Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/5VVy5KTt8G1-0OFiPJ17T7fBeKo.roa
File: 5VVy5KTt8G1-0OFiPJ17T7fBeKo.roa (raw, json)
Hash identifier: z94wuN3imM+wrHASYJb/lZHrCwrCbqyHUaAKP/fId4E=
Subject key identifier: E5:55:72:E4:A4:ED:F0:6D:7E:D0:E1:62:3C:9D:7B:4F:B7:C1:78:AA
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 01856D0188F4E96576A378FD86D5867BC643
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/5VVy5KTt8G1-0OFiPJ17T7fBeKo.roa
Signing time: Sun 01 Jan 2023 11:04:55 +0000
ROA not before: Sun 01 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62200
IP address blocks: 2a09:f907::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:88:f4:e9:65:76:a3:78:fd:86:d5:86:7b:c6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Jan 1 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e55572e4a4edf06d7ed0e1623c9d7b4fb7c178aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:2f:ae:c0:4f:ff:de:21:c5:5d:74:fe:fa:
dc:33:1a:ec:a8:cd:18:b0:52:ff:38:3d:c3:b5:49:
26:0a:24:a9:ff:51:f4:98:74:b7:61:c5:9c:54:5f:
00:05:79:7b:69:fb:bf:00:db:85:d3:d2:86:34:5f:
f6:39:74:e4:0a:f1:db:1c:28:8a:a0:d9:67:fa:50:
93:e6:fe:dd:74:a0:b6:17:00:82:4e:f7:74:e6:58:
f9:a5:2c:3a:7d:e8:ec:0c:77:2b:f2:4b:f9:0d:26:
cc:49:13:41:27:b6:88:92:02:96:9a:16:16:e5:ba:
41:9e:84:6c:dd:55:86:ad:65:09:0d:ba:d8:14:e7:
d5:3c:15:3c:45:6b:2f:21:4f:69:b5:b5:7a:a5:b2:
cf:55:7f:ee:60:a1:a0:c6:e2:35:05:fb:9f:6e:2d:
8b:a8:98:e7:99:94:98:a1:1d:b3:25:fa:61:1d:c5:
dc:cf:40:b0:1f:47:ea:22:0b:f3:51:29:c2:95:60:
37:2e:e2:f3:ce:77:b5:fa:74:90:ac:bb:18:f3:e7:
47:6a:af:02:73:2d:2c:dd:58:89:c8:7c:b5:7c:eb:
b6:a5:b6:8e:bf:e6:d2:7e:28:c4:22:90:73:e4:e5:
e2:12:f6:c7:9e:15:9b:5a:62:b2:9b:90:4d:5d:c6:
6e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:55:72:E4:A4:ED:F0:6D:7E:D0:E1:62:3C:9D:7B:4F:B7:C1:78:AA
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/5VVy5KTt8G1-0OFiPJ17T7fBeKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:f907::/32
Signature Algorithm: sha256WithRSAEncryption
4f:63:9f:2b:83:1d:eb:8d:8c:7b:cc:25:b5:4f:c0:7b:8d:f7:
cd:ac:77:df:a3:55:9f:f4:98:80:8e:51:9c:f4:1d:83:b6:42:
e4:18:23:b3:a5:17:b2:04:dd:45:ef:cf:1b:45:8a:87:28:5e:
71:77:8b:d0:ab:a0:f2:c9:f1:14:35:5a:84:9c:83:b7:2e:ee:
9e:6b:42:75:d4:31:03:cf:4b:a7:d5:4d:c0:ff:91:f6:79:fe:
bd:ab:4f:2c:65:24:47:28:c4:41:35:44:99:95:5f:ec:cf:d6:
d7:96:9d:5f:8f:0e:7a:c6:04:4a:88:a6:b5:db:10:11:1d:99:
af:99:f8:a9:41:e9:e5:c0:97:69:7d:cf:68:9d:5b:3a:39:05:
d7:84:69:68:35:a1:90:61:6a:9a:12:74:74:b7:92:cb:16:dc:
aa:f4:94:01:a7:fd:ae:cc:3a:48:54:0d:14:7a:96:84:9e:51:
9a:ad:1c:8a:7d:70:c5:f8:53:e4:07:63:75:b6:1a:a6:af:c4:
d3:f1:25:82:2a:5f:02:26:4d:ad:fe:57:b8:c6:c8:69:f3:80:
27:d9:10:5a:a9:a9:3b:8d:e7:42:f5:b4:3f:a8:b7:87:01:65:
f0:61:05:ea:b4:5b:50:1a:7d:f2:77:92:e5:7a:11:bc:ed:e7:
a2:de:83:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:44 2024 by rpki-client on console-ams.rpki-client.org