Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/vXNyUy7c3WczjZwGAHrZh4qIq70.roa
File: vXNyUy7c3WczjZwGAHrZh4qIq70.roa (raw, json)
Hash identifier: vLF/MMdSTm+rdppcnRpOxTyHiyAwncQWOv3pI7EqcVM=
Subject key identifier: BD:73:72:53:2E:DC:DD:67:33:8D:9C:06:00:7A:D9:87:8A:88:AB:BD
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 018571B0EBCABEA5E0603D09723B2939DEA0
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/vXNyUy7c3WczjZwGAHrZh4qIq70.roa
Signing time: Mon 02 Jan 2023 08:54:58 +0000
ROA not before: Mon 02 Jan 2023 08:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139242
IP address blocks: 2a06:98c0:1001::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:eb:ca:be:a5:e0:60:3d:09:72:3b:29:39:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 2 08:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd7372532edcdd67338d9c06007ad9878a88abbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fa:1a:61:e5:3a:a5:0e:74:46:5b:50:e1:a3:
f0:21:d0:e0:66:3a:01:61:12:cd:94:00:22:4d:27:
ce:e7:f3:f7:29:72:f7:29:9c:b6:88:a4:77:4c:3b:
27:98:44:4b:61:40:71:2f:96:b5:87:52:74:ff:48:
67:12:4a:61:29:c5:c8:f8:68:c2:27:aa:17:43:7d:
b6:cf:09:57:6f:4e:c9:92:91:da:f0:d6:39:31:b3:
db:01:57:8b:91:df:86:e9:d9:72:7c:fe:b2:20:a8:
21:d1:91:3b:64:90:ea:9f:1d:a1:6d:70:94:ef:a2:
0e:76:52:de:34:b9:46:69:59:95:36:9f:5f:0e:48:
a5:86:55:42:02:56:49:8e:ed:01:17:49:5f:87:fc:
ab:97:fe:bb:39:c8:6f:78:63:23:f3:8b:e3:db:5c:
e2:fe:f3:d7:d4:3a:97:13:a6:77:87:07:c9:a1:ba:
04:13:f5:e5:73:06:2c:84:01:6c:ee:6d:ff:14:ea:
6e:3d:eb:2c:2f:c1:31:75:c8:70:1d:29:3c:8e:3d:
9d:5a:a6:a8:3e:65:dd:34:dc:54:be:7a:7a:b1:9b:
7d:db:8e:8f:75:ab:ce:c2:22:22:5a:2c:51:2d:58:
47:21:af:a6:3c:34:d1:3f:2c:74:f6:3e:60:92:f1:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:73:72:53:2E:DC:DD:67:33:8D:9C:06:00:7A:D9:87:8A:88:AB:BD
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/vXNyUy7c3WczjZwGAHrZh4qIq70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:98c0:1001::/48
Signature Algorithm: sha256WithRSAEncryption
86:db:d8:22:29:de:61:86:13:cd:e5:f4:3c:30:ec:b9:51:b7:
50:36:ac:1b:49:0f:ae:11:2d:3e:30:85:d4:0f:16:c4:5c:8f:
de:fb:98:2a:96:3f:ec:c2:2a:11:4d:7c:0e:9e:48:7a:7f:5f:
23:ec:30:47:99:3d:fb:7f:39:0a:32:df:4c:7b:1d:6a:64:d2:
de:25:b8:c4:a9:bb:84:9e:0e:50:78:27:e1:3c:c0:0b:8f:e8:
3f:77:a1:68:fb:26:91:95:5b:1f:36:31:51:43:a7:d5:1d:fd:
d3:78:ec:31:26:b5:03:66:bb:4e:dc:b6:98:85:25:fb:ae:7a:
c1:a9:0d:6f:e5:d7:83:a8:a9:f4:7e:e5:63:37:d6:20:0c:84:
de:ea:16:52:41:f3:85:42:cb:27:bc:bd:dc:f8:b5:b0:50:fe:
d9:5c:a1:fc:1b:fc:3e:10:a4:aa:9f:2d:55:75:2f:ff:a6:cc:
36:7a:5f:9f:13:e4:04:57:19:0e:87:d6:08:7c:8b:2e:a0:6c:
f7:29:72:32:25:7b:a2:1e:91:c3:51:a3:bc:c1:ad:de:45:42:
8a:08:05:55:3a:85:d5:6b:bf:7f:3d:db:5a:d2:75:f2:b9:74:
cf:f5:2f:7f:e2:33:2b:0a:94:4a:94:cb:cd:cd:51:1d:47:2d:
01:83:2c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:49 2024 by rpki-client on console-ams.rpki-client.org