Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/x1ouYnGmxf_F6Nkvbk5tDN4_Ke0.roa
File: x1ouYnGmxf_F6Nkvbk5tDN4_Ke0.roa (raw, json)
Hash identifier: xOY7Jo3Bb7Ic+tcgYAIwyLgt6TnnlyQohm7hxM4drdc=
Subject key identifier: C7:5A:2E:62:71:A6:C5:FF:C5:E8:D9:2F:6E:4E:6D:0C:DE:3F:29:ED
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018BB910558A90E10BB5D56F2F9B7BCF9BF1
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/x1ouYnGmxf_F6Nkvbk5tDN4_Ke0.roa
Signing time: Fri 10 Nov 2023 11:48:57 +0000
ROA not before: Fri 10 Nov 2023 11:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a04:5b82:2000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:10:55:8a:90:e1:0b:b5:d5:6f:2f:9b:7b:cf:9b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Nov 10 11:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c75a2e6271a6c5ffc5e8d92f6e4e6d0cde3f29ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c8:44:15:dd:88:9f:94:92:13:a5:fb:04:68:
ee:a7:92:48:a1:4c:4e:ff:8b:88:d5:7e:b6:bf:9b:
b4:80:9a:c0:d8:9a:61:16:58:30:f7:84:10:a0:c1:
2f:5d:37:31:fc:27:36:85:6b:63:b9:fc:51:22:d5:
19:2f:3e:90:13:2d:a4:4d:85:e2:e9:9f:5f:6a:cc:
34:94:2e:c8:e1:e9:bb:6f:d9:17:85:52:54:1e:a4:
eb:88:f1:72:61:04:dc:ba:2d:11:7a:64:ec:7c:55:
26:38:34:b9:80:0f:33:ab:8e:dd:17:f0:7e:21:62:
e8:e8:a6:fe:cc:6b:82:8a:b4:3b:5c:f2:3a:b8:0c:
c7:b3:b4:fc:48:ba:19:cf:a6:bf:8f:d5:6f:25:c2:
27:0e:1c:cb:da:36:2d:58:65:51:94:8b:93:53:df:
dc:e7:03:ca:1c:b5:4e:b9:20:d3:95:1b:3f:25:fe:
fd:8f:90:7a:7b:b2:2c:8d:48:73:c8:67:ac:d3:b1:
b8:57:e0:f8:85:ae:6e:57:60:67:a6:6b:7e:0c:55:
ba:90:41:d6:75:d9:d9:8d:ee:20:a0:6e:df:d7:7c:
ba:2d:5d:4d:9c:75:ff:73:04:d8:51:f0:8f:d3:17:
9c:4a:61:17:2d:02:75:02:cd:ab:30:bd:69:ef:40:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:2E:62:71:A6:C5:FF:C5:E8:D9:2F:6E:4E:6D:0C:DE:3F:29:ED
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/x1ouYnGmxf_F6Nkvbk5tDN4_Ke0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b82:2000::/48
Signature Algorithm: sha256WithRSAEncryption
02:da:5e:60:a5:85:ff:ae:d2:c0:27:bc:37:86:03:2b:6b:57:
75:00:06:3b:7f:70:ec:38:59:66:73:44:69:d9:6d:fc:f8:bd:
62:67:97:f9:3f:79:05:a0:17:c9:11:95:be:ce:ca:ce:81:1d:
36:66:1e:d1:94:00:94:81:d8:13:d0:ef:2d:4c:a1:e2:57:95:
c0:55:1a:33:a9:16:fb:d6:a6:df:ce:66:af:8e:10:19:ae:94:
dc:68:87:f6:27:a3:9e:a7:60:b0:3a:ad:c9:74:b8:68:d3:d7:
44:bb:a8:c5:a9:cd:a2:28:98:d4:24:d4:91:62:00:e4:4b:f0:
21:45:90:bc:bf:23:ba:16:f5:cb:de:43:63:fc:88:32:22:48:
1d:f7:f6:42:46:e5:0f:ab:37:d2:df:a6:d0:0d:4a:a2:db:60:
81:ed:c1:81:b1:12:0c:29:37:e2:b9:5f:df:06:96:81:b0:a0:
e1:f2:2d:0c:2b:de:c3:db:f4:29:4c:a8:cf:61:57:99:44:fd:
1e:09:43:e9:8d:77:fa:06:a2:13:ee:9e:66:43:3d:8b:be:b8:
76:28:60:f9:84:0b:d3:da:85:55:3a:57:d2:1a:5a:3d:bc:56:
4f:f2:2f:1a:0c:c7:d2:99:15:25:88:86:ef:f8:7e:98:bb:b8:
00:48:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:21 2024 by rpki-client on console-ams.rpki-client.org