Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/1X-fZc5EZ5qm_3k8P5RWJS9dIMM.roa
File: 1X-fZc5EZ5qm_3k8P5RWJS9dIMM.roa (raw, json)
Hash identifier: ZGRU+Ez5Uj2C5eX/Ct/AA8eEw8MDer9VVGHgMQ+N9I0=
Subject key identifier: D5:7F:9F:65:CE:44:67:9A:A6:FF:79:3C:3F:94:56:25:2F:5D:20:C3
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 018570B9969C94320255711E978FA263BF2D
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/1X-fZc5EZ5qm_3k8P5RWJS9dIMM.roa
Signing time: Mon 02 Jan 2023 04:24:48 +0000
ROA not before: Mon 02 Jan 2023 04:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58247
IP address blocks: 2001:67c:29d4::/48 maxlen: 48
2001:67c:29d4:8000::/49 maxlen: 49
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:96:9c:94:32:02:55:71:1e:97:8f:a2:63:bf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Jan 2 04:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d57f9f65ce44679aa6ff793c3f9456252f5d20c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:1c:d3:25:6b:28:a2:5c:1a:99:08:7e:b6:
59:7a:4e:79:a1:03:e2:3e:e1:1f:ab:4e:0d:b2:c3:
fc:0c:27:c4:b0:b6:74:a6:c8:4a:c4:5a:cf:70:a8:
32:4b:ba:5a:f6:f7:c7:80:c5:71:04:cf:cf:db:7a:
cc:10:d7:96:e1:a5:39:7a:a5:23:09:7c:6c:79:55:
30:60:55:ea:7e:a5:1c:d8:05:c5:cf:41:bf:8d:43:
d0:d2:0b:05:32:5d:b7:46:e1:8b:3a:c4:d3:44:8d:
39:61:dd:ec:68:06:17:eb:50:40:cf:4d:b5:29:20:
d7:a5:c1:75:1e:aa:11:d6:57:04:38:10:f1:0c:e2:
20:c7:b8:3f:7a:eb:79:59:c2:0d:3a:a9:65:90:b9:
73:d5:c1:64:95:04:1e:2a:cc:99:f6:4a:37:87:22:
87:5e:1c:1e:6e:8c:24:03:3e:de:41:a2:5e:9e:eb:
81:62:11:4f:14:98:48:91:a5:0b:15:d4:ac:8d:f7:
a6:35:7d:a3:e0:4a:c5:a5:05:23:58:a7:10:da:0e:
53:4f:cc:ea:b1:e8:68:95:58:b5:bc:61:3f:92:f0:
43:5a:e3:e1:34:45:07:97:e2:87:38:7c:2a:b7:6a:
9a:d8:36:01:46:e9:39:05:f3:b0:1f:81:38:06:2c:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7F:9F:65:CE:44:67:9A:A6:FF:79:3C:3F:94:56:25:2F:5D:20:C3
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/1X-fZc5EZ5qm_3k8P5RWJS9dIMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:29d4::/48
Signature Algorithm: sha256WithRSAEncryption
17:16:2b:e4:01:5a:d7:b7:d9:aa:7a:ab:a4:66:6f:a1:57:24:
e8:5b:ff:03:da:c0:5a:73:5e:b9:00:28:76:56:6e:0c:15:7c:
ae:00:c4:5d:31:cb:26:1f:ea:92:e2:53:00:1d:37:12:ea:a7:
69:73:ec:11:d3:b1:2d:26:bb:3c:0b:2d:66:97:39:34:99:6a:
9e:41:be:cb:23:61:37:46:8d:7c:30:0b:a7:bd:cd:9b:0e:73:
85:bb:d1:ca:7b:0c:7f:40:9f:d6:cb:d2:99:3e:12:e5:59:c9:
08:cd:e4:76:c3:60:00:8f:b4:06:d3:d8:6d:1f:00:1a:09:51:
a6:60:7f:af:06:93:84:23:bf:3d:c1:90:3d:52:f1:d2:80:d9:
32:d6:61:a5:fa:0a:09:c2:10:2b:80:f1:ad:fc:8a:9b:90:cd:
f3:37:50:ca:d5:33:13:4b:a7:67:31:b6:0b:cc:d6:bf:af:f7:
9c:c3:31:d3:40:99:43:7c:21:b0:2c:f1:24:2e:a0:14:5c:b1:
3d:d1:ec:2d:eb:89:22:97:da:2a:82:c4:fc:09:1d:7f:e9:11:
0a:77:16:95:92:5c:33:f2:1d:eb:5d:ea:b5:cd:6f:74:c9:9b:
0e:01:67:dd:41:7e:0f:e8:54:08:40:be:35:e8:11:52:59:2d:
2d:01:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:25 2024 by rpki-client on console-ams.rpki-client.org