Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/UQwjgA4xUoCbu0YvHIXaBggTKPc.roa
File: UQwjgA4xUoCbu0YvHIXaBggTKPc.roa (raw, json)
Hash identifier: gUvhZHWhnL6Wa08sknBQ7WTaTbqRMmxwXNJY9Y5rxqM=
Subject key identifier: 51:0C:23:80:0E:31:52:80:9B:BB:46:2F:1C:85:DA:06:08:13:28:F7
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C31E6CA07DE9961B43E3B5D2536A65
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/UQwjgA4xUoCbu0YvHIXaBggTKPc.roa
Signing time: Mon 02 Jan 2023 09:14:50 +0000
ROA not before: Mon 02 Jan 2023 09:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205602
IP address blocks: 2a06:e881:116::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:1e:6c:a0:7d:e9:96:1b:43:e3:b5:d2:53:6a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=510c23800e3152809bbb462f1c85da06081328f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:40:17:cf:d6:bc:22:e9:c8:e0:ae:ef:9c:36:
9f:2d:a4:dd:13:71:ed:20:37:2d:01:c4:23:64:ee:
8b:e7:85:a2:04:47:99:b0:ea:29:74:ef:72:f2:b2:
88:36:df:b4:a9:22:6c:ba:d6:29:07:1a:18:40:8b:
4b:28:3e:6f:48:f1:bb:00:97:88:b2:7f:6a:d6:e0:
41:de:3e:2b:ed:7b:9c:7e:26:c3:e0:32:06:8a:26:
a0:f5:d3:97:91:90:b0:cd:75:98:1d:e0:cc:aa:b9:
21:16:04:dd:41:bf:a5:cd:94:1d:9a:c1:12:db:a0:
96:88:ec:39:d4:5f:60:f0:6c:89:dd:63:d6:56:dd:
ff:1a:b1:d7:98:32:7b:84:91:5f:05:cd:1e:62:d4:
3d:df:80:b0:8a:b2:65:11:2d:e6:94:10:bc:16:9f:
5e:02:3c:1b:51:88:eb:11:04:91:eb:0b:8f:a2:37:
fb:c5:7b:14:04:33:ce:98:f2:05:c6:f5:e6:df:97:
62:a2:66:3e:90:e4:a6:44:94:43:c1:14:8e:e5:43:
e6:76:cb:76:7b:0f:97:dd:6b:f8:dd:22:25:c6:1b:
e2:b6:01:60:66:8f:be:6b:2c:1b:96:44:fb:70:3b:
8b:99:c1:97:a9:9e:68:f3:5e:d5:88:09:2b:60:d0:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0C:23:80:0E:31:52:80:9B:BB:46:2F:1C:85:DA:06:08:13:28:F7
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/UQwjgA4xUoCbu0YvHIXaBggTKPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:116::/48
Signature Algorithm: sha256WithRSAEncryption
4e:08:00:97:f2:9e:c2:5b:3a:03:6b:ab:b7:4b:29:24:9c:f2:
db:85:85:35:68:ad:30:c6:01:15:10:46:75:f7:7b:d5:51:8d:
f6:3a:f7:f5:09:92:56:f3:fe:e9:2a:04:65:27:d9:5e:9f:91:
93:6c:2e:00:e6:bc:dd:38:81:5b:57:91:aa:ac:65:de:bf:8b:
49:50:8b:41:6d:eb:1a:f0:b7:8b:e0:19:cc:0f:8d:db:b4:8b:
71:2c:a2:fe:ad:47:56:52:2c:70:0b:27:e9:de:ad:29:30:ee:
b0:85:89:51:05:46:99:b1:2a:da:0a:b0:7b:50:1b:61:7d:57:
9a:b2:83:e1:12:71:6f:a4:bc:5a:4e:38:e0:c4:8a:23:45:0c:
a7:9e:5c:16:13:07:c5:32:9b:7a:b4:82:eb:69:0c:8f:16:dc:
c6:13:61:0d:ab:42:0f:53:34:93:32:c0:b3:13:f9:b2:c2:af:
c0:64:a5:4f:70:65:4b:f9:e0:ad:65:96:83:7c:0d:da:ba:2e:
ab:ab:a4:cb:88:78:47:83:11:37:1c:85:93:99:77:b1:0c:b6:
34:7e:31:ac:97:c2:b7:49:52:98:0f:21:33:14:4e:a2:12:d9:
ec:2c:80:10:8f:05:8c:68:a1:20:1b:72:56:c0:bd:5c:ee:ef:
be:9e:0a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:04 2024 by rpki-client on console-ams.rpki-client.org