Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/ws6jbqtqtR9mMRb6WGZ7BB9nz9w.roa
File: ws6jbqtqtR9mMRb6WGZ7BB9nz9w.roa (raw, json)
Hash identifier: 7DCG5x+q9ESGg5xI6+0gnmAB791XC4zRe/WJpU/JeKA=
Subject key identifier: C2:CE:A3:6E:AB:6A:B5:1F:66:31:16:FA:58:66:7B:04:1F:67:CF:DC
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 01856EB8D8E81A592439B03056A54B566F58
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/ws6jbqtqtR9mMRb6WGZ7BB9nz9w.roa
Signing time: Sun 01 Jan 2023 19:04:45 +0000
ROA not before: Sun 01 Jan 2023 19:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 766
IP address blocks: 2001:678:508::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:d8:e8:1a:59:24:39:b0:30:56:a5:4b:56:6f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Jan 1 19:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2cea36eab6ab51f663116fa58667b041f67cfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:5f:86:30:b5:6c:a2:83:24:db:26:70:5b:
d1:f8:5f:bb:99:28:5b:ac:37:31:b2:4d:28:e6:10:
62:d2:91:96:97:cc:b8:0e:91:25:c3:57:ca:48:ce:
2a:16:45:c3:ea:4c:48:7f:85:29:91:dc:2d:93:47:
8e:ec:1e:79:ae:8b:c4:58:42:30:78:09:1f:0c:b1:
30:cc:bd:9b:48:e1:1c:35:f3:c3:3d:77:20:7b:b0:
cf:fa:24:50:9b:33:3e:8f:f3:ff:f0:0f:c8:f1:72:
d3:58:7f:63:30:4f:57:41:1c:13:ef:24:9c:d6:7c:
8f:15:19:49:94:3b:2b:da:3a:9e:09:55:56:86:11:
2b:a3:ae:96:8c:c8:a1:3a:d8:f5:59:f3:9a:59:51:
dd:9a:d1:ae:fe:53:d1:7f:b9:61:72:6b:06:db:ef:
06:10:90:e7:c6:60:f8:0d:31:5b:44:25:b9:aa:cb:
a7:ff:23:86:75:bd:6d:81:b2:56:d2:5f:66:14:ef:
02:5a:e3:0c:59:8f:0f:e4:6e:3e:97:22:b2:c7:09:
00:17:cd:01:52:f6:67:c8:6c:80:48:cf:51:90:3e:
94:32:90:d5:26:5e:33:a4:55:87:46:7e:64:04:a6:
7a:24:d0:ad:d8:82:a3:d4:34:9a:30:b5:b3:ed:f9:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CE:A3:6E:AB:6A:B5:1F:66:31:16:FA:58:66:7B:04:1F:67:CF:DC
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/ws6jbqtqtR9mMRb6WGZ7BB9nz9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:508::/48
Signature Algorithm: sha256WithRSAEncryption
ba:f9:e1:47:d7:01:6e:fe:20:c5:95:69:34:3d:09:da:50:a5:
fc:56:21:79:d1:73:ba:81:9e:19:bc:93:2a:5a:53:25:cd:73:
9c:8e:0f:0d:11:b5:7d:b6:95:aa:9e:3d:47:45:6a:17:f3:69:
8e:50:9b:2f:38:52:c0:0e:91:b8:bc:0f:5f:fc:c0:be:b4:a8:
67:da:b3:42:74:27:ae:ed:b1:b6:04:36:ef:07:1d:1e:b3:e4:
eb:99:f9:f4:c2:1e:71:2d:cc:4f:47:c6:1a:6d:10:6c:1e:db:
88:fd:08:62:d9:c3:8f:3f:9d:db:59:62:3b:bc:83:bd:32:37:
0f:50:b9:86:9b:a6:37:a9:b5:b9:8e:66:8e:03:9b:03:50:c4:
5b:ef:92:db:f3:0e:fe:ee:be:b0:e6:2e:5a:08:3a:59:d9:ae:
a0:c8:66:98:42:79:5d:bf:66:ae:9d:97:04:b8:d0:38:74:b5:
85:8a:38:39:6d:19:2e:62:29:98:cf:e6:71:fe:54:e6:f3:0c:
37:8f:e3:b6:1b:e4:4b:e9:43:81:6e:aa:98:ac:84:93:52:f0:
2a:54:ac:d1:57:d0:90:9d:0f:43:6f:c4:bb:e5:bb:73:d1:cd:
8a:c0:6c:ec:1e:1f:fa:04:e3:d5:67:ea:f8:35:a4:fb:06:30:
73:64:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:46 2024 by rpki-client on console-fra.rpki-client.org