Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Xv4LKtDJJ8quxVIh6Ay-WBThlHs.roa
File: Xv4LKtDJJ8quxVIh6Ay-WBThlHs.roa (raw, json)
Hash identifier: gLI5L3mhaxNaQuN6kuBLshxqZsb1vhN7T5M7eRtuEo0=
Subject key identifier: 5E:FE:0B:2A:D0:C9:27:CA:AE:C5:52:21:E8:0C:BE:58:14:E1:94:7B
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0189B54CD49C86E00D07CBA7C89FDFE23616
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Xv4LKtDJJ8quxVIh6Ay-WBThlHs.roa
Signing time: Wed 02 Aug 2023 08:10:58 +0000
ROA not before: Wed 02 Aug 2023 08:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44812
IP address blocks: 2a0a:b384::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 02 Aug 2023 16:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:4c:d4:9c:86:e0:0d:07:cb:a7:c8:9f:df:e2:36:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Aug 2 08:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5efe0b2ad0c927caaec55221e80cbe5814e1947b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:7f:5a:bf:8d:b0:73:90:b2:8b:d5:c0:af:
bf:11:c3:01:2a:64:86:e4:40:11:e8:fa:00:ce:6c:
67:a4:2b:fd:eb:9b:7b:f2:ee:1e:1a:05:c7:cd:a8:
53:db:f5:e9:91:5d:22:ab:74:8b:79:0e:1a:fe:df:
74:0f:d8:16:da:72:54:62:d6:3c:8e:fb:02:f1:61:
e5:29:92:8e:82:6d:78:78:e9:d5:2d:c4:fa:2d:d4:
5f:d1:90:5c:1b:02:0f:f6:41:4b:3a:a3:0e:0e:69:
88:29:f7:21:ee:7e:69:8f:ff:2f:d8:7a:a5:06:eb:
83:95:07:cf:25:38:f3:05:f9:ca:41:dc:20:ae:ff:
e8:8d:51:2a:57:f1:13:a2:35:14:4c:ed:43:b2:d1:
5b:e7:90:da:c4:a3:8f:92:b4:02:9f:ac:a7:e6:bf:
36:81:f5:36:2b:c3:42:2d:c0:55:04:02:1b:4b:33:
a0:8f:9a:c8:1e:1d:51:58:b3:4c:97:4b:67:9b:17:
e4:12:84:68:50:5d:b4:87:71:4c:47:30:b2:d0:b5:
74:0b:6f:b5:a4:a9:3f:54:bb:c3:c0:ef:ae:01:d0:
a6:41:35:24:b8:7d:74:ae:cd:0e:ad:9c:07:1a:82:
17:15:2f:02:51:18:a2:33:54:4e:8f:6d:ac:e6:17:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FE:0B:2A:D0:C9:27:CA:AE:C5:52:21:E8:0C:BE:58:14:E1:94:7B
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Xv4LKtDJJ8quxVIh6Ay-WBThlHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:b384::/32
Signature Algorithm: sha256WithRSAEncryption
96:10:31:65:61:7b:b4:9f:09:e8:4c:47:71:00:4e:87:bd:6b:
c7:31:9f:4c:32:44:f6:07:3d:59:8b:d0:0d:1c:08:81:66:a8:
43:fa:93:f7:5a:70:05:95:6c:68:b9:dd:3d:fb:d9:5c:02:ff:
f6:49:cb:12:26:f3:ee:54:aa:82:15:48:1f:98:81:c9:09:92:
80:d6:8d:e7:ed:a5:75:03:18:56:de:2b:3a:32:88:52:03:8d:
ca:b1:97:0e:42:01:76:d2:44:9d:8b:78:6b:d3:7a:91:0a:60:
e7:b4:49:a9:af:db:9d:94:48:bb:e2:b7:68:d4:a7:61:b6:c7:
2e:e0:53:d5:d8:44:36:7d:ca:25:6e:47:e8:6f:83:e1:d3:12:
00:67:33:61:be:1d:86:f3:10:0b:94:f1:5d:c9:5b:11:1c:a7:
63:ca:b5:9c:35:14:e9:cd:85:ca:c8:bc:73:49:af:7d:dc:8d:
81:c3:03:00:ef:48:00:6b:2d:13:b3:3e:8c:67:c1:6e:b8:be:
7b:a5:ea:95:b4:38:a5:a2:32:08:f1:c1:b4:da:d8:d4:33:70:
65:65:38:28:0e:12:88:d3:e5:93:e9:b4:cc:46:20:9d:cf:b9:
12:79:a8:1d:71:74:45:92:c7:56:fe:39:e2:6b:8a:af:53:9f:
c4:d2:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org