Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/5DhIPW0W0dYh91h8nsRjwGHIKHo.roa
File: 5DhIPW0W0dYh91h8nsRjwGHIKHo.roa (raw, json)
Hash identifier: pFKFdXkTyo17ao6uExYuc0Wf2LU7YTtcymub8KkMXzw=
Subject key identifier: E4:38:48:3D:6D:16:D1:D6:21:F7:58:7C:9E:C4:63:C0:61:C8:28:7A
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018CC79474139FAE1E86093A365ACC1D17C3
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/5DhIPW0W0dYh91h8nsRjwGHIKHo.roa
Signing time: Tue 02 Jan 2024 00:30:44 +0000
ROA not before: Tue 02 Jan 2024 00:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56694
IP address blocks: 2a11:f182::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 19 Jan 2024 13:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:74:13:9f:ae:1e:86:09:3a:36:5a:cc:1d:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Jan 2 00:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e438483d6d16d1d621f7587c9ec463c061c8287a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:fc:c6:f6:ad:8a:63:cd:a4:54:96:af:b8:
c4:74:38:29:eb:e9:c4:44:1a:72:c0:19:f5:78:cf:
c4:c4:91:0d:5e:97:de:97:7c:96:13:f5:41:1e:44:
ad:26:d0:75:1c:ed:61:84:65:4a:55:4d:68:7f:f0:
b6:cf:99:c2:20:87:ee:32:8f:a9:5f:86:d7:79:5b:
8d:5d:88:73:24:47:99:5c:d7:c4:6b:c8:17:bf:42:
0f:f4:05:a6:c7:bb:5f:e3:75:a4:72:92:20:2b:66:
e0:84:48:bc:a8:e3:2b:41:4e:62:4f:fc:d9:61:86:
f4:e9:4e:8e:c9:e9:c4:4b:52:0c:8c:ba:bf:09:19:
ce:ed:7b:14:66:2b:56:97:f4:e1:83:c4:11:1d:fc:
b8:7b:f3:28:f5:ce:16:5c:29:fe:ab:59:94:ea:72:
79:2c:62:14:9e:0f:0a:41:50:30:c1:b8:9e:7a:83:
05:eb:09:0c:27:36:a5:ef:cc:49:b7:eb:f5:83:05:
cf:f8:8f:af:22:91:26:54:a4:2e:1a:86:a2:57:a2:
9b:88:ba:c3:6e:53:5b:4b:f1:c7:af:8f:3c:35:fb:
d4:88:fe:9d:a6:63:10:8b:13:63:3f:c0:21:26:43:
4e:3f:f4:eb:db:b3:9c:57:a6:d9:1b:5f:2a:1a:15:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:38:48:3D:6D:16:D1:D6:21:F7:58:7C:9E:C4:63:C0:61:C8:28:7A
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/5DhIPW0W0dYh91h8nsRjwGHIKHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f182::/32
Signature Algorithm: sha256WithRSAEncryption
27:57:74:b4:85:08:87:fe:d5:18:85:82:a8:7d:49:fd:32:68:
dc:21:87:7a:47:ef:6b:83:60:eb:16:68:6c:c0:4d:00:2a:1e:
0e:10:ef:34:1a:18:de:48:7c:22:3f:85:00:bf:63:75:2b:fe:
90:39:c1:33:d4:f1:e1:f6:77:31:6a:29:f7:4c:b5:89:ee:ad:
20:b7:f4:22:56:ae:80:01:c9:53:fc:31:7a:4c:e6:0f:34:73:
7a:3d:c0:6e:17:ee:3a:45:66:6a:e7:3e:03:82:9f:a1:5f:b9:
22:f9:e2:cc:a0:c5:d1:22:02:87:7b:be:15:c5:ac:07:63:ae:
cd:b4:38:92:78:95:ba:d6:15:ad:03:5f:72:95:15:00:f8:67:
f2:7b:57:26:48:af:81:7b:56:af:b3:2d:a5:aa:16:07:3a:b3:
30:06:be:16:01:28:17:58:ec:d5:84:ad:01:e3:73:1e:cc:33:
36:60:73:ac:7a:46:e7:51:9b:a4:50:38:af:17:3e:80:f1:68:
2a:79:79:c2:50:f0:ac:90:4b:8e:e5:62:0b:d2:85:d9:fc:d7:
0a:26:d8:45:41:0d:e6:a6:c6:d8:98:61:20:96:f5:4c:53:95:
33:fb:c5:15:cd:47:64:b3:05:21:ec:dc:f4:8f:c9:95:73:5b:
63:d3:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org