Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Wq_w0b7WsQNt6Zl3-iuktKAB-hY.roa
File: Wq_w0b7WsQNt6Zl3-iuktKAB-hY.roa (raw, json)
Hash identifier: 5CXCvh3XxxqXJYGrtwC82Hcwn80mF8GzKEyTd8lTtPQ=
Subject key identifier: 5A:AF:F0:D1:BE:D6:B1:03:6D:E9:99:77:FA:2B:A4:B4:A0:01:FA:16
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F3009AA3807507359CA7E0241E20C6B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Wq_w0b7WsQNt6Zl3-iuktKAB-hY.roa
Signing time: Sun 01 Jan 2023 21:14:57 +0000
ROA not before: Sun 01 Jan 2023 21:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211968
IP address blocks: 2a0e:aa07:e01a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:09:aa:38:07:50:73:59:ca:7e:02:41:e2:0c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aaff0d1bed6b1036de99977fa2ba4b4a001fa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:91:4a:70:25:5f:c1:42:2e:11:6e:77:ab:
5d:5a:14:5d:d3:31:1f:67:15:42:be:b8:00:33:32:
44:ce:71:9c:af:66:0f:26:9e:b5:4b:13:26:65:ed:
b0:d8:fe:ce:91:2c:5c:8d:21:9c:fe:47:72:ee:f8:
49:b9:e2:72:32:82:5b:04:1f:9c:a0:a3:87:5d:ec:
cc:57:92:88:4e:70:35:4b:c1:fa:8f:91:78:18:c7:
74:12:cf:70:d7:14:fb:2c:b4:80:d6:0e:b4:b4:5c:
72:db:47:0a:e8:a4:6a:7b:97:b5:12:53:91:a0:ff:
5f:4f:7a:d6:38:12:60:1c:95:05:14:67:90:c0:67:
4f:79:8b:bd:ba:61:ac:b9:07:e4:79:3a:33:cb:86:
dc:11:65:d4:dc:b1:e6:c2:a8:ec:c5:8b:63:3a:da:
9b:08:a3:10:77:13:c9:6e:7f:c2:0f:59:67:e7:fe:
94:9f:83:4d:fb:08:5e:64:9a:35:d7:bf:72:8b:08:
87:e7:7d:80:4a:f4:79:af:9d:c1:69:ea:66:9e:b3:
20:a4:16:ad:8e:d6:dc:35:7c:dc:e9:54:82:51:be:
1c:82:5f:45:50:8b:bb:ff:03:1c:c2:d7:87:88:f5:
48:f2:1f:99:45:0c:e3:cf:f2:23:de:ee:07:96:c8:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:F0:D1:BE:D6:B1:03:6D:E9:99:77:FA:2B:A4:B4:A0:01:FA:16
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Wq_w0b7WsQNt6Zl3-iuktKAB-hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e01a::/48
Signature Algorithm: sha256WithRSAEncryption
48:6c:f2:01:82:00:97:fa:0f:b3:dc:c7:55:b4:81:38:1d:83:
b5:a9:24:d6:5f:a6:3f:b6:9e:7b:aa:89:70:35:72:bb:9f:28:
21:8f:eb:79:aa:a4:59:5d:1a:2f:08:2f:3e:79:f4:7d:bd:54:
3c:8b:58:44:da:41:eb:dd:96:66:38:0d:7f:eb:47:23:82:61:
ab:b9:1c:a5:bc:54:71:2b:a1:17:a5:41:0d:48:d9:4d:bf:84:
76:3a:bc:83:82:b4:03:58:ae:4f:22:dc:00:ac:82:8b:b1:80:
30:38:1d:8f:cb:1e:ee:31:80:6b:c7:5f:54:c1:e2:1b:1f:81:
01:03:4d:31:65:e0:8b:0a:38:98:9d:63:c2:96:e2:b4:1a:7a:
30:31:17:e6:4c:f7:dd:0c:72:fa:d8:88:74:15:2b:0e:cc:c6:
c9:25:15:50:ac:25:32:58:5b:3e:ce:00:28:74:6e:b2:a3:4e:
ee:c1:d9:6c:61:f4:92:0d:a2:ff:fb:98:f8:1d:f1:59:97:ef:
08:b1:1f:e9:9b:3a:80:a1:bf:b1:38:03:03:39:31:a9:55:ec:
04:71:42:c4:26:ce:b4:18:86:36:98:e4:7d:04:df:bc:c6:71:
f9:a9:02:fb:00:85:56:06:9f:96:0f:30:a2:7d:b7:da:be:f1:
50:ca:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org