Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/CzG93gW9T5Ba8ZGpMTITYUsWfP4.roa
File: CzG93gW9T5Ba8ZGpMTITYUsWfP4.roa (raw, json)
Hash identifier: r7Suzt3eIVOKI2MUJnVdUuqvTqMEQP+cM5nXxOd0Rsw=
Subject key identifier: 0B:31:BD:DE:05:BD:4F:90:5A:F1:91:A9:31:32:13:61:4B:16:7C:FE
Certificate issuer: /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Certificate serial: 01856F5DC97DDE1B7705742AD10CEAE6E1C0
Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/CzG93gW9T5Ba8ZGpMTITYUsWfP4.roa
Signing time: Sun 01 Jan 2023 22:04:55 +0000
ROA not before: Sun 01 Jan 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210775
IP address blocks: 2001:67c:85c::/48 maxlen: 48
2001:67c:854::/48 maxlen: 48
2001:67c:84c::/48 maxlen: 48
2001:67c:858::/48 maxlen: 48
2001:67c:850::/48 maxlen: 48
2001:67c:848::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c9:7d:de:1b:77:05:74:2a:d1:0c:ea:e6:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Validity
Not Before: Jan 1 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b31bdde05bd4f905af191a9313213614b167cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3a:c9:51:46:4d:1f:7b:df:74:58:3f:c8:c9:
57:37:52:34:e8:81:3c:09:f2:09:f5:09:76:df:ed:
7a:7f:94:8c:77:75:1b:3e:2e:f2:a4:c4:37:c9:a8:
28:de:b7:5e:ce:b4:ac:1d:5e:b1:cf:22:72:e5:20:
53:cf:2a:e3:7a:60:38:be:25:55:90:2a:3c:aa:4f:
2c:39:1c:63:7b:36:f3:9c:2d:07:f5:84:d0:10:8e:
3e:65:87:d7:aa:d4:0a:00:96:02:22:b0:2c:90:4c:
e6:4e:12:1c:44:6e:10:3c:72:46:ab:fb:52:f7:fc:
81:e6:83:8a:64:f7:63:0a:be:35:90:de:0f:63:0f:
92:a1:3b:68:be:7e:06:ee:7c:cf:6c:28:17:6b:14:
80:a5:9a:20:ce:d4:5e:83:0f:70:09:2f:f6:1b:97:
9b:45:35:7e:cd:e4:dd:02:52:57:25:35:46:9a:1a:
50:fb:81:18:ea:95:83:d4:a6:f0:02:ce:fe:2e:77:
28:e1:e9:3a:40:07:03:9c:e9:73:52:38:32:bc:b2:
68:8e:b2:fc:65:f5:28:e8:ae:62:bd:c1:1a:e2:10:
b2:95:32:a9:74:75:ee:b1:37:9a:c5:74:37:70:54:
38:4d:65:c7:a7:65:dd:d6:22:9a:89:bc:e2:ef:29:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:BD:DE:05:BD:4F:90:5A:F1:91:A9:31:32:13:61:4B:16:7C:FE
X509v3 Authority Key Identifier:
keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/CzG93gW9T5Ba8ZGpMTITYUsWfP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:848::/48
2001:67c:84c::/48
2001:67c:850::/48
2001:67c:854::/48
2001:67c:858::/48
2001:67c:85c::/48
Signature Algorithm: sha256WithRSAEncryption
28:05:c8:a4:ca:80:f5:3d:da:f4:06:8a:4f:d4:a3:0e:a6:39:
98:d6:58:ab:3a:fe:39:11:30:2a:fc:ba:5c:4c:a8:80:c4:08:
f5:ca:a5:cb:c6:cb:8e:3c:05:2b:53:ee:f3:6f:67:0b:13:84:
6e:98:6a:f5:00:be:27:25:f6:40:8e:2f:a6:7d:f2:42:34:d7:
c3:0c:bb:e0:a4:03:9d:66:a5:8a:57:a7:f7:08:97:c3:18:76:
63:89:01:ae:41:99:4a:a2:4e:7b:2a:86:f4:04:4a:c7:36:9a:
91:9a:01:c0:64:19:b9:b5:3f:01:39:ed:08:ea:d3:f8:7c:98:
cc:ef:a2:a1:1b:f5:51:61:90:3c:8e:c8:9d:d0:01:89:85:ef:
6a:bc:6c:fd:f8:73:f2:93:6a:ee:fa:10:e6:ef:5d:17:19:c1:
f1:6f:29:b5:e8:95:8d:d8:7e:39:45:67:a5:19:69:53:d3:f6:
5a:94:07:e0:b0:a0:1c:94:70:66:a5:d8:83:e6:3e:53:01:b7:
de:e0:ed:7e:96:95:3b:38:bf:99:f0:e4:94:58:48:58:41:ea:
8e:11:bd:94:38:1b:2c:06:1e:c1:b1:ee:b5:e3:2b:14:7c:24:
f3:98:3b:75:74:51:11:4b:ee:0c:f9:5f:42:75:ec:78:75:c4:
3c:de:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-fra.rpki-client.org