Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WpxzQI5jgdYa1E7HFWZmvVCtM_M.roa
File: WpxzQI5jgdYa1E7HFWZmvVCtM_M.roa (raw, json)
Hash identifier: D9ycifvKl+4foVYztOyvCpMGBm9kKTqeySn1HN5eQj4=
Subject key identifier: 5A:9C:73:40:8E:63:81:D6:1A:D4:4E:C7:15:66:66:BD:50:AD:33:F3
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4C3A2EA46600E5D832B76064D6449
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WpxzQI5jgdYa1E7HFWZmvVCtM_M.roa
Signing time: Sun 01 Jan 2023 19:35:15 +0000
ROA not before: Sun 01 Jan 2023 19:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39831
IP address blocks: 2a05:4380::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c3:a2:ea:46:60:0e:5d:83:2b:76:06:4d:64:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a9c73408e6381d61ad44ec7156666bd50ad33f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:2c:2c:ee:33:66:fb:c0:64:5c:05:8e:3c:
52:14:95:c2:a2:35:f9:18:56:5c:5f:6d:0b:33:7e:
de:17:de:a1:6e:e1:1f:94:6b:dd:9a:d8:7f:e4:51:
30:e6:2f:f1:ea:89:28:be:2d:56:e3:b3:45:f8:a1:
6b:5e:c4:29:f2:04:f5:f8:a2:64:1a:94:b9:38:3f:
28:d1:69:9c:97:a7:4b:ae:7e:29:50:a7:0c:64:27:
1f:df:08:8a:eb:56:42:bf:d2:62:59:c2:ff:fa:da:
14:fe:b4:0b:66:23:b6:69:0a:8f:b7:26:52:ea:ce:
48:73:19:90:26:62:6f:61:c4:73:a5:87:26:19:7a:
6b:0d:e4:a4:08:98:dd:5e:b3:3d:6d:75:72:81:eb:
97:df:b4:aa:d4:e2:05:03:89:4c:f8:2e:52:a8:70:
14:4e:c0:1c:03:56:3a:5e:71:45:62:f0:56:f4:72:
bc:b7:d9:d9:2e:3f:68:1a:84:01:c7:bf:4f:ee:94:
ef:5d:3e:70:dd:07:17:4a:dd:dd:5d:c3:70:13:d0:
bc:af:00:43:74:7b:b2:4d:03:9b:df:c2:33:28:ea:
63:9b:da:8f:7d:d5:e6:3c:9d:25:11:c4:2a:b4:0e:
86:ac:48:ba:2d:48:09:18:69:de:e6:6d:ec:40:7f:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9C:73:40:8E:63:81:D6:1A:D4:4E:C7:15:66:66:BD:50:AD:33:F3
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WpxzQI5jgdYa1E7HFWZmvVCtM_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4380::/32
Signature Algorithm: sha256WithRSAEncryption
72:ef:84:3f:31:31:9d:f3:32:9a:89:78:5f:a1:d6:30:91:2e:
0e:ee:7b:d3:6f:93:9d:60:6d:bd:ec:21:9a:82:57:d9:dd:da:
a9:5b:dd:77:71:b9:81:d1:e1:b0:1b:c5:59:19:d5:1b:ac:5c:
30:93:fd:b8:35:a4:76:39:97:e1:b0:a1:d3:29:a7:fd:f1:df:
48:ba:ec:f8:e9:ed:82:19:b3:7a:5c:e0:00:ae:b9:d2:32:6f:
f8:ff:df:36:0d:3b:3d:5b:13:9e:ef:1f:64:c4:18:61:3c:cc:
0b:e0:88:b9:f5:66:c0:a3:c4:c9:a4:91:be:f3:5c:a7:0e:9c:
03:7e:c1:99:a4:d5:1e:d1:56:18:e0:3c:fa:55:22:15:ec:fc:
ae:6b:f8:f4:0a:2e:f5:8d:a0:92:16:01:de:38:6f:4a:ce:fa:
bf:4d:44:42:21:51:8e:3a:49:79:1a:75:ab:5c:78:b2:45:12:
0f:82:58:44:02:28:52:bf:ec:96:c2:7f:a6:a1:d0:a5:b3:21:
12:b5:20:0e:cf:5a:f3:e9:e2:70:63:34:5f:26:ef:60:de:4b:
22:af:c1:81:0c:91:c2:65:47:5e:81:91:33:29:21:3c:50:a9:
a2:3b:7b:44:be:86:5e:c9:1e:66:b0:f5:7f:2e:d9:2d:c0:e1:
40:a8:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org