Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/xR60rdr-68OiQuqq_4uon8Hj5F4.roa
File: xR60rdr-68OiQuqq_4uon8Hj5F4.roa (raw, json)
Hash identifier: VIw9VbOMCgX0MndfOie4CZazmHjea+e3d4D2iBYGvbU=
Subject key identifier: C5:1E:B4:AD:DA:FE:EB:C3:A2:42:EA:AA:FF:8B:A8:9F:C1:E3:E4:5E
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 01857030290F2BB837300CB785949EE18C2D
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/xR60rdr-68OiQuqq_4uon8Hj5F4.roa
Signing time: Mon 02 Jan 2023 01:54:42 +0000
ROA not before: Mon 02 Jan 2023 01:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31451
IP address blocks: 2001:67c:1550::/48 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:29:0f:2b:b8:37:30:0c:b7:85:94:9e:e1:8c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Jan 2 01:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c51eb4addafeebc3a242eaaaff8ba89fc1e3e45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:c0:7a:44:24:8b:62:af:bc:7d:ee:dc:cf:
2f:5a:83:a9:a4:2c:70:1f:77:eb:40:c3:de:54:bd:
6c:19:68:b0:58:96:3f:ba:ac:23:2e:cb:80:e1:9d:
5a:63:8f:63:ce:bb:5a:c3:74:96:f3:51:a7:0a:03:
93:5c:15:18:e0:91:91:2a:58:21:9f:1c:33:0a:88:
3c:b0:e9:1f:79:8a:de:48:0e:8e:5c:e7:fc:5a:2e:
84:56:81:13:4c:b3:80:74:b2:9b:8f:b0:46:31:d4:
73:46:91:30:8a:01:19:32:4b:fd:a5:04:61:81:2b:
01:cd:2f:96:1d:ff:6a:02:48:71:17:2e:d5:05:cd:
0a:5e:90:df:8f:94:93:10:42:b3:52:a8:61:ac:75:
58:a8:36:6d:7b:ac:02:68:ee:8b:81:76:f8:04:e4:
d9:63:db:50:7a:91:b3:65:85:b5:28:fd:5f:99:29:
21:68:11:27:b8:d4:fb:b2:81:ec:4a:38:0b:d2:b4:
b0:87:dc:87:c6:a2:9a:1a:b3:86:4e:eb:d3:8c:7f:
9b:8a:59:4e:d7:d4:fe:52:c0:cd:c7:5a:0b:0b:5b:
68:78:61:8d:56:88:89:ab:22:77:e4:08:15:83:a7:
73:9a:31:9d:c2:5a:40:a3:d4:5d:b3:f9:dd:77:93:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1E:B4:AD:DA:FE:EB:C3:A2:42:EA:AA:FF:8B:A8:9F:C1:E3:E4:5E
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/xR60rdr-68OiQuqq_4uon8Hj5F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1550::/48
Signature Algorithm: sha256WithRSAEncryption
12:f3:08:c0:06:39:0c:ca:ed:2d:7a:29:53:a3:70:b8:c3:81:
f6:55:51:22:b1:69:97:c9:5f:47:97:c1:1d:15:d0:e4:97:bd:
e0:ca:19:96:d0:73:26:9a:7f:0d:4d:bf:c0:99:a8:55:eb:9f:
08:bc:05:28:f0:72:52:a5:c8:ca:4e:39:74:62:22:a4:3d:fe:
bc:3e:a3:7c:8b:f2:95:60:31:ac:d8:3e:37:dd:17:5c:ec:0b:
be:23:7b:28:6a:f2:31:40:cd:80:04:53:67:60:22:57:81:18:
08:4d:dc:98:39:8f:6d:78:9a:e6:b8:ae:56:03:80:d4:45:d4:
13:80:0a:c6:d4:07:e6:1a:ee:52:05:a9:3d:b4:6d:6d:73:52:
b8:fd:7f:97:f1:cf:80:2f:bf:e1:65:2e:b5:74:1d:f8:8d:96:
73:03:8c:d2:22:e7:e2:a1:66:ec:5b:0d:bf:48:c0:79:16:f6:
aa:08:0c:fb:16:74:f2:d1:76:5a:54:84:52:af:00:51:3a:7d:
68:8b:ca:57:a8:2f:31:04:a7:08:29:64:ad:82:2b:90:c1:3e:
4c:b2:95:aa:15:e6:66:3b:8f:62:a8:a2:43:f3:87:a7:cb:24:
b3:35:25:7b:05:5d:c1:96:2c:c7:53:7f:1f:2e:dd:a0:d0:85:
36:39:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:37 2024 by rpki-client on console-fra.rpki-client.org