Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5HaHTDNBSTJs4y4NGRA3KtEAk74.roa
File: 5HaHTDNBSTJs4y4NGRA3KtEAk74.roa (raw, json)
Hash identifier: NhvWyAuCITKI86sBSI3o7LTYNxWw5Li/UHkvE5T8SKg=
Subject key identifier: E4:76:87:4C:33:41:49:32:6C:E3:2E:0D:19:10:37:2A:D1:00:93:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856F26A5D8D8DEFCADBE9151E948C5CC75
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5HaHTDNBSTJs4y4NGRA3KtEAk74.roa
Signing time: Sun 01 Jan 2023 21:04:41 +0000
ROA not before: Sun 01 Jan 2023 21:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1234567
IP address blocks: 2001:67c:64::/128 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:a5:d8:d8:de:fc:ad:be:91:51:e9:48:c5:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 21:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e476874c334149326ce32e0d1910372ad10093be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:2c:37:b8:45:51:fa:e3:d9:10:83:d4:65:
80:07:8b:74:db:a9:26:9e:f2:cd:2e:24:88:4c:38:
e3:bc:33:25:3e:1b:25:12:b5:b3:93:5e:ef:a5:9b:
f6:e8:8c:eb:f7:31:1f:46:0c:24:48:6e:81:f9:c8:
af:b9:04:3d:82:66:15:67:7e:38:b9:a1:cf:6b:8b:
c1:f3:9b:e4:7b:00:da:6a:c7:dd:2d:4a:09:86:15:
01:02:18:5c:5d:67:26:ad:1e:3e:1a:e7:e3:f5:b5:
45:bf:9f:b3:86:5f:4e:9c:23:95:e3:8d:93:d7:a5:
5e:ed:7b:05:76:19:22:c2:f7:bc:d7:47:88:6f:0c:
f9:a0:6b:01:eb:4f:bb:6b:a5:9d:ed:0c:e8:95:ee:
1b:cb:53:3e:ce:d3:d9:43:f4:9b:36:8f:c4:1b:46:
35:88:f5:98:96:e6:19:a7:01:46:9e:f6:33:ac:41:
17:e9:9c:da:39:a8:1e:1a:f0:93:14:c4:f8:fc:7e:
c1:05:0f:67:5c:fa:2b:a6:e4:b3:ad:b0:a8:05:60:
0c:13:7d:80:88:62:c0:63:46:92:96:78:c6:e9:b4:
41:be:72:a9:74:15:ee:e4:9c:6a:85:ac:12:77:42:
fe:23:89:aa:92:ad:33:87:a0:0a:35:0d:aa:36:9b:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:76:87:4C:33:41:49:32:6C:E3:2E:0D:19:10:37:2A:D1:00:93:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5HaHTDNBSTJs4y4NGRA3KtEAk74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64::/128
Signature Algorithm: sha256WithRSAEncryption
1b:69:5b:bd:7d:0e:e2:0b:6e:f9:cc:30:09:43:c1:d9:f8:e0:
85:cd:9d:64:87:58:e8:85:f7:53:82:b4:9b:e1:ba:bf:84:c6:
fa:81:e7:8e:f5:29:5c:6c:d6:7b:9f:40:46:17:45:b5:14:4f:
bb:f7:7e:a2:a4:0a:04:83:bc:76:af:98:e5:c6:a4:62:52:62:
29:1c:cc:b9:9e:2f:5d:4e:10:14:da:70:b8:55:79:95:38:05:
91:d0:3d:f1:75:ae:f2:c8:80:a6:39:b6:17:e8:83:df:5c:46:
54:2a:44:03:72:b5:62:83:5a:19:5e:c3:92:fd:56:0b:1f:a4:
a3:3b:b1:4f:3b:c2:52:91:0a:94:0e:e1:79:a3:dc:04:01:c3:
47:0d:6b:ac:60:c9:47:22:3c:68:29:d8:48:19:6f:ec:4c:81:
ed:a2:bf:18:f1:91:fa:f3:14:36:3c:f0:79:b3:ea:36:83:34:
e2:14:f7:c6:49:8f:2f:a4:02:5c:66:5a:90:8e:3b:8d:cc:12:
07:1c:31:81:b6:2d:42:e8:38:51:b4:b3:63:7e:dd:5f:8c:f8:
d8:75:e0:c0:e9:eb:9e:55:0b:af:93:61:27:3e:6d:d2:f1:13:
55:7d:5f:c5:04:c7:00:62:ba:85:9e:35:b6:bf:7d:83:e1:48:
b8:27:2c:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-fra.rpki-client.org