Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/wXVKzcRL-FBTSUusUXQJiVFIUWk.roa
File: wXVKzcRL-FBTSUusUXQJiVFIUWk.roa (raw, json)
Hash identifier: ASOstCTRgGJVUOfpD21DrKyh1w6VmjouB5IqFJ7Rur0=
Subject key identifier: C1:75:4A:CD:C4:4B:F8:50:53:49:4B:AC:51:74:09:89:51:48:51:69
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 01856D4AE8905367FFCBB4242B09AA12B24C
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/wXVKzcRL-FBTSUusUXQJiVFIUWk.roa
Signing time: Sun 01 Jan 2023 12:25:03 +0000
ROA not before: Sun 01 Jan 2023 12:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21449
IP address blocks: 2a07:2911::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:e8:90:53:67:ff:cb:b4:24:2b:09:aa:12:b2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jan 1 12:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1754acdc44bf85053494bac5174098951485169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:59:e8:bb:12:bc:82:ad:61:32:79:2f:1f:
b2:68:db:e0:93:34:31:a8:46:18:71:ee:0d:47:6b:
05:96:f9:09:03:bb:14:e0:e5:83:4c:18:56:bc:14:
77:19:95:c8:40:88:62:fe:19:73:db:02:39:68:4b:
8a:ac:10:ed:c2:3f:3a:e4:65:d4:81:d5:dc:58:7c:
42:30:87:f2:28:c5:94:f1:fe:78:89:52:71:87:2d:
78:c8:2d:f7:61:2f:4c:7b:4d:dc:0a:be:98:f6:81:
2c:98:0a:87:64:c7:ab:3a:b0:60:a5:32:0f:4c:e0:
c8:51:65:c7:8b:9e:ba:9b:c2:6f:0b:61:fc:f4:82:
c2:23:ac:41:48:88:db:d2:fb:da:58:9d:1d:8f:6d:
63:eb:aa:5b:60:c0:98:e5:88:39:9f:f7:54:68:51:
3b:eb:34:52:f1:4d:e3:49:83:53:d6:b0:de:5b:bf:
df:f3:77:91:4e:89:44:a7:45:50:80:b6:ca:3a:eb:
eb:37:83:cb:fe:63:01:e2:ff:48:80:6c:9a:87:40:
d7:af:a0:f7:d9:63:3c:34:0e:74:37:c4:75:18:0b:
d3:28:09:2b:12:02:8c:07:11:f6:76:0b:6f:b2:16:
60:72:35:45:7d:d1:c2:b2:8a:f5:f3:33:95:45:55:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:75:4A:CD:C4:4B:F8:50:53:49:4B:AC:51:74:09:89:51:48:51:69
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/wXVKzcRL-FBTSUusUXQJiVFIUWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2911::/32
Signature Algorithm: sha256WithRSAEncryption
53:54:a5:84:2f:4c:30:2f:d5:50:9a:71:89:1e:50:8b:29:db:
33:49:23:9a:42:a6:d1:d9:cc:81:c6:55:e1:f6:77:c7:c3:8e:
57:ae:6d:26:29:c6:45:b4:6f:29:ab:4b:4b:7d:31:36:5c:73:
ee:a7:ff:70:09:ca:4b:3d:db:e3:20:9a:ef:ed:c1:48:17:f3:
4d:ae:29:be:8f:e5:81:75:e3:03:8c:c8:43:7e:fd:f3:8c:61:
7b:86:5a:86:88:d7:ad:2c:38:81:9b:8b:58:a4:f3:20:29:a0:
c2:e8:9f:8c:87:b1:88:ea:e4:cc:89:61:34:21:ee:1a:15:c1:
0c:19:65:08:a9:ac:8a:8b:06:e7:18:e5:05:08:79:11:c1:cb:
3b:a1:b9:23:ea:97:3f:9e:72:7c:f6:3d:9a:ab:b1:72:8f:17:
85:ed:79:6a:94:ea:93:70:80:63:2a:81:a8:34:eb:89:a2:11:
fd:2a:52:88:53:56:cd:8d:b6:b3:60:c6:d0:74:33:4e:08:78:
dc:d8:31:ed:fc:dd:f5:13:51:6e:aa:60:40:5b:7f:33:b5:01:
5a:7f:9e:b6:65:f7:41:18:a0:82:77:6f:db:53:79:7c:9c:f3:
79:9b:7d:77:b9:3e:a5:c3:19:e8:1d:67:40:ef:91:2b:de:17:
a4:2f:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:16 2024 by rpki-client on console-fra.rpki-client.org