Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/RKY2rYXTqIUBkGOYM0Fqt-MGhJo.roa
File: RKY2rYXTqIUBkGOYM0Fqt-MGhJo.roa (raw, json)
Hash identifier: T5v31HzKHixYipJzPazcZ8v6RLonMaNxgIFGOpTE8Z0=
Subject key identifier: 44:A6:36:AD:85:D3:A8:85:01:90:63:98:33:41:6A:B7:E3:06:84:9A
Certificate issuer: /CN=c1bea8393f6a1d37991989dd875fc531e4084031
Certificate serial: 01856DB872E819E6DAA9B126C1583EE7DC67
Authority key identifier: C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/RKY2rYXTqIUBkGOYM0Fqt-MGhJo.roa
Signing time: Sun 01 Jan 2023 14:24:42 +0000
ROA not before: Sun 01 Jan 2023 14:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212129
IP address blocks: 2001:67c:2b2c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:72:e8:19:e6:da:a9:b1:26:c1:58:3e:e7:dc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bea8393f6a1d37991989dd875fc531e4084031
Validity
Not Before: Jan 1 14:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44a636ad85d3a8850190639833416ab7e306849a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:cb:06:8a:de:9c:4a:fb:2f:63:fe:05:bb:
67:f6:63:88:44:ad:4c:56:6b:db:f8:13:1c:dd:a1:
0d:66:50:e1:e8:28:fc:f9:0a:ec:12:bd:53:c3:0f:
44:b5:2f:c6:61:8f:a0:2f:be:eb:0f:8c:8a:37:15:
79:d2:2f:fd:2d:c6:f7:ee:ec:01:da:13:98:2e:4e:
b2:2b:56:5b:8a:b2:7f:40:90:a2:f3:eb:27:23:b4:
7a:96:21:6a:e2:91:d6:f9:f4:0b:54:98:96:9d:5e:
e0:c4:f6:86:0a:26:dc:98:06:ad:11:5d:0f:6a:a5:
0f:e7:2c:02:b2:00:e4:a6:02:85:62:fc:98:61:2d:
9a:9e:20:c7:1e:9a:62:55:10:3c:dc:5c:18:c3:ad:
aa:5e:01:d5:33:d6:dc:f6:56:95:59:0d:9c:bd:6d:
2b:fa:a8:54:38:fd:6e:3e:aa:8b:dd:4a:53:63:0f:
1b:a7:20:f6:2e:16:e8:f7:bf:80:ba:d9:a1:fb:12:
9e:59:eb:3c:7d:15:e0:58:75:5d:35:19:3b:8b:86:
af:df:21:59:65:75:44:a2:d4:7c:b7:83:fd:32:5c:
8c:6c:1a:f3:fb:44:0b:21:14:63:ab:87:25:50:6e:
c0:80:88:1b:24:f9:a8:51:50:f9:22:c1:cd:a5:1b:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:36:AD:85:D3:A8:85:01:90:63:98:33:41:6A:B7:E3:06:84:9A
X509v3 Authority Key Identifier:
keyid:C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/RKY2rYXTqIUBkGOYM0Fqt-MGhJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2b2c::/48
Signature Algorithm: sha256WithRSAEncryption
1b:c1:c9:bf:55:8c:17:96:b7:55:30:69:16:aa:e4:f4:06:a2:
08:59:e4:a7:a6:34:fd:bd:af:ff:b3:f2:4c:32:4b:e1:11:d0:
c6:56:10:41:6a:ce:ac:ce:5b:ca:d9:10:90:a4:67:00:b8:72:
cf:bd:1b:35:72:b4:da:16:e3:60:28:3b:b6:57:61:9e:3d:f6:
7d:46:84:86:92:54:36:ee:77:a3:15:99:04:80:14:11:ad:33:
4d:a3:ba:43:45:fd:f0:c7:5f:e0:40:71:64:37:aa:77:8d:ec:
2f:4d:9e:ee:63:b6:7c:32:2a:f4:8b:53:c6:1c:9b:07:d5:68:
4e:69:3f:cf:66:1d:b5:e6:45:d8:53:33:8e:fa:90:8f:b4:4a:
6e:1f:e6:ea:4c:c4:5c:9a:dd:a2:9e:6d:27:b5:5b:2b:d3:f4:
11:29:94:36:bd:14:61:8b:87:4e:4e:81:34:bd:2f:e0:6a:d9:
d9:51:17:7b:9f:a3:94:fd:62:ed:2d:83:4d:6f:d6:d2:4d:f8:
2d:42:4b:57:22:07:fe:df:68:69:11:f9:eb:18:7a:a5:3a:62:
39:ca:f3:2e:e7:e8:1a:1e:a3:9e:20:3f:93:25:e1:21:ff:51:
37:49:8f:fc:e8:d4:b5:84:e3:f2:d8:5c:03:fb:65:a1:c9:ee:
8f:62:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:52 2024 by rpki-client on console-ams.rpki-client.org