Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/VIlQrkPsdyY_o5SCDYeT0UFv3pM.roa
File: VIlQrkPsdyY_o5SCDYeT0UFv3pM.roa (raw, json)
Hash identifier: /AMA8JCs5pc/jwACks5JsHm0Iq3Iq/uSoJ3tFLfn1k8=
Subject key identifier: 54:89:50:AE:43:EC:77:26:3F:A3:94:82:0D:87:93:D1:41:6F:DE:93
Certificate issuer: /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial: 0185724C760EB6C13AABA9CAC34DF5869854
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/VIlQrkPsdyY_o5SCDYeT0UFv3pM.roa
Signing time: Mon 02 Jan 2023 11:44:51 +0000
ROA not before: Mon 02 Jan 2023 11:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a01:bb22:8000::/33 maxlen: 33
2a01:bb22::/33 maxlen: 33
2a01:bb24::/32 maxlen: 48
2a01:bb23:8000::/33 maxlen: 33
2a01:bb23::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 02 May 2023 08:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:76:0e:b6:c1:3a:ab:a9:ca:c3:4d:f5:86:98:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Validity
Not Before: Jan 2 11:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=548950ae43ec77263fa394820d8793d1416fde93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:c3:5e:64:dd:e5:69:f6:5d:0a:ec:0a:ba:
91:ed:81:4a:7c:05:a0:de:f6:aa:84:4e:e2:41:e5:
e7:04:2d:ac:07:e5:a7:22:2f:83:cd:95:88:88:55:
8b:08:5c:1c:02:e2:32:d7:b3:83:6a:8d:4f:aa:db:
32:0b:0c:06:25:67:26:c2:32:46:d9:e0:00:3e:91:
6b:dc:15:a6:c1:d7:07:44:e5:51:73:2a:de:7f:40:
59:e8:b5:50:01:c0:6d:89:48:8a:8b:c1:9e:d4:42:
8f:a8:92:b2:91:d7:e5:83:ca:53:ef:53:74:4a:1f:
ca:9a:68:b0:64:53:8f:27:66:03:c9:e9:d0:91:e3:
9c:cd:6a:0a:53:d9:2e:92:33:5b:37:42:a8:6a:04:
c5:c7:d1:f6:70:6d:d3:be:bb:2f:dc:72:bf:13:ad:
44:d8:ab:05:d8:b6:e7:97:33:31:7b:20:63:9c:3e:
29:5c:bc:85:0b:8a:dd:b9:dc:01:7d:f3:95:57:a2:
2b:5b:2c:dd:3e:c7:31:bb:65:f0:b2:e3:4b:7d:f9:
7d:02:eb:e2:ca:49:db:63:03:61:de:2b:db:5e:38:
d1:ac:9d:96:57:ba:73:d4:57:b1:42:18:52:32:9b:
a4:05:d8:2c:5b:b8:3f:69:7c:23:61:a7:e4:b0:68:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:50:AE:43:EC:77:26:3F:A3:94:82:0D:87:93:D1:41:6F:DE:93
X509v3 Authority Key Identifier:
keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/VIlQrkPsdyY_o5SCDYeT0UFv3pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:bb22::-2a01:bb24:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
21:f3:0f:22:46:85:90:bb:94:a5:d6:a7:15:00:c6:e6:aa:e9:
c6:fb:02:8e:a3:84:5c:d1:99:6a:34:0a:e6:33:92:b3:8b:59:
1b:6f:56:4b:dd:cb:6c:a7:7c:ba:9c:0b:f0:07:ef:08:94:d9:
11:73:06:5d:7c:8c:a5:30:98:6d:7f:68:34:43:7b:48:1a:e0:
41:0e:15:c2:47:aa:ee:ca:f3:a7:71:ad:a8:8f:fa:10:fd:2b:
da:7c:31:20:5b:44:c1:ff:6e:0d:d7:82:3f:17:cc:c0:25:5b:
17:b8:83:ac:c5:36:a9:c7:05:56:46:85:36:34:ba:a3:5e:dd:
a1:d3:df:f5:5a:21:26:8d:f0:10:06:c6:63:ce:80:49:c8:6c:
f6:9a:2b:49:1e:ec:9b:91:58:4a:11:c7:66:cf:e0:7d:79:c0:
10:df:84:4e:03:84:fa:97:aa:78:87:82:01:05:74:d7:4b:18:
93:6d:47:6b:78:d9:3e:44:3c:a2:21:fb:f3:94:25:43:51:e2:
28:f2:92:77:66:35:3c:46:c7:65:4e:17:99:82:6f:b1:bb:d4:
68:0d:d7:23:7f:0f:3e:4a:54:d3:77:67:ae:ae:8b:53:89:d0:
c1:d4:50:5d:47:c1:2c:49:9b:9f:ae:e2:a9:77:40:93:8e:16:
42:a4:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org