Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/E5iNzsri14xt2d8-96dI8KVt90w.roa
File: E5iNzsri14xt2d8-96dI8KVt90w.roa (raw, json)
Hash identifier: r6mxGfrGxcY1ZoYndsqxQUnZauTOZAiHgA45kvFKPkw=
Subject key identifier: 13:98:8D:CE:CA:E2:D7:8C:6D:D9:DF:3E:F7:A7:48:F0:A5:6D:F7:4C
Certificate issuer: /CN=c9da628824cd59b14272b4058a89642e4b47bddc
Certificate serial: 01856D540BCB7D0C6CA5D51FD9985541298D
Authority key identifier: C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/E5iNzsri14xt2d8-96dI8KVt90w.roa
Signing time: Sun 01 Jan 2023 12:35:02 +0000
ROA not before: Sun 01 Jan 2023 12:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6805
IP address blocks: 2001:67c:19e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:54:0b:cb:7d:0c:6c:a5:d5:1f:d9:98:55:41:29:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da628824cd59b14272b4058a89642e4b47bddc
Validity
Not Before: Jan 1 12:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13988dcecae2d78c6dd9df3ef7a748f0a56df74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:a7:76:37:c1:2d:8c:84:a3:b4:ed:bf:eb:
fc:a5:e1:ef:c5:ed:9a:97:33:ae:23:b3:e7:6e:45:
0d:d5:bd:a9:6b:63:66:55:40:b9:a8:a2:ef:6d:86:
58:87:80:34:9d:a0:02:ef:6e:08:86:4b:ac:1b:dc:
21:a8:eb:f5:fc:f0:e3:1e:cc:35:5a:bf:f3:87:b9:
e4:02:75:6c:b6:9d:9e:41:fc:86:45:a1:9e:34:8b:
6f:dc:a2:f8:e6:48:82:62:4e:56:91:e8:ba:04:5e:
92:8a:3a:0d:5f:b4:a4:b8:3a:e9:21:be:72:aa:ca:
51:ac:4a:d3:bd:7c:df:d5:de:2f:32:ce:13:17:0c:
75:a9:11:53:dc:f8:27:a2:cc:46:92:8b:59:9f:b3:
52:ad:02:fc:0b:01:34:d1:08:51:4e:88:7c:dd:50:
6f:82:db:3f:57:cf:7a:c2:39:a4:2f:22:af:fc:55:
82:73:7a:48:93:78:b9:15:0e:6f:a8:ea:6b:50:e6:
c5:2d:f5:ac:a7:6d:ef:84:c7:75:fc:51:23:0c:6d:
a0:83:4b:5a:20:b6:b3:b6:24:dd:c5:b8:ee:5a:2a:
10:a7:0a:a2:50:1c:ae:70:6c:d8:cd:4c:a8:3e:6a:
82:1f:28:a3:52:b1:a5:47:24:c8:ce:3e:a8:1e:73:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:98:8D:CE:CA:E2:D7:8C:6D:D9:DF:3E:F7:A7:48:F0:A5:6D:F7:4C
X509v3 Authority Key Identifier:
keyid:C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/E5iNzsri14xt2d8-96dI8KVt90w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:19e0::/48
Signature Algorithm: sha256WithRSAEncryption
96:33:1f:b0:cf:75:b8:0f:23:91:3b:90:f5:ce:69:43:8c:f6:
a0:d4:43:7d:d9:c1:f7:44:4b:30:d9:37:dc:71:b1:ff:21:bb:
d9:f0:3d:0b:2f:29:aa:40:9f:a7:a3:a7:14:3e:70:d1:4a:2b:
33:b3:89:10:4f:3a:67:d2:e5:5b:06:7c:c3:0d:15:7c:8f:24:
81:17:7e:97:44:09:f7:b0:9c:a5:ff:de:a2:af:d2:dc:e6:ef:
e4:8f:66:b2:68:6f:b7:13:5e:10:10:2f:82:02:e3:58:9f:7c:
50:be:4b:1b:7d:97:3a:0b:a5:80:d0:ff:76:48:f8:7b:ee:7e:
52:a5:82:0e:ff:2e:ba:ac:2f:3b:8d:7c:a6:b0:eb:08:fc:77:
6f:a7:65:68:52:bd:db:be:51:ec:15:9d:57:b4:dd:0e:9f:75:
65:65:3c:76:ac:7c:7c:0b:4d:e5:e4:1c:0c:a3:6e:6f:2b:da:
76:7b:a1:ed:dd:ae:ad:39:fc:90:cc:11:33:59:b7:04:e5:e0:
60:0f:b7:ed:d1:52:6c:32:4c:ee:4b:0d:26:3c:10:ce:76:a3:
a7:9c:d4:bd:f4:6a:42:4a:66:18:ea:f2:8d:ac:86:6e:83:57:
70:34:ed:42:a8:ba:aa:de:a6:cd:b6:f2:d2:8a:c0:51:49:80:
95:8e:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:19 2024 by rpki-client on console-fra.rpki-client.org