Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/5YHroGyLDh0EhETTf8_hQM2-F_0.roa
File: 5YHroGyLDh0EhETTf8_hQM2-F_0.roa (raw, json)
Hash identifier: fX8W3W5EdzTjcY0/rWT2QBiFknepAerz8yKXN2nTpII=
Subject key identifier: E5:81:EB:A0:6C:8B:0E:1D:04:84:44:D3:7F:CF:E1:40:CD:BE:17:FD
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0188623ED4FA564A1DCDFC270B0DCBD8F442
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/5YHroGyLDh0EhETTf8_hQM2-F_0.roa
Signing time: Sun 28 May 2023 12:04:24 +0000
ROA not before: Sun 28 May 2023 12:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50840
IP address blocks: 2a10:2601:a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:62:3e:d4:fa:56:4a:1d:cd:fc:27:0b:0d:cb:d8:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: May 28 12:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e581eba06c8b0e1d048444d37fcfe140cdbe17fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:c2:c6:80:5d:96:4f:74:33:80:7e:76:4e:
dc:f4:2a:96:a1:59:56:ef:5d:da:4f:24:ac:06:f1:
0b:56:23:e9:16:8a:9d:47:1b:e5:ff:c7:f7:f5:1b:
99:80:c0:0b:96:67:fb:df:ae:9c:35:3f:b2:f2:e7:
7a:ae:a7:96:61:6d:cb:b8:00:92:e8:29:9b:e2:dd:
8d:85:56:3b:b9:70:c3:31:64:31:14:42:bb:f9:78:
ea:3e:56:9b:cf:26:9d:dc:01:3c:10:dc:71:1e:73:
36:0e:ca:1a:18:ee:fb:6d:98:87:ef:dd:7b:44:b7:
cb:84:a9:44:11:76:fd:f4:2c:8d:0b:de:01:a1:5e:
4c:49:5b:1a:b3:be:c5:36:52:90:d7:b1:08:fe:56:
0d:00:14:16:9e:b7:6b:9a:7d:ca:09:1c:be:5c:a8:
74:fb:30:4c:cc:ef:b7:4d:0f:68:e7:af:13:c9:00:
a5:8e:2e:5b:c0:bc:7d:8c:03:7a:81:80:52:d6:8e:
f2:97:65:39:08:47:6b:7c:e1:9a:df:92:67:79:17:
58:8e:eb:92:6b:89:d7:eb:3d:c3:8c:92:2b:b4:8c:
95:75:3e:23:90:18:9b:6c:a9:e7:63:e9:29:f8:c6:
3e:9b:49:e7:f4:ca:ac:51:0e:91:ad:d9:09:48:1a:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:81:EB:A0:6C:8B:0E:1D:04:84:44:D3:7F:CF:E1:40:CD:BE:17:FD
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/5YHroGyLDh0EhETTf8_hQM2-F_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2601:a::/48
Signature Algorithm: sha256WithRSAEncryption
17:3a:ae:ef:05:ae:fe:4d:54:e2:93:f6:8a:3b:e1:23:47:bc:
30:84:b3:7b:98:e8:a3:fa:ca:d3:5e:ee:5c:67:30:d7:ae:b5:
ee:7e:6d:b5:5e:7c:5c:da:1b:d7:f4:84:b3:03:bc:c7:23:c0:
9e:1c:bc:bb:64:a4:75:09:4e:8d:01:74:73:e2:84:45:26:07:
45:ae:3a:46:5d:5c:f4:f6:52:84:fc:20:b9:0e:29:8c:e4:10:
70:60:7c:d0:30:77:7a:9a:34:9f:90:90:ba:a8:df:75:e8:e0:
15:26:66:66:6f:ca:14:ee:18:00:96:a6:46:9c:3e:9c:7d:26:
44:1a:56:c4:20:ee:96:48:96:f7:65:6f:96:87:06:c7:b6:d7:
18:d8:e5:b6:48:66:0f:12:68:ff:cc:c1:01:44:e9:37:1b:f0:
ec:f1:49:82:37:3b:4c:1c:2a:c3:ec:ce:60:8e:b3:56:6a:7c:
00:dd:74:48:fd:45:23:28:1d:7d:c6:3f:c3:14:cf:9c:36:a8:
fa:33:eb:44:27:c5:23:74:ec:d9:5e:59:97:7d:dc:ff:b0:dc:
19:ee:b6:05:3a:3f:31:85:78:06:24:88:3a:95:dc:9b:e6:88:
fd:cd:fa:1a:12:61:fe:3d:2b:6c:70:81:fa:dd:54:44:46:ed:
4e:31:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 19 14:40:49 2023 by rpki-client on console-fra.rpki-client.org