Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/xK-iSyslGb3aJooi3XVmBcjiTpc.roa
File: xK-iSyslGb3aJooi3XVmBcjiTpc.roa (raw, json)
Hash identifier: uwf8yxUyvBipUc3awYX5BawX4IN6U7tz6KeCuX4MK74=
Subject key identifier: C4:AF:A2:4B:2B:25:19:BD:DA:26:8A:22:DD:75:66:05:C8:E2:4E:97
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 01856CCAB7597BA6F63E3232EC35D90213D9
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/xK-iSyslGb3aJooi3XVmBcjiTpc.roa
Signing time: Sun 01 Jan 2023 10:05:02 +0000
ROA not before: Sun 01 Jan 2023 10:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12552
IP address blocks: 2001:67c:198::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:b7:59:7b:a6:f6:3e:32:32:ec:35:d9:02:13:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Jan 1 10:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4afa24b2b2519bdda268a22dd756605c8e24e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:c8:42:82:f1:9f:55:49:d1:41:ab:29:9d:
f9:20:e6:ab:a0:1b:cf:5d:88:13:f9:9e:6e:89:2d:
5d:85:00:77:cb:9c:11:f0:43:22:2b:fd:7e:6a:e4:
ee:0d:67:bd:7a:2c:e4:6b:79:10:28:12:0e:c2:3b:
9a:ff:1a:f4:29:c7:7a:4d:bc:48:77:4d:17:fe:af:
d3:fa:15:b5:1d:8e:5d:2b:f6:d7:e8:59:f4:42:55:
42:a3:df:59:1a:ec:a1:05:6d:56:95:0b:11:52:32:
ca:c7:72:dd:97:23:0a:3e:a4:7f:d1:7b:e2:57:47:
ff:d6:88:1c:67:7d:da:67:99:d6:9d:eb:1f:91:54:
a7:b9:2c:99:43:ef:82:77:d1:85:af:8d:ef:5c:fd:
cb:e9:b8:1b:b9:8d:0c:29:cd:94:64:93:a7:e7:1c:
6f:2f:b6:7f:06:1a:53:9b:1f:2c:2b:94:31:d6:2d:
13:03:f9:4d:09:42:28:cd:ea:f1:92:83:aa:c5:68:
00:31:91:b1:4f:8d:70:26:44:01:0f:3f:12:56:49:
d4:69:f4:ee:86:32:6f:f3:16:e2:d3:21:79:82:37:
7d:d0:cb:5a:73:72:b2:51:ea:6f:f5:6e:5c:84:91:
99:c8:bc:74:5d:3d:28:1d:78:3c:4e:9f:8b:1e:64:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AF:A2:4B:2B:25:19:BD:DA:26:8A:22:DD:75:66:05:C8:E2:4E:97
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/xK-iSyslGb3aJooi3XVmBcjiTpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:198::/48
Signature Algorithm: sha256WithRSAEncryption
00:c5:bd:2c:da:be:a1:a1:29:0a:bf:5f:b2:a3:fa:bc:eb:67:
97:18:17:b3:02:2e:35:50:4c:cd:56:45:c5:39:2d:85:73:a3:
ce:fb:82:fc:ef:c5:09:ca:77:f8:e1:89:a2:03:c6:58:d6:9a:
7d:28:26:81:62:88:90:41:07:95:d1:ea:56:8d:a8:1f:32:00:
2f:d4:a8:26:f6:79:a7:90:04:e8:0d:a8:4b:b8:da:bb:ce:e6:
ef:fa:28:cd:74:c2:99:6f:8f:94:0f:f6:30:48:d3:19:ab:92:
9d:58:44:98:17:9f:2b:f5:a1:07:bb:c3:01:f3:55:19:dd:69:
aa:52:62:46:ac:67:76:7e:5d:bb:0b:c3:3f:40:c9:77:fd:56:
1e:1e:d5:fa:50:79:b3:49:81:ec:a6:d5:21:75:ab:26:29:a2:
77:83:11:87:16:1c:ba:ad:e9:27:ff:01:1b:f4:54:9f:df:12:
d6:2e:cf:78:e5:58:ae:f2:8b:47:b4:9a:ff:18:e9:14:93:12:
09:43:e2:fc:14:33:f9:ec:a4:7f:0d:e5:9d:99:03:17:8e:3d:
47:45:a1:22:34:64:fa:5d:2c:5d:76:60:df:e3:bc:8d:12:92:
03:32:82:15:08:5c:7d:15:bc:fa:65:f6:de:ee:92:86:4e:82:
53:ad:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:50 2024 by rpki-client on console-ams.rpki-client.org