Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/5pOE9-ha9fqHM_ggtFnniL-TOpw.roa
File: 5pOE9-ha9fqHM_ggtFnniL-TOpw.roa (raw, json)
Hash identifier: 5h9kQ7Wr0mXRYmIxSBPme7V7cAVsV9LOpoPu2bsYvgw=
Subject key identifier: E6:93:84:F7:E8:5A:F5:FA:87:33:F8:20:B4:59:E7:88:BF:93:3A:9C
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FF44DBDEF4FDEE9614CA35EAD0F78
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/5pOE9-ha9fqHM_ggtFnniL-TOpw.roa
Signing time: Sun 01 Jan 2023 21:14:51 +0000
ROA not before: Sun 01 Jan 2023 21:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208618
IP address blocks: 2a0e:aa06:470::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f4:4d:bd:ef:4f:de:e9:61:4c:a3:5e:ad:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e69384f7e85af5fa8733f820b459e788bf933a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:37:43:21:7e:6f:dd:95:21:86:80:47:ee:
5d:62:c6:ca:80:17:d1:81:13:44:68:25:76:8c:ad:
22:4c:3d:1a:18:4f:c0:42:37:d9:88:c8:54:bc:a3:
4c:2f:48:87:12:2b:db:5e:22:d1:9d:2e:ac:c7:b2:
e0:8d:a1:39:5c:6b:1b:1e:37:7c:29:ba:9e:0e:03:
be:51:ef:ea:0f:9a:63:f0:77:3e:7a:20:fe:5b:28:
c8:c1:c0:82:97:2e:ea:c9:01:f6:99:37:34:d1:b7:
ab:13:aa:aa:62:0b:4c:bf:fa:2b:05:7d:46:93:15:
0b:2b:7d:77:26:90:45:13:ef:bf:2b:9f:0c:5f:72:
99:55:18:54:6d:7a:3c:6d:70:2a:45:f5:80:bc:aa:
ca:6c:b3:e6:33:be:22:51:17:2b:ae:81:76:59:0d:
e2:a0:2e:95:f6:42:ec:16:a7:f3:1e:41:4e:37:ce:
b0:9a:ca:cb:60:80:52:8a:5e:99:d0:e2:64:09:d1:
5f:6b:ef:2e:c4:da:2e:2c:f4:bb:45:9b:e6:08:35:
3f:12:98:a3:e9:e7:f8:05:c3:56:e4:88:10:f0:3b:
09:92:0e:4f:b6:1f:9d:49:7a:34:af:4f:46:09:3a:
d7:b4:33:65:14:ee:24:bd:3e:63:13:86:2a:04:d0:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:93:84:F7:E8:5A:F5:FA:87:33:F8:20:B4:59:E7:88:BF:93:3A:9C
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/5pOE9-ha9fqHM_ggtFnniL-TOpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:470::/44
Signature Algorithm: sha256WithRSAEncryption
7d:52:4a:3a:f0:34:82:8d:f4:3e:6c:cd:d0:4e:35:2f:20:ee:
c6:3c:a2:8c:0b:2e:4d:67:84:0a:8e:13:58:0f:57:68:6c:53:
18:d9:c2:ee:b4:66:be:4f:56:3e:8a:2d:12:fc:f2:76:59:a0:
36:15:32:39:fc:82:75:89:42:fb:52:d9:53:94:9d:2a:4a:2a:
1e:d8:9f:e3:d0:5d:8d:eb:6b:3b:59:31:e8:05:1d:7c:85:77:
1f:64:94:cf:df:ec:0c:39:2d:ca:84:b4:34:d2:35:fb:7f:98:
01:93:59:3c:fa:c4:e8:b9:c7:75:70:c2:fa:c9:30:60:9c:a7:
6f:19:dc:23:89:3f:8d:60:36:14:03:1c:2c:a5:eb:e3:c5:b9:
87:e3:ed:81:94:45:a7:ea:da:ed:93:2e:db:c7:93:de:64:63:
de:1f:cd:29:01:15:8c:82:0c:04:c1:91:69:c8:25:f1:7e:e2:
9a:12:ad:fc:25:5c:c9:88:11:ac:e2:26:88:96:52:76:f2:d9:
4a:b0:f8:74:7a:bc:b8:56:1d:7d:2f:9c:c5:36:ad:07:bf:c5:
7a:2b:d9:ee:1c:dc:ba:e9:88:61:7c:1f:1c:d3:be:99:0c:cd:
8b:d7:f4:a3:da:d8:7a:08:52:c8:07:bd:f6:5a:1f:9a:0c:af:
3e:5e:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:10 2024 by rpki-client on console-ams.rpki-client.org