Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/wLO1yI5YGA6xnOGyf7YMumfpSLM.roa
File: wLO1yI5YGA6xnOGyf7YMumfpSLM.roa (raw, json)
Hash identifier: rkgANqgVZZw459z3SE3SYSlHzNiUflR8SVHKbJrOGwY=
Subject key identifier: C0:B3:B5:C8:8E:58:18:0E:B1:9C:E1:B2:7F:B6:0C:BA:67:E9:48:B3
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018927EF2936249372857A982F2ACE4D0FF1
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/wLO1yI5YGA6xnOGyf7YMumfpSLM.roa
Signing time: Wed 05 Jul 2023 21:22:12 +0000
ROA not before: Wed 05 Jul 2023 21:22:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199984
IP address blocks: 2a11:840:24::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Jul 2023 13:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:27:ef:29:36:24:93:72:85:7a:98:2f:2a:ce:4d:0f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jul 5 21:22:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b3b5c88e58180eb19ce1b27fb60cba67e948b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:c6:7e:6c:80:6c:da:13:38:ec:3d:78:f8:
d3:c8:f7:58:97:b4:42:04:e1:2e:2d:63:0b:2d:a1:
a3:9c:1b:1f:c9:b0:34:c4:f9:b8:e9:d3:e4:20:b9:
a6:ed:ba:cd:d9:4a:3c:09:a6:1d:11:62:e6:1c:ac:
50:f0:98:81:11:b1:67:c3:63:1e:41:ae:ce:a4:ed:
af:a2:3c:a3:af:62:34:cd:34:4c:d1:7f:f9:8b:0a:
fd:c9:3c:ac:7e:6c:bc:91:4e:bd:00:30:c4:01:41:
b9:51:30:52:97:b4:14:8e:5f:c2:73:67:7f:53:11:
83:65:e1:af:01:34:00:f9:ea:b6:6c:38:84:65:fa:
79:f9:80:11:76:78:f5:bc:bb:2d:cc:93:43:99:4a:
3d:c2:b5:a1:ea:2d:df:7a:90:09:b4:65:23:76:12:
71:e7:93:13:8d:5c:c6:b6:84:e4:9b:5d:01:f4:7f:
27:4d:ce:64:68:51:f7:66:d2:95:8f:b7:f7:7c:a7:
68:db:ab:c9:63:a2:ab:dd:4b:be:98:c2:41:21:44:
5a:db:f6:e3:40:61:ed:d4:b8:26:72:80:bc:8e:73:
a4:00:26:35:15:3b:53:56:63:97:90:0c:34:81:3a:
25:34:e3:41:98:65:ac:11:de:09:b0:2c:22:87:5b:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B3:B5:C8:8E:58:18:0E:B1:9C:E1:B2:7F:B6:0C:BA:67:E9:48:B3
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/wLO1yI5YGA6xnOGyf7YMumfpSLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:24::/48
Signature Algorithm: sha256WithRSAEncryption
5e:29:87:21:e4:3f:50:80:2a:9a:4c:cd:36:7b:84:48:f8:23:
62:d0:21:cf:4a:cb:80:46:c7:e8:06:fd:0d:de:3a:8d:1d:aa:
31:c0:d6:17:7e:20:b7:64:0e:f4:ec:0f:79:23:3b:80:39:f3:
aa:d5:7a:b2:7e:5c:a5:0a:e5:c9:a1:15:41:46:a1:e2:9e:7c:
1b:fb:3c:af:ae:ff:8e:62:26:af:cd:46:d2:73:1e:10:06:fd:
8e:f5:d8:a1:21:5a:6c:f7:5f:7e:ce:26:61:91:6e:19:fe:ca:
ed:5e:e1:48:2d:07:96:8a:16:73:0b:52:78:4c:b8:1f:c8:ec:
1d:e1:b0:03:e7:5b:65:6a:0e:9a:63:6a:7a:e9:9a:22:6f:5b:
8b:39:2e:1f:8f:d2:5e:03:59:fe:25:78:98:e1:64:36:fe:ea:
01:ab:73:06:14:d1:30:d0:ef:26:b6:b3:6f:ed:60:03:c4:82:
c7:c7:68:92:92:d9:c4:6c:5c:a2:39:f7:7c:e5:57:46:60:17:
59:2c:c3:9c:de:1a:80:22:d3:72:9c:e2:28:d9:9c:30:2b:87:
53:1a:da:cd:a3:51:bf:c0:4f:70:a9:3b:f3:84:83:eb:9a:23:
1a:c9:1a:6b:2d:88:96:db:47:76:0d:53:eb:84:b3:21:16:fd:
bf:f4:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org