Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/xiehjolurFQp_LEQklTiYQQ4tKs.roa
File: xiehjolurFQp_LEQklTiYQQ4tKs.roa (raw, json)
Hash identifier: Q+TI/eB8d4TZBhJYaIJ3pO4Q7pOAqRB8Sm/yFyfevts=
Subject key identifier: C6:27:A1:8E:89:6E:AC:54:29:FC:B1:10:92:54:E2:61:04:38:B4:AB
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01856CAF15CEF1F8393E499347282F8F1C7C
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/xiehjolurFQp_LEQklTiYQQ4tKs.roa
Signing time: Sun 01 Jan 2023 09:34:51 +0000
ROA not before: Sun 01 Jan 2023 09:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135330
IP address blocks: 2a09:7c45::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 27 Apr 2023 13:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:15:ce:f1:f8:39:3e:49:93:47:28:2f:8f:1c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 1 09:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c627a18e896eac5429fcb1109254e2610438b4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:7e:24:16:46:01:0c:7e:c1:16:27:32:fc:
1d:cc:46:9d:84:66:45:c4:62:c6:bc:e1:b0:50:c4:
a2:5e:69:69:8f:02:f2:a8:7f:f3:76:b2:e5:30:72:
12:2c:cb:60:43:35:da:0b:ff:b4:e0:44:cc:e4:7d:
bf:4c:11:e8:79:27:0e:38:d1:f4:50:ad:34:54:a7:
38:2d:67:72:8d:10:0c:b0:c2:9f:7c:ed:17:8c:42:
cc:00:a8:02:3e:9c:08:f8:eb:97:cc:f5:a7:b4:cd:
63:9e:4e:c3:26:9a:db:28:bf:f3:54:05:72:01:d2:
f5:d6:94:a9:cd:8a:81:dc:05:3e:80:fe:1d:19:ac:
71:66:82:7c:1e:01:a9:e6:24:1c:6e:1e:f8:93:44:
1c:de:46:2e:40:ca:db:5f:b8:f3:6c:f5:d5:8b:63:
8a:41:92:a4:92:d6:8a:c5:4a:67:58:a3:c1:6f:a3:
61:30:9c:d1:e7:03:c1:19:4b:b7:8f:f1:d0:25:98:
63:44:2d:37:1a:a6:d5:e6:69:41:fd:f2:67:14:de:
86:f2:59:0f:76:02:45:8a:14:20:66:d0:e0:c3:d4:
79:31:0f:51:3e:f3:60:a2:77:a5:d2:82:82:a2:27:
ca:b9:b1:2e:48:e6:19:52:fc:1e:7d:f6:e0:a1:2b:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:27:A1:8E:89:6E:AC:54:29:FC:B1:10:92:54:E2:61:04:38:B4:AB
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/xiehjolurFQp_LEQklTiYQQ4tKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7c45::/32
Signature Algorithm: sha256WithRSAEncryption
50:4d:20:cf:55:70:57:3b:d4:21:33:50:97:83:ea:37:b1:4b:
ea:84:18:cf:ba:35:6c:e4:5f:07:ff:f3:41:4b:46:f4:3f:6a:
3c:77:11:f4:d7:a0:72:17:75:7e:34:b1:a0:1b:d0:4b:7e:50:
2b:71:26:1f:90:5c:e5:24:d1:cb:64:86:c7:f4:13:59:33:b3:
39:bc:5e:91:c8:7e:32:d8:f0:56:37:35:0e:47:a2:2c:9c:c6:
4f:ef:02:aa:d3:8e:9e:df:0b:5d:67:fe:2b:b7:25:f0:de:be:
34:24:94:58:10:54:59:ca:37:c2:ba:1f:3a:47:bd:54:bc:ca:
0f:68:00:02:5b:db:04:a6:30:3d:cc:89:79:27:f4:6f:31:39:
cc:ff:61:d5:03:09:d0:99:5e:26:a8:e2:ec:22:ea:6e:09:67:
70:d4:ae:20:33:90:cd:3c:b0:d0:20:34:e7:52:4c:21:4f:ce:
df:3c:ca:6a:9c:1a:71:d2:23:ab:b4:9d:37:ed:11:14:e0:0c:
01:03:f0:f6:a3:af:df:21:7a:64:bf:22:e2:e9:10:89:39:34:
26:c1:91:5e:a6:b1:e0:d8:78:02:01:82:8b:b1:46:fe:88:ac:
5c:5a:e0:9b:99:25:fa:c3:64:4d:12:b5:64:51:d9:c9:fe:ce:
e7:f8:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org