Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/7R8jJ7KkpGwOrvYb1TsVBSYaRSI.roa
File: 7R8jJ7KkpGwOrvYb1TsVBSYaRSI.roa (raw, json)
Hash identifier: GVfjGawzBp3jh1vtLhLUKuO32G/tnEUL3AR4D0wLL4c=
Subject key identifier: ED:1F:23:27:B2:A4:A4:6C:0E:AE:F6:1B:D5:3B:15:05:26:1A:45:22
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A370A88CD7476F0B036D8676B16F5
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/7R8jJ7KkpGwOrvYb1TsVBSYaRSI.roa
Signing time: Sun 01 Jan 2023 03:05:03 +0000
ROA not before: Sun 01 Jan 2023 03:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61335
IP address blocks: 2a00:fd40:c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:37:0a:88:cd:74:76:f0:b0:36:d8:67:6b:16:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed1f2327b2a4a46c0eaef61bd53b1505261a4522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:98:de:89:b6:77:fb:8c:ce:06:31:e3:e3:
35:f2:d5:41:1c:7d:7e:e7:13:ac:34:90:eb:dc:86:
6a:a1:9d:0f:33:75:74:fc:10:fb:c3:ff:32:28:c9:
25:72:67:e2:c2:27:f5:07:50:cf:08:da:07:6a:6b:
99:83:2b:05:3f:91:54:09:8a:53:00:cf:de:78:ed:
97:00:ce:2a:5c:6e:4e:e5:e1:69:5c:6f:fc:14:cc:
64:1e:13:67:23:86:3d:84:50:81:1c:6c:5d:c1:02:
2d:ee:25:3b:22:bd:4f:a2:4e:93:f2:2c:56:8b:67:
64:9a:e9:ca:7e:2a:94:21:b3:fd:73:2d:77:61:f9:
9d:da:bc:04:c4:f7:e8:9f:4d:4e:1b:d2:16:e9:c5:
4d:df:01:61:25:8e:9f:58:2f:7b:86:19:27:42:cf:
1a:75:00:50:a9:c4:e1:e0:e7:b3:c7:be:20:bc:c9:
2a:54:c9:3a:11:9b:49:95:ec:13:64:95:50:5d:49:
3d:db:10:20:b2:5d:ca:07:cc:6f:cc:d3:1b:f8:a8:
71:f9:38:0d:89:82:cc:67:e2:71:da:62:0b:b8:1b:
4e:3d:ec:f3:34:70:59:99:48:d8:f2:95:9d:9e:76:
eb:0e:43:bf:1c:fc:29:1c:92:d2:25:00:d0:d9:23:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1F:23:27:B2:A4:A4:6C:0E:AE:F6:1B:D5:3B:15:05:26:1A:45:22
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/7R8jJ7KkpGwOrvYb1TsVBSYaRSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fd40:c::/48
Signature Algorithm: sha256WithRSAEncryption
97:c4:0e:ee:5a:a7:8c:96:43:eb:53:cc:e1:82:10:66:e0:eb:
b0:e4:93:12:e4:3c:0a:a8:ba:d6:39:d6:dc:b6:a0:38:d8:b4:
7c:e3:be:a9:e6:1c:ba:ee:99:5e:2b:6e:41:58:12:da:42:10:
ba:62:c4:cf:6c:49:cf:14:bf:07:11:e9:ed:c3:8e:9e:d2:ca:
41:24:a9:fe:e5:57:ca:6e:72:a5:f9:19:6d:b9:f8:63:fa:3f:
e9:ef:be:3a:5c:8f:35:f8:32:a3:6b:52:f7:9e:13:eb:08:71:
0c:e8:90:03:b6:4a:cb:53:93:57:d8:cc:90:05:4c:f1:ff:31:
ae:e5:73:b6:6c:ec:7d:00:21:5f:2e:0b:0d:1b:45:54:9d:1f:
b9:55:c2:13:b3:87:ac:3c:84:ad:c9:a5:17:81:fb:e5:40:16:
eb:da:54:01:91:a5:e7:cf:5f:54:a1:e5:41:27:c7:fd:f6:75:
5d:4e:3f:f9:b2:15:78:d3:2f:c6:65:7a:3f:af:f3:5c:3a:65:
64:32:1f:c4:2f:f4:ab:a3:91:9d:cd:fd:c6:ef:5c:71:ac:29:
cf:37:66:02:37:e8:42:14:9a:e7:74:28:6b:30:1e:dd:bd:ef:
e9:71:49:ad:19:7d:eb:1f:48:fc:33:8c:c1:53:45:3a:3d:ed:
f7:ec:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org