Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/UHDz_E7SyxPpnm5ask_yirecb1Q.roa
File: UHDz_E7SyxPpnm5ask_yirecb1Q.roa (raw, json)
Hash identifier: JDwkF6hgkWvdtcS/GD6K7wz8eKz1FLYeR4AFvtY5ooE=
Subject key identifier: 50:70:F3:FC:4E:D2:CB:13:E9:9E:6E:5A:B2:4F:F2:8A:B7:9C:6F:54
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C5BA07898CE7BF826B7BADFA281E3
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/UHDz_E7SyxPpnm5ask_yirecb1Q.roa
Signing time: Mon 02 Jan 2023 10:34:50 +0000
ROA not before: Mon 02 Jan 2023 10:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213273
IP address blocks: 2a0d:f407:1006::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5b:a0:78:98:ce:7b:f8:26:b7:ba:df:a2:81:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5070f3fc4ed2cb13e99e6e5ab24ff28ab79c6f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:5e:2c:12:ce:14:49:fc:f7:cb:b2:7c:88:
a3:83:b3:bd:db:3c:91:29:ef:d2:2d:dc:77:a5:02:
85:9e:09:3c:03:a5:57:cd:4f:54:4b:44:09:18:8c:
e5:ad:bd:c1:d3:df:a9:e8:91:82:49:6b:f1:b3:69:
8a:a8:38:a4:b7:db:be:4a:ff:1b:35:ac:08:18:9e:
c7:f4:31:5c:d2:33:8d:34:86:fb:7d:42:02:0b:2b:
d9:8d:5d:47:2f:89:24:b2:a1:f1:56:5d:69:0a:94:
c2:fa:df:09:17:c3:00:97:0b:57:a7:2e:d6:e6:c1:
d9:f7:22:29:8b:6a:4e:71:fc:29:6d:7a:3d:95:19:
fa:c1:11:6a:f8:dc:7c:00:79:bf:13:98:e2:ba:60:
d5:5c:4a:68:b1:be:e9:32:fc:a7:04:3e:79:03:c4:
8a:83:d7:32:fd:e3:c8:87:db:47:6c:19:d8:06:17:
2d:78:b7:ca:a0:16:71:ca:92:5f:4c:02:cf:02:a2:
db:df:05:f0:ca:1b:a8:d4:ec:c1:96:45:60:0b:db:
c6:33:57:40:db:f6:24:13:de:4a:52:ad:b5:4d:69:
62:b0:b1:6f:ba:f2:c6:db:27:ef:a8:d2:1e:6b:e6:
91:19:10:ed:0f:3f:ad:a5:ef:36:45:30:4b:92:f3:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:70:F3:FC:4E:D2:CB:13:E9:9E:6E:5A:B2:4F:F2:8A:B7:9C:6F:54
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/UHDz_E7SyxPpnm5ask_yirecb1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f407:1006::/48
Signature Algorithm: sha256WithRSAEncryption
9f:30:7f:35:db:f7:90:5a:74:4b:19:56:e4:e1:e6:37:fd:21:
48:74:8a:91:ed:57:2c:64:83:3f:b8:80:fe:cf:f1:31:27:4b:
97:24:b8:5b:9c:f8:cf:25:6f:50:ae:86:88:32:6a:a4:e1:61:
f8:0a:ff:77:c9:38:70:73:5d:bb:0a:7c:41:57:a9:bc:fb:9e:
58:b2:27:76:34:60:b8:61:70:83:ab:8c:44:95:20:06:c4:19:
e0:03:df:3c:16:77:a2:ba:8e:81:d3:c7:e0:0a:4b:5c:18:4a:
28:53:da:89:be:85:e1:c6:a5:78:d1:86:49:cd:9f:e1:22:98:
a7:08:7d:cb:73:d2:5a:64:9c:5b:4c:5b:9e:5f:47:1a:ff:01:
57:c1:8d:09:fe:69:87:04:dd:02:14:3f:78:67:5c:7a:66:e8:
77:db:e6:fd:92:ed:77:a7:92:0f:4d:4b:d8:ed:34:89:b5:f5:
3b:f7:ac:bc:dc:68:7c:45:14:2c:36:ad:06:36:9e:7e:bc:69:
f1:39:c0:41:9a:99:65:f3:e4:cf:51:51:8e:a1:77:d1:de:e0:
9e:28:a3:1b:5d:75:cc:c7:42:a8:54:61:65:f2:a5:5d:9e:6f:
45:e1:bd:f9:90:bf:e0:d5:ef:52:6e:a1:f0:2b:0d:91:40:a8:
c6:67:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org