:6a:54:1f:9e:cb:eb:9c:5a:52:ac:76:2f:cf:
01:33:ad:a3:64:b0:c4:ac:7e:b5:e0:36:0c:94:ca:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:72:78:39:D6:B8:6B:C9:F5:2A:E8:20:F5:2A:84:A5:48:77:8F
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/W-5yeDnWuGvJ9SroIPUqhKVId48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1000::/40
Signature Algorithm: sha256WithRSAEncryption
46:f5:00:0d:a8:83:ae:42:35:6b:06:82:b5:98:57:3e:15:3f:
4a:79:36:2f:d1:39:0a:de:b7:78:ab:04:74:b6:7e:2d:2f:64:
f3:6a:1d:57:59:ea:66:dd:a8:af:a5:21:48:09:a7:2f:ab:4c:
d3:2e:08:5f:a0:59:93:48:63:d1:66:e6:2f:aa:fa:05:28:70:
9c:66:9c:b5:0d:e0:21:35:ff:83:87:cc:03:45:36:47:ef:fe:
55:9b:60:d7:cc:a6:3d:72:fa:83:ac:81:4f:01:01:a4:50:0a:
ea:7e:91:1a:ff:fc:74:26:91:55:a9:2b:45:0f:06:fd:22:43:
f0:d5:fa:61:54:28:6d:cb:45:40:31:27:7e:a1:93:8b:48:3e:
15:b6:d7:6e:5d:96:b3:92:5e:e3:6a:77:9a:25:bd:01:ba:56:
de:27:89:ea:86:8e:36:5f:3e:8d:73:69:aa:11:22:59:40:b6:
42:1c:c5:3f:15:d7:b0:13:92:e7:3f:cc:29:6c:94:fb:35:a1:
6b:00:f8:0c:f1:94:ab:8a:c2:1b:2d:1f:82:e5:60:80:84:6f:
c1:35:0d:a1:5b:f9:df:75:21:e9:50:7f:fa:12:a7:e2:5a:49:
04:08:be:db:4b:d3:e8:cd:5f:7d:5b:28:32:ab:f5:97:3a:b9:
fb:26:df:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:00 2024 by rpki-client on console-fra.rpki-client.org