Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/wGkSVHP9Rz2tc3kWfQW-hy9eicw.roa
File: wGkSVHP9Rz2tc3kWfQW-hy9eicw.roa (raw, json)
Hash identifier: 1/+4KHE8C8WiHt/ay3esnU/C12y6cX5/4WF629reHjA=
Subject key identifier: C0:69:12:54:73:FD:47:3D:AD:73:79:16:7D:05:BE:87:2F:5E:89:CC
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 018830603F6204198CA173990BCE568A8C5B
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/wGkSVHP9Rz2tc3kWfQW-hy9eicw.roa
Signing time: Thu 18 May 2023 19:39:54 +0000
ROA not before: Thu 18 May 2023 19:39:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62651
IP address blocks: 2a03:efc0:2300::/40 maxlen: 40
2a03:efc0:2500::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 21 Jun 2023 20:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:60:3f:62:04:19:8c:a1:73:99:0b:ce:56:8a:8c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: May 18 19:39:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c069125473fd473dad7379167d05be872f5e89cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:8d:87:28:8f:33:b4:68:79:98:da:55:28:
cf:70:6c:8a:74:20:cf:b2:6b:37:f4:13:5a:b9:53:
10:80:d4:ea:39:29:26:07:35:a9:08:13:90:3f:05:
06:a4:79:36:2f:3c:d5:2e:c9:f0:35:f9:70:1c:ac:
14:77:8b:dc:02:28:86:dc:30:d9:bf:f2:9f:fe:0b:
2e:69:93:d0:8f:ce:26:82:c5:97:60:c5:18:f5:a6:
57:d9:9e:45:95:ae:ce:cf:ec:cc:ad:b5:df:44:f7:
dc:30:73:8b:d2:79:ed:72:ed:f5:1e:ab:d1:bc:91:
9c:44:28:95:43:5f:f1:4c:15:bc:24:55:53:c1:42:
3f:c5:fc:5c:c5:f2:08:74:19:73:78:b7:2e:9d:00:
38:e8:d6:6f:8c:6c:a3:84:e5:e6:f2:5e:31:60:67:
b7:1f:2e:30:11:48:f8:93:d1:5e:e6:27:a1:e7:69:
9d:2c:f9:b2:d6:e1:84:83:99:5d:c6:f1:18:b1:dc:
a5:2f:5f:2c:22:fd:5a:8b:b9:74:5b:b8:cc:59:ee:
eb:74:c3:6f:32:00:e7:ad:2c:9d:7b:e8:97:fb:a0:
f6:a5:fa:b4:bd:7a:b9:38:28:91:70:e8:84:0f:73:
0f:b8:d6:ff:a5:e5:d7:69:15:86:fe:72:4d:cb:ac:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:69:12:54:73:FD:47:3D:AD:73:79:16:7D:05:BE:87:2F:5E:89:CC
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/wGkSVHP9Rz2tc3kWfQW-hy9eicw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:efc0:2300::/40
2a03:efc0:2500::/40
Signature Algorithm: sha256WithRSAEncryption
92:a1:cf:f6:19:31:55:6e:31:f1:29:b2:57:b5:07:40:16:74:
4d:5e:55:0b:ed:dc:f3:b5:03:8b:e0:4e:f7:4b:ef:53:50:96:
8c:34:e6:4a:a1:3e:db:9f:82:56:15:0b:37:95:d2:21:53:f7:
63:5f:6b:d1:34:61:f0:cc:45:97:e9:a9:9a:96:e5:9b:a7:97:
25:ba:e6:42:3d:d3:54:ff:1c:64:86:de:fe:82:fa:26:b4:d5:
07:e0:32:02:7a:4a:6e:2e:c9:dd:2e:15:d4:aa:87:32:49:c5:
03:93:17:3d:8c:a0:1a:c3:0e:2a:be:db:07:b0:8c:2e:c8:3d:
fd:51:45:50:aa:57:65:d9:95:3f:d1:04:bd:22:3c:98:54:01:
99:59:fd:cd:35:8d:b0:a3:9b:a3:46:be:bb:43:71:3d:3b:90:
91:51:76:e7:7a:a9:58:de:3d:b3:9a:d9:a8:d0:1d:c7:02:03:
2a:2c:f6:00:6e:bd:56:60:97:47:5f:f0:c0:0b:7d:13:4a:7a:
7b:53:0e:b5:5f:82:a9:eb:0b:41:12:d2:ea:88:66:c6:0d:ae:
3f:fb:ad:20:07:79:e1:87:0e:c2:72:f5:63:29:52:76:e3:e7:
db:03:d4:d7:e2:c9:70:8c:5a:b6:e8:ee:8d:5a:16:fb:4e:ca:
7b:da:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:30 2024 by rpki-client on console-fra.rpki-client.org