Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/pawkWMGWIxhZ26ofyYj1dXEarTs.roa
File: pawkWMGWIxhZ26ofyYj1dXEarTs.roa (raw, json)
Hash identifier: P8qYz7MUYXRe0US0F1OsYpvyFQiKLk2/deqtIBCKo+g=
Subject key identifier: A5:AC:24:58:C1:96:23:18:59:DB:AA:1F:C9:88:F5:75:71:1A:AD:3B
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D55DB404EE95BE81DC2D0BF676D838
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/pawkWMGWIxhZ26ofyYj1dXEarTs.roa
Signing time: Mon 02 Jan 2023 04:55:09 +0000
ROA not before: Mon 02 Jan 2023 04:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57271
IP address blocks: 2a01:48a0:4001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Oct 2023 09:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:5d:b4:04:ee:95:be:81:dc:2d:0b:f6:76:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5ac2458c196231859dbaa1fc988f575711aad3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7d:3f:b6:b9:99:a1:7e:34:ba:2c:83:c4:1c:
79:cd:3a:b2:47:ef:60:de:3c:5e:14:5d:81:93:11:
88:5f:68:f0:41:49:d6:c9:a7:0f:c4:ff:03:b4:ae:
19:5b:17:a0:dd:9a:c4:a1:90:f1:98:f8:68:96:1e:
db:d0:23:1c:87:34:b3:1d:49:1b:1a:c0:cc:0a:9e:
a5:8a:d7:f9:f0:d7:4f:8e:e5:5f:68:bd:d3:56:c5:
ac:25:b4:b8:05:04:04:22:78:da:c0:34:3a:8b:62:
c5:fc:d7:9d:bf:db:83:e7:71:99:f8:52:d3:d5:a3:
3a:53:ab:63:3d:36:17:34:e9:cc:3a:3d:30:c7:2b:
e7:4d:92:cc:42:da:e1:ce:8a:61:90:0e:df:21:3a:
7f:13:09:d3:88:45:5e:81:0d:94:e9:a3:20:9e:94:
06:0f:00:3a:a0:43:0d:f8:66:54:95:eb:ed:06:2e:
09:16:0d:27:99:8d:69:95:c9:7d:80:8f:f5:70:10:
3d:de:1b:05:41:6e:30:af:11:6b:c5:cc:14:eb:16:
a3:9b:e6:98:0a:0e:79:b9:0c:88:ff:e6:32:fe:5a:
df:38:68:2b:02:62:ab:a4:8a:18:e6:e1:5a:10:da:
1f:6f:eb:f7:cc:4a:a7:bd:12:42:ab:e0:ff:b7:64:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AC:24:58:C1:96:23:18:59:DB:AA:1F:C9:88:F5:75:71:1A:AD:3B
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/pawkWMGWIxhZ26ofyYj1dXEarTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:4001::/48
Signature Algorithm: sha256WithRSAEncryption
47:26:34:1b:16:a8:4e:54:61:28:1e:ee:94:14:26:11:5e:6f:
b2:b0:9e:cd:02:2b:3c:47:f9:c5:07:49:6c:77:91:7e:38:f9:
ab:3d:77:c5:a8:6c:2a:67:0f:03:61:a3:da:4e:c4:5e:a4:80:
f0:74:f3:ef:78:02:31:93:54:5b:b1:d1:25:33:5c:bd:23:e2:
b4:71:fe:cc:e7:95:91:49:31:b0:f7:20:ee:64:4c:a9:bc:03:
16:7b:b6:a1:bd:2d:fe:fe:15:eb:ca:bd:b1:29:d7:5c:1d:9b:
b6:50:71:0e:73:55:e8:6e:54:e1:ec:ff:83:0d:3f:01:b7:10:
8a:6f:8b:d1:71:04:18:fc:f8:3e:d7:72:8f:0f:ff:6f:3a:33:
cc:51:78:f2:8a:ff:bd:38:a0:bf:c7:64:6e:f3:55:b2:fd:ae:
c5:0b:64:e4:4c:de:4f:3e:86:70:b8:9a:d6:34:3d:7e:58:23:
7a:d8:17:b0:99:3c:6c:60:1c:fd:9f:58:f1:2f:92:ac:6a:46:
cd:b5:42:01:9a:9b:7e:0f:6a:9f:0f:49:ee:e0:d7:ab:55:85:
ae:15:13:f7:a0:fc:be:66:80:b3:d1:78:dd:04:96:5b:b0:83:
9c:3c:0c:d5:14:1e:08:97:47:cb:c0:e7:32:17:6a:f4:2b:e1:
73:02:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org