Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/wWeYnb9jN4UgGxn77PCwpuMcwMM.roa
File: wWeYnb9jN4UgGxn77PCwpuMcwMM.roa (raw, json)
Hash identifier: Zx61gpxJgJa9+9gRJUKzX5CkMY4IR2emSIHTvmJ78ho=
Subject key identifier: C1:67:98:9D:BF:63:37:85:20:1B:19:FB:EC:F0:B0:A6:E3:1C:C0:C3
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FEAA68BA196BFFC1120E2A1C53FA3
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/wWeYnb9jN4UgGxn77PCwpuMcwMM.roa
Signing time: Sun 01 Jan 2023 21:14:49 +0000
ROA not before: Sun 01 Jan 2023 21:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203874
IP address blocks: 2a0e:aa07:e046::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:ea:a6:8b:a1:96:bf:fc:11:20:e2:a1:c5:3f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c167989dbf633785201b19fbecf0b0a6e31cc0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:c8:b6:d4:94:29:2e:ce:f8:65:fa:93:1d:
b9:91:27:4a:ca:1b:94:5e:8b:29:8c:85:78:f0:48:
72:a0:2b:e6:e0:6b:f2:3f:43:ce:f5:e4:3a:33:ab:
01:02:97:e9:79:b9:ef:c5:bd:01:d1:ab:bc:9c:e5:
4d:cc:76:75:ed:2d:7e:0b:59:9a:ec:10:d6:60:9e:
d8:98:dc:7c:2d:eb:ad:df:3b:8a:21:00:d0:44:94:
46:68:76:17:7a:9f:cc:5b:fc:28:8d:e1:09:fe:4e:
93:9b:06:5a:ef:e1:bd:b5:f0:f0:22:3d:d8:fa:87:
e9:1c:39:a6:02:17:e6:59:6e:1c:7c:12:ea:12:42:
4d:33:6b:ae:67:c1:7c:74:d2:d1:7e:63:98:ca:f3:
79:79:38:a2:3c:3d:11:29:bb:1f:43:0b:41:7e:e0:
69:22:79:0e:36:80:f4:2e:51:48:2e:84:20:f5:38:
2c:1c:7d:10:fb:b3:b4:8b:d2:21:59:64:ac:8c:ef:
a3:d6:6e:d0:fa:cf:27:15:f7:83:e4:58:8c:80:4f:
01:ce:14:6f:f8:0e:92:fd:6d:2c:a4:77:11:d0:c3:
05:cb:e5:79:23:d6:47:7b:a1:7c:08:ac:0a:74:bc:
25:3f:06:dd:a2:c9:b3:dc:a9:b2:e4:41:d7:23:97:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:67:98:9D:BF:63:37:85:20:1B:19:FB:EC:F0:B0:A6:E3:1C:C0:C3
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/wWeYnb9jN4UgGxn77PCwpuMcwMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e046::/48
Signature Algorithm: sha256WithRSAEncryption
bd:e9:31:66:90:a7:55:18:59:0e:69:d8:4d:f8:35:2c:87:8f:
85:d1:e2:bb:16:77:78:5e:47:d5:e9:16:3a:53:0e:7f:aa:e8:
70:31:41:66:6a:72:c1:8c:b7:95:2c:ec:37:34:60:f9:99:f9:
bf:8b:d6:84:09:3b:d5:d3:50:ab:4d:7b:e6:9f:e6:67:a8:dd:
76:7a:10:7f:20:db:50:68:e7:69:ef:8d:e7:9c:78:77:a9:17:
a4:a2:7c:db:d1:91:48:10:67:27:08:35:d3:10:58:b1:9c:ce:
ec:b8:86:3e:17:07:75:5d:47:5a:fa:8f:63:cd:2b:ec:69:fc:
78:11:97:1e:65:ea:4c:ff:64:75:48:0c:a5:0b:a9:ab:54:e9:
d1:9c:39:fb:23:f1:5a:ab:65:3e:db:3c:b9:9f:fe:14:34:9d:
cb:b8:39:93:09:c5:d3:54:13:05:82:0e:8d:1e:9d:bf:4f:16:
de:b8:f9:98:8a:30:a1:88:2f:1f:82:5d:f7:11:f7:a6:2f:3a:
37:cc:38:fd:5e:51:7d:57:93:f2:dc:aa:65:b6:ff:e2:16:26:
63:36:21:50:6d:6c:97:df:bd:2c:00:7f:1f:d8:c0:9b:12:a2:
f3:7c:24:06:63:52:d8:5c:00:e4:00:b0:da:8e:5f:d7:1c:ab:
93:5a:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org