Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/DPkKYPYFf1Tck9-YtYJbHiuunVk.roa
File: DPkKYPYFf1Tck9-YtYJbHiuunVk.roa (raw, json)
Hash identifier: 4BT631deJ6G95CPuGHtVNs4xhXXUeFY9WumyImVNM5Y=
Subject key identifier: 0C:F9:0A:60:F6:05:7F:54:DC:93:DF:98:B5:82:5B:1E:2B:AE:9D:59
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 01856D93FF368357D30EFA9C16B4723A0BB9
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/DPkKYPYFf1Tck9-YtYJbHiuunVk.roa
Signing time: Sun 01 Jan 2023 13:44:53 +0000
ROA not before: Sun 01 Jan 2023 13:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57503
IP address blocks: 2001:6d0:4009::/48 maxlen: 64
2001:6d0:4005::/48 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ff:36:83:57:d3:0e:fa:9c:16:b4:72:3a:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 13:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cf90a60f6057f54dc93df98b5825b1e2bae9d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:06:a5:a0:71:93:55:60:52:f8:d6:f5:a5:
8a:5d:39:7d:bb:0d:39:84:12:d3:2d:ac:86:ff:d2:
93:a4:87:a9:d8:45:58:2c:94:89:34:0a:e5:46:ed:
96:d7:b8:48:81:59:3e:3d:76:20:bc:0b:74:6c:ba:
d8:6c:e0:34:ad:66:01:39:ab:3c:d3:38:1b:2e:e7:
3c:cb:26:91:01:4d:92:4f:8e:f3:61:dd:26:6f:60:
a6:d5:b0:56:8b:ab:59:02:dd:84:de:a5:cf:20:dd:
e3:b5:09:75:21:bb:7e:16:57:a0:c8:93:f5:dc:54:
98:b2:fb:78:98:00:7d:8f:d3:b4:7f:c5:6b:44:23:
4d:f5:2e:5a:09:db:33:ad:a6:1f:46:86:dd:d2:b1:
ec:35:1d:be:26:e7:c6:5a:c3:c2:e9:d6:3d:13:a7:
8f:d7:86:b2:68:ad:db:58:3f:68:d7:6d:11:4b:c2:
4e:61:59:1f:f5:04:4b:cc:e0:93:ad:0d:a7:9d:02:
b4:69:ce:0c:8f:36:38:c7:9b:41:2e:c9:58:a2:b6:
64:cb:87:05:a7:62:98:ac:72:5e:69:ad:b5:73:1c:
f7:c8:50:d4:7a:52:0b:97:e2:37:21:80:82:07:f7:
8e:05:8f:20:e3:a2:10:94:6c:5f:ab:3c:23:cb:c4:
db:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F9:0A:60:F6:05:7F:54:DC:93:DF:98:B5:82:5B:1E:2B:AE:9D:59
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/DPkKYPYFf1Tck9-YtYJbHiuunVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:6d0:4005::/48
2001:6d0:4009::/48
Signature Algorithm: sha256WithRSAEncryption
53:57:54:cc:c4:17:72:fd:89:1c:e9:29:90:89:5d:f9:46:36:
ef:ab:18:88:8c:e5:4a:94:28:98:e9:ee:99:8e:ea:62:cf:42:
9c:2b:f9:59:f5:b9:69:17:5c:a0:40:71:a4:be:fe:74:75:98:
bb:60:b4:ec:c3:1d:3a:ef:dc:4a:91:2b:77:aa:46:f2:a0:88:
5b:f6:aa:58:a2:52:8b:91:67:1f:37:57:51:a0:d7:af:af:ca:
29:a9:8a:9e:16:0e:75:29:32:13:a8:e4:34:80:c3:63:9a:87:
74:e3:24:6a:86:f3:dc:96:14:40:8e:e8:45:ea:f1:b9:f8:e3:
db:ba:05:42:87:0a:e7:1f:06:0d:42:69:98:45:cb:7f:91:af:
d4:21:4c:b3:f3:a6:88:70:bf:a1:c5:90:77:1f:3c:e6:c6:fe:
fc:4f:4a:63:6b:ef:86:e0:f9:f4:0e:53:c7:ee:ba:7f:33:41:
57:5b:3a:03:e5:3d:37:7d:81:83:ba:3a:0a:26:4e:39:b8:3a:
a2:7b:bf:24:ac:ae:8e:60:87:83:6d:99:d8:5a:2c:f3:bc:56:
75:5e:a0:23:4b:41:1a:66:49:46:d9:06:77:ae:2f:86:10:99:
1e:c4:54:c6:22:ae:29:33:f1:51:e9:68:bb:e6:dc:97:e3:2b:
49:85:95:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:51 2024 by rpki-client on console-ams.rpki-client.org