Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/WM_afVmWQoMVmf9Kn4qOFDbbUk8.roa
File: WM_afVmWQoMVmf9Kn4qOFDbbUk8.roa (raw, json)
Hash identifier: A3REQZybT/g77kdxDcxBSEOkEC+tE1dzZgo4jVxAVZ4=
Subject key identifier: 58:CF:DA:7D:59:96:42:83:15:99:FF:4A:9F:8A:8E:14:36:DB:52:4F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C319284EAC8298598A9DDDE05C0CD7
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/WM_afVmWQoMVmf9Kn4qOFDbbUk8.roa
Signing time: Mon 02 Jan 2023 09:14:49 +0000
ROA not before: Mon 02 Jan 2023 09:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137909
IP address blocks: 2a06:e881:1600::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:19:28:4e:ac:82:98:59:8a:9d:dd:e0:5c:0c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58cfda7d599642831599ff4a9f8a8e1436db524f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:80:f7:15:6e:4b:55:36:56:03:c8:b3:92:
84:69:ec:04:3a:60:8b:27:be:5d:11:e9:64:54:10:
f8:0d:3a:06:57:c8:8b:ec:22:47:18:e0:61:1a:43:
86:fb:3f:dc:37:46:81:2f:ad:ed:55:bd:a4:9f:71:
72:30:ca:4a:bc:aa:05:77:b5:b9:d9:0c:ae:82:20:
d1:5c:33:b5:37:6d:4a:31:a4:a6:6e:c6:1f:59:f2:
10:54:6f:dd:44:7e:0a:b9:b1:07:b9:06:5b:f4:6e:
ac:c8:66:7e:bb:70:d3:e7:73:f5:a6:c0:1d:42:61:
f5:68:98:44:3b:91:37:3c:45:96:af:42:d4:82:1f:
1d:22:8e:49:86:5c:a7:2e:f3:5b:f0:0c:1b:8a:7b:
64:94:d3:a0:c5:dc:b7:8a:f1:5c:0d:60:a1:96:a0:
45:1a:05:c6:b6:40:d5:65:60:90:55:d9:70:fb:a8:
b2:77:68:d2:d7:67:c2:16:e6:c1:0f:2b:52:04:94:
d9:cc:1c:ce:78:99:cd:61:15:bd:e9:35:50:00:ec:
39:60:02:e7:a4:f1:f7:75:5e:2c:03:57:36:a6:50:
3d:67:a1:0a:ef:64:98:0d:24:eb:cb:4e:21:a1:0e:
68:48:19:5f:a1:0e:99:85:ff:b2:2c:bd:15:5e:3a:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CF:DA:7D:59:96:42:83:15:99:FF:4A:9F:8A:8E:14:36:DB:52:4F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/WM_afVmWQoMVmf9Kn4qOFDbbUk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:1600::/44
Signature Algorithm: sha256WithRSAEncryption
5d:f6:13:9e:bd:94:28:d7:7b:29:63:a9:41:7c:68:76:29:83:
1e:1e:1e:15:9f:b6:f4:a1:aa:d5:c2:3f:8b:75:0e:a1:00:06:
f1:f7:9b:58:b6:9d:24:e8:4a:13:63:32:66:7f:3b:6b:f3:44:
10:39:4a:46:01:95:8e:2b:82:89:40:74:ff:75:71:c4:13:94:
1e:9d:67:e1:9e:e1:87:34:52:2b:b6:60:cc:33:c0:7c:01:1e:
f4:b6:60:73:64:82:d7:d9:df:34:b5:b7:6f:99:5a:75:34:19:
ac:9e:92:90:78:16:33:8d:9c:5d:ce:13:f3:5d:63:dd:1a:e2:
9e:43:56:04:0d:df:11:30:2e:24:22:9f:ae:be:62:ab:aa:0d:
42:89:a8:40:24:c3:68:c6:35:0e:4e:85:2f:ec:c6:06:2f:e2:
f6:b1:e4:45:67:e3:85:d0:e1:06:d0:1d:e3:ec:a3:c1:ab:46:
79:37:93:0b:02:51:43:99:71:2e:e8:b7:a9:be:1a:43:95:13:
8c:7f:82:04:f8:69:18:36:22:69:20:1b:2e:19:a1:c1:94:04:
51:8d:5e:65:16:d0:d6:03:ff:6e:cb:31:4c:ee:40:86:36:5a:
c3:25:d1:de:e4:07:2f:d8:7c:97:71:03:5e:09:74:20:ec:f0:
41:9e:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:16 2024 by rpki-client on console-fra.rpki-client.org