Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/X2lqakUUoFLrDEWJbpUDQTXbURY.roa
File: X2lqakUUoFLrDEWJbpUDQTXbURY.roa (raw, json)
Hash identifier: EX2tg/3O0CdDw3Ay8HvyT2bjMp4JQmiM23DfZawwiGI=
Subject key identifier: 5F:69:6A:6A:45:14:A0:52:EB:0C:45:89:6E:95:03:41:35:DB:51:16
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FDE5F58753740EB0997BDD0A95363
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/X2lqakUUoFLrDEWJbpUDQTXbURY.roa
Signing time: Sun 01 Jan 2023 21:14:46 +0000
ROA not before: Sun 01 Jan 2023 21:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48646
IP address blocks: 2a0e:aa01:ab02::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:de:5f:58:75:37:40:eb:09:97:bd:d0:a9:53:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f696a6a4514a052eb0c45896e95034135db5116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d2:ed:05:7c:93:f9:42:83:87:44:a5:30:bc:
da:f9:2b:d5:a4:86:d3:c4:a4:6c:83:a1:d3:a9:f7:
76:f6:59:3f:f4:43:7c:46:0b:af:b3:33:83:32:a1:
3c:73:74:74:dd:33:4e:c5:e7:f0:f9:02:bb:ad:37:
74:0d:d3:2c:80:b7:94:d2:22:f5:6d:72:4d:bb:34:
df:9c:4a:4f:75:09:a9:96:2a:cc:8a:72:d7:b6:2d:
7b:c1:a1:fd:50:f8:a3:b6:e2:1f:38:e4:18:c7:2d:
19:00:bd:14:f8:b9:b3:5f:3f:18:c3:ab:93:53:84:
1f:54:39:9a:07:12:f8:05:1a:c4:61:bc:60:c0:0e:
7c:27:43:55:9c:69:cb:3b:95:20:e3:68:8f:2f:e4:
ed:ca:08:ff:be:dd:b4:3b:e7:c7:1f:52:bd:60:bb:
56:04:65:8b:c6:b5:bf:1a:82:4f:e7:53:66:c8:15:
5a:05:7d:35:09:88:91:80:43:d1:d4:86:36:56:ce:
44:8a:29:fb:19:db:08:80:5c:4f:fd:53:2c:7b:28:
62:6b:6f:24:27:7e:4c:fd:c3:5d:3b:f1:d5:db:f1:
4a:97:8d:6f:30:54:59:d4:eb:cb:4b:85:43:ac:08:
be:47:4f:7c:8f:5a:59:25:66:62:0e:56:4d:80:f6:
44:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:69:6A:6A:45:14:A0:52:EB:0C:45:89:6E:95:03:41:35:DB:51:16
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/X2lqakUUoFLrDEWJbpUDQTXbURY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa01:ab02::/48
Signature Algorithm: sha256WithRSAEncryption
63:38:1b:9f:43:94:84:82:04:df:96:2d:a1:e2:3b:64:e8:e8:
e1:2b:8c:8e:c2:95:7e:d0:e9:81:b4:2f:6a:c5:03:d6:26:42:
b7:e3:42:4b:d5:e9:57:ec:08:46:ec:8c:04:e3:39:77:99:e4:
3f:99:55:90:25:10:01:5a:eb:22:44:79:db:fe:cf:34:c1:1c:
b1:ec:36:ab:45:e3:f6:18:7f:6e:5f:bd:3e:1b:71:b8:5a:2d:
91:4c:74:9c:1f:20:0c:c7:a0:7a:ac:89:7a:ff:f4:13:57:3f:
cc:ad:9e:80:ab:2e:6f:6d:41:08:d6:44:71:82:bf:d3:49:7c:
78:f0:29:4e:90:be:3e:5a:c0:65:60:8c:df:bb:e4:5d:d0:f5:
84:ae:96:d6:13:f9:7f:79:03:77:d7:f6:3b:e2:a1:22:19:4d:
d0:cf:21:c8:fc:b2:24:25:50:6b:02:8f:66:dd:a2:a7:c3:96:
be:6a:88:2a:ef:06:d1:b2:ed:fd:b6:43:ea:06:27:45:ee:3d:
4c:7f:62:9f:b1:d5:10:05:3f:1e:a5:51:74:f6:0c:81:49:5a:
1e:fe:24:6b:da:ba:62:ef:c0:c4:a9:e7:9e:5a:c1:15:4e:7e:
7e:6c:7d:41:3d:9a:42:25:ca:d0:d5:7b:32:d1:24:6c:8f:5e:
4b:73:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org