Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/x1W9W6POZIlDBvIuZ4smJv1TY2Y.roa
File: x1W9W6POZIlDBvIuZ4smJv1TY2Y.roa (raw, json)
Hash identifier: JBpuWCVrluvjk15jxxrAlDUlIUneNfwnLn0QdqFvj/M=
Subject key identifier: C7:55:BD:5B:A3:CE:64:89:43:06:F2:2E:67:8B:26:26:FD:53:63:66
Certificate issuer: /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial: 018572DED81F6AF75AEC2582FE9108853B58
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/x1W9W6POZIlDBvIuZ4smJv1TY2Y.roa
Signing time: Mon 02 Jan 2023 14:24:44 +0000
ROA not before: Mon 02 Jan 2023 14:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203329
IP address blocks: 2a00:b404:e000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:de:d8:1f:6a:f7:5a:ec:25:82:fe:91:08:85:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Validity
Not Before: Jan 2 14:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c755bd5ba3ce64894306f22e678b2626fd536366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:fa:a8:85:f3:db:4f:be:30:a0:70:cc:a2:
df:2a:52:21:87:ef:a9:a8:ed:54:8d:0f:0d:fb:4b:
49:25:ba:fd:81:15:fc:25:24:95:19:5b:ab:de:b9:
b2:ae:e9:da:09:2e:09:4d:7f:03:1d:e9:8d:62:25:
ad:dd:80:73:21:67:2d:8e:ce:25:ff:ae:bf:bf:4f:
8a:93:cf:31:aa:c3:06:8f:0b:58:99:4c:33:46:b9:
30:b3:86:30:36:2f:16:82:1d:0d:73:b8:54:35:0a:
dc:e0:c6:e5:70:2d:fa:44:a9:29:1b:ab:2f:72:50:
47:c2:a8:ff:dd:a1:ba:c4:c6:1d:3b:dc:74:de:a2:
1e:db:97:50:2a:fe:c5:16:3d:c6:49:21:aa:96:8d:
49:73:2f:ef:35:83:1e:fc:bd:29:23:37:68:fc:43:
e4:77:3d:9f:85:d5:c7:91:5c:50:c8:df:a9:19:00:
a0:1c:a6:01:2e:f3:5e:0f:49:c5:32:1c:bf:3d:31:
d2:00:19:f1:c2:ab:a0:26:d4:a4:1d:40:49:f7:69:
6c:d6:c5:89:49:b3:7a:83:fc:af:bf:3c:1d:85:76:
62:a6:da:72:45:1f:ca:52:5f:74:b6:34:ac:98:f4:
d2:fb:5b:27:18:b5:5b:75:f1:2c:18:dd:8d:93:66:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:55:BD:5B:A3:CE:64:89:43:06:F2:2E:67:8B:26:26:FD:53:63:66
X509v3 Authority Key Identifier:
keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/x1W9W6POZIlDBvIuZ4smJv1TY2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:b404:e000::/36
Signature Algorithm: sha256WithRSAEncryption
8d:04:f0:c9:74:04:b8:f6:7e:fb:25:ef:a1:15:e9:e7:d0:38:
76:ab:96:27:6d:94:41:73:fd:4c:59:11:08:03:88:d8:2a:80:
6a:0d:40:85:f0:69:76:cf:23:5f:aa:4b:c3:ab:c3:0f:77:0a:
c6:93:81:c3:31:aa:f7:1e:be:c0:2d:46:f2:57:16:ff:03:23:
36:16:2f:99:25:ff:67:c9:54:56:a0:3a:6c:73:35:93:5a:0b:
1d:1d:fa:55:93:2e:27:36:76:f2:e4:8f:af:02:56:de:b3:ba:
04:33:d5:13:e1:1a:85:14:33:b8:23:ec:5d:81:1f:6e:a5:46:
6f:88:fe:61:ba:bc:5b:2d:5b:bd:2f:b7:e9:d7:11:44:70:e6:
52:bb:05:c4:17:0b:1b:a0:06:20:f1:7c:f0:6e:05:37:1f:b9:
88:e1:6f:ae:eb:c8:28:64:ac:3c:ab:a0:c4:ac:91:7c:94:35:
54:ef:31:12:86:7f:84:45:69:8c:01:77:ec:1c:92:f4:eb:00:
f6:9c:a9:9d:d1:60:66:2e:aa:51:6b:d2:8c:75:dc:22:9e:d8:
4b:cd:12:c4:6d:6b:bb:b8:84:97:d7:af:61:ae:41:c2:8f:14:
cc:f9:9d:e0:8e:a0:8f:fb:e6:39:10:77:19:09:62:c8:ff:29:
1a:d4:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:18 2024 by rpki-client on console-ams.rpki-client.org