Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/WjYXTIxrYIVcsnZyOkXDo642Az0.roa
File: WjYXTIxrYIVcsnZyOkXDo642Az0.roa (raw, json)
Hash identifier: 01JTWBYsVEFi2gabNtoJnreyyzQZugucIhuyb0lsD58=
Subject key identifier: 5A:36:17:4C:8C:6B:60:85:5C:B2:76:72:3A:45:C3:A3:AE:36:03:3D
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 01856DD3EE955B91E2651F4F4DDCA48FFBD9
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/WjYXTIxrYIVcsnZyOkXDo642Az0.roa
Signing time: Sun 01 Jan 2023 14:54:43 +0000
ROA not before: Sun 01 Jan 2023 14:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213376
IP address blocks: 2001:678:d08::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:ee:95:5b:91:e2:65:1f:4f:4d:dc:a4:8f:fb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Jan 1 14:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a36174c8c6b60855cb276723a45c3a3ae36033d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:6d:cf:2c:06:48:9f:ef:7a:58:3b:70:b8:
73:58:46:6f:06:e5:f6:62:48:8b:41:6a:7a:33:cf:
12:c7:5a:4c:0c:5b:0d:bd:32:dc:3d:e4:17:2f:98:
37:04:4e:62:fa:70:94:1d:68:34:48:76:2e:2c:48:
32:f4:b5:58:0a:ea:84:8a:7e:b3:1c:25:64:e0:0c:
45:3a:f7:ad:58:ec:01:20:29:7c:09:cf:5d:cb:47:
ce:ff:30:cb:11:0d:28:fb:02:f7:77:53:36:25:6b:
52:5e:7b:0c:1e:cd:d6:bb:39:a7:3f:d4:b8:21:35:
30:37:5f:b1:9c:90:f6:26:da:00:f6:0b:ed:f2:df:
45:5b:4c:50:a4:b4:ec:15:0c:26:53:71:02:25:19:
6d:13:d9:5f:f7:46:52:bc:a0:cc:51:e9:17:82:8c:
c7:a7:e9:cd:1b:9d:ed:6e:82:5b:98:22:13:4b:b1:
0b:c3:57:42:75:d8:4d:39:da:44:eb:8f:c8:10:22:
4a:3d:b8:e3:f8:74:28:8a:8c:8a:84:02:d4:a0:3c:
38:40:0a:04:fb:fe:6f:9e:68:42:a7:63:84:3f:de:
ca:97:34:83:54:a1:95:d4:5d:8b:cf:c7:9d:81:4c:
f9:38:47:e8:dc:fe:ef:69:4c:3f:a7:8e:7e:7b:60:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:36:17:4C:8C:6B:60:85:5C:B2:76:72:3A:45:C3:A3:AE:36:03:3D
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/WjYXTIxrYIVcsnZyOkXDo642Az0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d08::/48
Signature Algorithm: sha256WithRSAEncryption
9a:19:9a:65:39:b3:87:9d:97:cf:ee:f6:56:a7:9f:9d:ff:51:
40:33:20:c3:31:ef:49:01:4d:5e:d1:33:e1:be:ae:fb:44:d6:
fb:dc:d0:0f:ca:73:93:20:c1:86:6f:3c:4a:3c:0d:24:3e:47:
43:a8:5d:f1:bb:c7:47:84:0f:d7:4c:9c:c5:6d:45:4d:60:80:
92:49:22:6d:d3:e4:f6:5e:a5:78:d9:1d:f8:f3:15:6c:d2:5a:
2e:5a:71:d5:02:97:7f:95:69:0f:e3:8a:38:61:68:14:6b:75:
d5:f7:48:60:23:55:12:8c:1a:c6:7d:91:b2:ef:1c:6e:c6:69:
82:0c:55:20:d0:82:46:80:a2:fa:b7:a9:2e:d4:82:21:49:fe:
97:e4:c6:62:e5:2f:fe:02:38:ef:7d:9f:ff:b8:a9:c2:21:0d:
37:e0:84:e1:e5:30:b0:ba:02:e6:94:d1:44:aa:e6:6c:65:2b:
d9:fd:c1:88:8d:40:18:21:2a:31:a7:34:64:68:a9:7b:21:c4:
f3:dd:43:ab:ff:fe:c2:76:36:69:7b:6e:19:42:83:e6:2e:4f:
38:5b:df:ae:d1:54:5c:f7:b2:8a:23:95:da:7a:0f:53:80:3c:
31:43:d5:da:bc:40:24:d1:94:6e:5f:14:91:ff:2c:2d:23:eb:
ea:a3:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:55 2024 by rpki-client on console-ams.rpki-client.org