Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/5nzHP__Ni0x8WPfu-LMkId2LddY.roa
File: 5nzHP__Ni0x8WPfu-LMkId2LddY.roa (raw, json)
Hash identifier: ZBis7HJdUIYoGB4k+D4oxbeqh2ZE4kb6RNgxTsBy7qc=
Subject key identifier: E6:7C:C7:3F:FF:CD:8B:4C:7C:58:F7:EE:F8:B3:24:21:DD:8B:75:D6
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0185DF596C59FDB61AA11C8B831B74849189
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/5nzHP__Ni0x8WPfu-LMkId2LddY.roa
Signing time: Mon 23 Jan 2023 15:57:37 +0000
ROA not before: Mon 23 Jan 2023 15:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44437
IP address blocks: 2a05:1080::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:df:59:6c:59:fd:b6:1a:a1:1c:8b:83:1b:74:84:91:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 23 15:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e67cc73fffcd8b4c7c58f7eef8b32421dd8b75d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:96:ca:d0:bf:88:ad:59:76:ff:b4:5d:24:
ef:ff:e2:ee:25:bb:14:a3:e7:1b:57:cd:99:de:8f:
43:cf:9f:9d:63:58:95:18:99:4d:46:22:42:26:40:
e7:e0:75:bc:e4:ec:5c:e6:13:59:e4:0a:ef:64:81:
ca:d8:63:8e:b1:91:a6:c8:7a:cc:fe:a8:63:20:da:
55:cb:1c:02:f6:9b:91:bf:ad:ee:36:0c:f8:0e:7e:
ef:6a:8b:70:9a:00:35:49:7a:9d:06:48:c0:da:12:
32:f4:1d:c1:6a:d9:69:4e:14:c9:a8:05:87:a1:67:
9b:e5:5a:c1:f5:e8:2c:fd:d1:92:62:a0:18:f9:c4:
1f:11:be:54:d9:d9:93:f4:de:ed:b6:2b:9d:c5:48:
12:dc:8b:9f:a1:57:a7:9a:b8:0e:1c:11:d5:9d:b3:
7c:f2:51:71:c5:b3:43:d9:21:57:2a:a6:61:9e:d5:
3d:9f:9e:6c:97:88:28:c4:82:af:ff:42:5e:58:6e:
fc:6f:07:99:f8:b6:24:9e:a7:64:48:41:1b:e2:9d:
bf:8a:9d:ec:81:38:f4:88:13:50:f1:ef:55:52:11:
d2:2b:9c:22:81:b4:d3:f7:2a:76:ed:1a:1c:b5:d3:
e9:69:44:1f:90:e1:34:59:9a:96:00:99:b6:78:24:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7C:C7:3F:FF:CD:8B:4C:7C:58:F7:EE:F8:B3:24:21:DD:8B:75:D6
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/5nzHP__Ni0x8WPfu-LMkId2LddY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1080::/32
Signature Algorithm: sha256WithRSAEncryption
07:23:75:d0:23:00:34:4e:46:ba:5b:5b:06:0a:48:b8:a2:df:
55:52:f1:69:c1:11:bb:ec:fe:7d:f4:8a:2f:25:f1:f0:8e:5d:
09:98:c8:c3:ee:0b:7c:60:84:b7:f9:06:f9:65:84:6e:79:c2:
ad:4b:99:b6:d8:4e:f5:97:56:b2:c4:ea:40:52:b8:1e:f0:db:
ea:45:55:e5:87:e4:25:af:cb:c5:02:a5:5e:28:19:44:f9:df:
b2:0c:18:ef:fe:c9:d9:74:bf:53:e5:83:aa:ca:39:9f:7b:07:
34:55:5a:b3:e6:1a:b0:31:e1:f2:fe:ef:ae:19:dc:15:3f:93:
cb:21:e7:92:04:8e:95:da:b0:3e:90:cf:6d:e8:6b:ef:18:3f:
57:04:4e:e7:3a:45:64:e5:89:aa:83:be:52:d0:7a:6e:6a:8f:
c7:65:14:7b:50:2e:78:1c:70:9d:82:e5:f2:45:07:e0:54:d6:
c9:67:25:27:ec:c1:14:0d:b0:ec:1e:d5:8e:61:a1:25:1a:8c:
cf:d8:f4:e0:33:ed:7d:d0:9c:6f:3e:67:47:85:aa:5a:9a:64:
d4:a9:d1:57:51:cc:cd:bc:22:f2:d9:cd:8e:00:af:67:cc:f5:
24:b3:02:c6:ff:a9:a9:10:2c:d1:94:10:ca:5c:70:38:10:e2:
f4:db:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org