Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/PAk1W5cvf6krEqIO6NTYP-RJJU8.roa
File: PAk1W5cvf6krEqIO6NTYP-RJJU8.roa (raw, json)
Hash identifier: YnSyvVxsfG5kZYcKYaanoTNHG3vwFvfBV7X/bMwMnZQ=
Subject key identifier: 3C:09:35:5B:97:2F:7F:A9:2B:12:A2:0E:E8:D4:D8:3F:E4:49:25:4F
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 01856CCAD2BD63BCF91AA09DDB23218F8BA9
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/PAk1W5cvf6krEqIO6NTYP-RJJU8.roa
Signing time: Sun 01 Jan 2023 10:05:09 +0000
ROA not before: Sun 01 Jan 2023 10:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201210
IP address blocks: 2a05:8cc0::/29 maxlen: 29
2001:4d70::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d2:bd:63:bc:f9:1a:a0:9d:db:23:21:8f:8b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jan 1 10:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c09355b972f7fa92b12a20ee8d4d83fe449254f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:17:33:d0:58:3c:a4:d1:5b:0a:79:05:24:
63:97:f0:e0:62:5c:b1:48:81:02:ba:71:2f:80:65:
38:f6:93:db:d9:ae:a3:85:dc:04:44:4e:96:06:cb:
ec:20:17:ba:22:9b:0b:63:bd:33:2d:96:f9:0f:03:
38:77:16:2b:02:a1:8f:51:51:2a:43:b8:09:a7:8f:
b2:e0:6d:5e:bd:68:76:41:ff:f7:a4:21:e0:46:f1:
33:82:2e:0f:22:3d:48:2e:11:15:e6:93:cf:b3:dd:
e5:ab:66:52:16:36:44:ca:6d:20:dd:a3:d8:b6:07:
a3:5c:b2:ad:40:e8:fb:d4:cf:f6:b4:fc:23:7f:be:
1a:16:33:09:d3:7c:4f:6e:eb:02:b1:64:5d:59:70:
a2:8f:86:50:3e:ff:11:e7:49:47:ed:ca:6b:46:d5:
c0:8d:55:79:ae:48:fa:c3:8a:54:04:c5:61:c9:24:
6e:3d:21:aa:74:af:32:56:ec:a6:59:08:27:2c:3c:
d7:f4:6c:92:23:c9:2e:63:d4:68:b1:98:65:e5:a5:
19:5f:a2:b5:5a:27:c1:f8:ea:32:65:9b:49:87:c2:
e4:6e:b2:10:f8:0e:b6:b0:2c:74:2f:92:7c:03:5b:
9f:36:71:df:8c:21:0a:bd:54:30:3a:b5:9b:d3:fe:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:09:35:5B:97:2F:7F:A9:2B:12:A2:0E:E8:D4:D8:3F:E4:49:25:4F
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/PAk1W5cvf6krEqIO6NTYP-RJJU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4d70::/32
2a05:8cc0::/29
Signature Algorithm: sha256WithRSAEncryption
5c:93:4a:4b:f5:4c:6f:f4:ca:26:4d:69:46:c6:ee:36:56:1a:
d8:78:18:8a:e7:94:17:0c:e1:dd:54:d1:53:bf:40:e3:c9:46:
d5:20:80:8f:09:56:b1:bd:80:15:d7:88:89:2a:3e:a8:0a:7a:
37:d1:fd:b7:24:c1:86:dd:9c:f2:3c:63:c4:c5:28:55:2e:64:
65:3b:52:48:28:09:fe:47:99:ab:87:e0:3a:c8:29:1f:59:4e:
f7:32:35:2a:7d:ab:fe:af:a5:26:cd:83:49:a0:95:c1:d6:55:
b0:c2:88:4e:45:d1:7a:03:59:bc:9c:18:1a:be:29:1e:dd:d5:
df:80:72:7f:e8:b5:ff:d9:2a:ad:e0:01:6b:06:84:73:0c:9c:
61:2d:0b:32:e3:f2:a3:70:de:c4:9f:ba:eb:ce:0e:e1:78:9e:
54:6b:83:5f:23:58:26:22:46:15:10:5e:f5:09:60:4b:d6:6d:
42:1c:01:30:5d:2c:d3:c3:9a:c1:cd:df:3e:0d:37:24:c9:49:
24:35:10:5e:df:5b:33:35:13:19:54:b2:c7:e2:80:7e:c3:28:
56:30:c4:51:19:b5:f4:74:21:4b:01:9c:47:e2:9d:b5:52:07:
2e:70:cf:b2:a0:16:82:78:24:bf:c3:8e:a2:ec:b9:0e:16:f8:
30:21:f2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:18 2024 by rpki-client on console-ams.rpki-client.org