Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/xjT4dvTKteg3769LmZNFeFYk6Cs.roa
File: xjT4dvTKteg3769LmZNFeFYk6Cs.roa (raw, json)
Hash identifier: X42BL7LE0OZd5q/sJs4lseiAamPeDoM0x4Il1T69I9A=
Subject key identifier: C6:34:F8:76:F4:CA:B5:E8:37:EF:AF:4B:99:93:45:78:56:24:E8:2B
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 0185701531E0BB106B822444E23131948DF8
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/xjT4dvTKteg3769LmZNFeFYk6Cs.roa
Signing time: Mon 02 Jan 2023 01:25:15 +0000
ROA not before: Mon 02 Jan 2023 01:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35062
IP address blocks: 2001:678:4a8::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:31:e0:bb:10:6b:82:24:44:e2:31:31:94:8d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Jan 2 01:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c634f876f4cab5e837efaf4b999345785624e82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:25:89:8d:5f:e1:66:23:bc:7b:f6:18:f8:b2:
ee:58:0d:86:27:9a:74:c0:d2:e6:30:4c:af:31:96:
19:f4:fc:58:8f:0c:18:d5:b3:f6:23:2a:3a:1e:ff:
e6:51:2a:62:d6:67:fe:dc:b1:d6:73:b2:3d:fc:a2:
62:29:25:41:80:64:e5:3d:ef:57:ea:6d:97:a7:bb:
a7:84:76:02:01:3e:80:dd:d9:d8:7f:8b:d0:b3:d5:
28:a5:4f:43:3f:76:72:ec:b4:76:89:4b:63:45:cd:
c1:82:78:92:af:ab:a9:76:f0:35:a7:50:df:4f:62:
e6:23:d6:0d:72:6d:b6:61:50:f6:20:90:7b:de:88:
79:38:73:21:bd:13:40:2b:df:38:93:a3:4e:ca:99:
6d:8e:71:51:34:e5:49:5b:7f:e3:f1:08:4e:47:ef:
84:93:a3:10:b0:61:64:ce:31:dd:cb:a9:40:fc:99:
07:fe:8d:84:0a:bf:28:5b:2b:d7:1a:24:9e:26:dd:
ee:74:b7:ea:66:29:66:a1:18:49:82:fd:56:11:dc:
da:3b:3e:91:e4:84:ba:bb:3a:8b:53:40:ea:02:40:
72:0f:e9:83:82:b9:b4:16:f7:a3:b1:e7:f3:63:4e:
b8:18:8e:36:4b:a5:24:cb:80:e6:8e:4b:7c:2b:e7:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:F8:76:F4:CA:B5:E8:37:EF:AF:4B:99:93:45:78:56:24:E8:2B
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/xjT4dvTKteg3769LmZNFeFYk6Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:4a8::/48
Signature Algorithm: sha256WithRSAEncryption
a1:8b:b2:a5:6c:33:15:3d:f5:2c:92:86:37:d0:e0:e4:ca:7f:
7b:25:dd:54:77:80:18:48:e8:0f:2c:0f:6a:2a:88:60:2f:04:
2a:b0:76:b2:03:09:ac:8e:4d:5b:01:76:6c:24:91:b4:61:06:
67:3a:51:9b:55:87:76:71:60:39:b6:b6:c6:ad:41:0f:a5:50:
fd:10:e7:35:2b:00:b3:5d:5c:e9:d0:a5:c0:c2:cb:d2:89:bc:
87:c1:2e:a7:f0:9b:35:77:68:80:ba:58:8e:48:6e:e4:6d:9d:
50:12:a1:19:6b:01:20:5d:2a:93:0d:20:d0:b0:c1:55:fd:46:
ef:bf:20:fa:d3:0b:6b:40:d6:df:7e:e2:8f:5d:01:11:12:77:
89:c7:46:e5:62:81:c6:8c:d9:a0:75:de:8d:4a:65:6f:50:20:
b3:db:55:7d:25:3c:06:d5:d0:a1:a9:33:09:05:7c:78:63:7a:
90:e3:09:13:74:c2:b7:fa:86:05:d6:dc:65:45:ea:b2:77:11:
ab:11:9e:a9:ed:56:82:21:79:d3:14:90:0a:33:d8:9c:85:9e:
5f:ff:33:58:7c:72:a7:60:f0:8e:b1:02:e8:de:e3:75:7a:19:
4f:56:26:2d:cb:64:d2:fc:90:51:c1:ea:15:5c:7e:a1:8a:f1:
a2:f3:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org