Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/5tXn2B1y9-ubUkTp_4TRPD3o6Ww.roa
File: 5tXn2B1y9-ubUkTp_4TRPD3o6Ww.roa (raw, json)
Hash identifier: bjZxiMz2ng5z1N7c8eYIl9GqN5QyvfeleJcXAVSLvvY=
Subject key identifier: E6:D5:E7:D8:1D:72:F7:EB:9B:52:44:E9:FF:84:D1:3C:3D:E8:E9:6C
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01856F42CDD49F267C97430625F4ABA65445
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/5tXn2B1y9-ubUkTp_4TRPD3o6Ww.roa
Signing time: Sun 01 Jan 2023 21:35:27 +0000
ROA not before: Sun 01 Jan 2023 21:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210743
IP address blocks: 2a10:6380::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:cd:d4:9f:26:7c:97:43:06:25:f4:ab:a6:54:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 21:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6d5e7d81d72f7eb9b5244e9ff84d13c3de8e96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:41:17:1d:a3:bf:b7:2d:7f:9b:66:de:79:13:
cf:fd:37:e6:4d:e9:eb:df:38:c9:4c:a9:7f:0a:87:
84:39:24:d7:11:8f:07:8c:a8:a6:b6:f2:88:7a:79:
c6:bd:9c:fe:97:70:ab:6f:29:e9:1e:79:00:4f:4e:
a9:6a:8a:75:02:9f:b2:e3:3e:fc:1e:95:82:53:72:
f5:3a:10:d0:73:08:95:61:0e:f7:3e:aa:fb:c7:fb:
ad:1b:5e:3a:94:32:65:d7:42:0e:52:b5:53:25:ce:
f6:69:23:26:4b:35:37:54:8c:8d:5d:63:7a:ee:7e:
57:2c:be:82:34:66:a1:0b:70:7f:e7:38:54:48:84:
ed:19:6a:cd:fa:ad:9c:9d:87:7a:3c:6f:5c:39:9a:
ec:67:f3:64:85:f7:c1:af:51:91:42:7b:36:99:79:
25:9c:d1:03:b3:68:fc:61:bc:21:f8:d0:49:58:60:
45:a3:99:09:8a:b6:fd:e9:16:cc:0f:ea:98:38:a5:
66:fe:6a:d1:1a:29:b0:82:0f:8f:e8:fc:79:1d:33:
df:8b:7c:89:52:e3:22:ed:18:a6:4f:76:59:72:17:
be:a2:6e:2c:e1:8a:b9:fc:59:23:a8:34:eb:78:8c:
db:a2:73:cc:92:c6:67:0b:52:72:31:da:14:7f:f2:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D5:E7:D8:1D:72:F7:EB:9B:52:44:E9:FF:84:D1:3C:3D:E8:E9:6C
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/5tXn2B1y9-ubUkTp_4TRPD3o6Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:6380::/29
Signature Algorithm: sha256WithRSAEncryption
0b:d6:5e:59:9b:ae:3c:49:6d:9a:4c:0a:af:17:6c:96:2b:c9:
ea:0a:fc:13:28:5d:5f:77:41:4e:08:67:98:bb:62:b1:24:94:
7a:a1:c1:dd:49:27:74:67:48:ca:72:7a:f1:35:92:1b:d5:fd:
9d:e2:08:50:eb:ed:fe:b7:94:73:90:fd:2e:7e:6d:56:ee:08:
f0:8e:14:d5:c0:12:fd:3f:09:59:c7:67:0a:be:8c:5b:61:0d:
8a:c0:69:29:d3:b7:f6:b9:53:5f:b1:ee:04:ed:f5:d1:53:41:
91:a3:76:bd:96:a7:5e:5b:39:df:f0:be:65:31:4e:8b:4c:60:
7d:a5:41:a3:f7:c4:27:30:23:1a:76:ad:60:b8:ff:ae:4b:33:
ef:08:ba:fd:2b:d2:cb:cb:93:cf:b5:74:93:4c:16:76:9e:03:
56:f2:5f:ee:4c:17:1a:0e:57:6f:2d:99:07:ea:13:01:1b:24:
7a:29:aa:52:84:df:25:9f:d3:81:db:bb:2a:8a:1b:53:f0:b7:
33:68:9e:b9:7c:35:bd:99:e2:93:91:ba:ed:67:28:6e:8e:14:
b3:31:0a:80:18:4e:07:72:b0:7f:8c:b0:31:27:70:e9:43:81:
98:f3:e4:1f:18:aa:97:a9:1f:d1:85:91:51:e9:f7:dd:fc:fa:
34:7e:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:44 2024 by rpki-client on console-fra.rpki-client.org