Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/rxmoUgFcbdf2G4y82Ilkreqr-0w.roa
File: rxmoUgFcbdf2G4y82Ilkreqr-0w.roa (raw, json)
Hash identifier: J5b29JVDQNV1Q0nGiVS6tIiVUVxAnYOaHWQTT7ElWEw=
Subject key identifier: AF:19:A8:52:01:5C:6D:D7:F6:1B:8C:BC:D8:89:64:AD:EA:AB:FB:4C
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 01856D7896140ABF6CF5D3627A3288E78554
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/rxmoUgFcbdf2G4y82Ilkreqr-0w.roa
Signing time: Sun 01 Jan 2023 13:14:57 +0000
ROA not before: Sun 01 Jan 2023 13:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6279
IP address blocks: 2a03:5400:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:96:14:0a:bf:6c:f5:d3:62:7a:32:88:e7:85:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Jan 1 13:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af19a852015c6dd7f61b8cbcd88964adeaabfb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:99:bb:f3:a3:48:98:45:f4:17:31:96:1c:
f5:17:1c:95:3f:20:ce:73:36:ff:e3:68:77:82:b7:
de:e7:e0:49:25:c4:1a:3b:02:43:10:14:e2:67:d0:
6c:ed:b8:32:f7:5b:29:a8:a7:31:9a:f1:07:9c:e8:
30:67:a9:73:97:2f:11:3a:e2:8e:b1:79:f6:02:8f:
1d:42:36:7a:bd:eb:4c:dd:99:0d:60:6f:71:4d:28:
97:d2:d0:d3:94:2d:21:57:cf:04:bf:bc:65:b2:9f:
51:e0:df:47:17:13:11:d2:1c:d1:d9:19:5b:fc:5c:
14:72:cd:ec:c9:90:67:33:eb:26:e7:e9:fc:21:83:
83:fd:9a:17:5c:16:65:03:43:67:a1:5f:41:45:83:
3c:19:92:ca:01:65:59:cd:9f:fc:35:70:3e:1e:31:
11:61:55:a1:63:1e:89:41:af:94:bb:16:ef:d6:fb:
6f:fb:c5:27:d4:27:96:54:7e:76:a9:f8:72:f7:8c:
f1:f5:7b:a4:81:5d:b7:cd:fa:2b:ae:50:d8:c3:78:
35:06:c7:f4:60:4f:6a:b5:77:1c:e7:55:22:fd:97:
5e:20:02:bc:a6:ff:eb:cd:bb:73:da:7c:b6:70:df:
04:ba:20:72:51:64:94:35:36:6c:5a:f0:8e:d5:01:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:A8:52:01:5C:6D:D7:F6:1B:8C:BC:D8:89:64:AD:EA:AB:FB:4C
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/rxmoUgFcbdf2G4y82Ilkreqr-0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5400:100::/40
Signature Algorithm: sha256WithRSAEncryption
5e:0f:36:2b:af:58:a8:e0:ac:06:44:03:fe:09:fa:3f:06:cd:
17:01:62:fc:5e:f1:d3:1f:04:01:52:aa:66:4f:7a:f9:95:97:
56:a8:5a:a1:e3:dc:0c:b3:1d:7b:c3:89:04:26:3f:e2:51:39:
a0:13:a5:0f:f1:11:f2:63:8d:86:e9:3b:5f:38:38:17:25:11:
9b:a5:33:9d:43:57:f6:d0:fb:32:08:5e:a9:33:b3:a0:56:af:
28:b1:a0:99:1b:3e:bc:ae:6b:50:7f:b7:c4:e2:7b:65:53:0a:
a9:8a:02:56:cb:e6:35:0a:4b:96:d0:3d:a3:83:24:65:27:67:
0f:ad:eb:7b:b7:14:a5:c2:61:a0:18:56:02:97:a0:db:8f:f3:
29:b7:1a:b6:74:92:40:bd:a6:b8:42:98:7c:ba:80:e1:33:ce:
a1:fc:dd:9c:c5:18:27:e9:a5:a1:62:26:dd:d3:ac:3e:15:a4:
2c:1c:64:bb:ba:62:c5:8a:92:27:11:b1:c7:da:fd:cf:2e:f6:
df:ea:d5:fa:94:f7:26:d5:21:37:c9:db:b4:c6:fc:87:da:46:
ba:29:bf:c7:eb:7d:d8:2c:99:4b:1a:ef:e5:b1:0b:0b:11:88:
81:bc:1f:ac:49:f4:5f:0a:5e:4d:ca:7e:fa:03:df:2f:3d:18:
bf:71:55:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:52 2024 by rpki-client on console-fra.rpki-client.org