Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/5B8J_pAJXANKdwhQ5alFHJlpmZ8.roa
File: 5B8J_pAJXANKdwhQ5alFHJlpmZ8.roa (raw, json)
Hash identifier: hq9i8jbE+VizEvzCpskn+J16Ru54Nmvnrqc/PDRwDFU=
Subject key identifier: E4:1F:09:FE:90:09:5C:03:4A:77:08:50:E5:A9:45:1C:99:69:99:9F
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 01856FF01C55CEDD50F9BFA5A47AC2385A5E
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/5B8J_pAJXANKdwhQ5alFHJlpmZ8.roa
Signing time: Mon 02 Jan 2023 00:44:44 +0000
ROA not before: Mon 02 Jan 2023 00:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208753
IP address blocks: 2a09:b280:ff60::/48 maxlen: 48
2a09:b280:ff61::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:1c:55:ce:dd:50:f9:bf:a5:a4:7a:c2:38:5a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Jan 2 00:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e41f09fe90095c034a770850e5a9451c9969999f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:57:9a:f5:c3:bc:cc:eb:8a:bf:d8:d7:de:
1e:01:3b:c0:6b:e5:d2:35:6d:8f:52:2b:17:0a:8b:
82:1b:3c:ca:8c:a3:c1:5a:e4:f8:dd:47:bf:37:c2:
86:79:73:90:0e:34:4d:78:88:58:43:61:42:f4:54:
f0:cb:a4:85:ce:8c:7f:2c:a1:c1:3a:7d:45:a6:2b:
58:d4:68:00:e5:44:7f:0c:14:d2:82:cc:0b:02:d4:
ad:ec:50:a9:1d:af:c0:f1:db:f3:f1:f4:d8:fa:5e:
ba:bf:6e:56:87:64:0d:5c:87:bd:5c:7e:fd:91:a9:
1f:95:8a:22:85:ec:70:94:51:f7:b7:6b:82:9d:0b:
a0:ff:c0:3d:39:c4:a5:26:bc:08:7d:3e:dc:fe:67:
14:4c:db:be:43:3b:f7:8f:48:d1:2b:ff:b9:90:a4:
c5:3e:f9:ef:59:cc:0d:e1:05:1a:42:9e:ec:7f:b2:
01:5c:f6:87:69:aa:50:9f:d0:65:d8:7c:17:2f:25:
bc:b3:47:bf:1c:de:fd:75:6c:cf:40:3f:32:6a:bd:
85:8a:64:58:5d:bc:b0:0f:fa:70:08:94:13:a5:28:
5d:24:7a:78:19:2e:70:7b:9e:08:26:94:07:85:26:
be:b8:8f:24:a1:8f:94:08:1b:3f:a6:bd:9c:ce:66:
e3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1F:09:FE:90:09:5C:03:4A:77:08:50:E5:A9:45:1C:99:69:99:9F
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/5B8J_pAJXANKdwhQ5alFHJlpmZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:b280:ff60::/47
Signature Algorithm: sha256WithRSAEncryption
09:3b:61:ce:5a:bd:ac:c1:0c:a0:de:78:34:97:0f:ac:7b:66:
41:74:c2:b5:2c:c7:16:0d:55:71:98:ed:7e:11:05:f1:bb:ea:
61:bf:b3:32:0d:f3:65:65:ed:61:a2:7b:cb:d0:7a:90:a0:68:
bd:c6:61:2a:da:63:61:fa:cd:a5:27:9b:6e:e9:f2:f3:ed:5e:
71:30:43:54:32:33:33:c7:fa:67:48:a5:9d:3f:1c:68:08:0e:
6b:8c:36:8b:c9:af:4e:50:29:8c:95:c4:90:a5:3b:48:18:f8:
36:e0:95:8c:0c:f2:27:5d:60:c4:47:88:f4:d0:9c:46:fd:55:
70:ca:22:0e:5a:a9:09:b4:75:17:7d:ab:07:40:c4:d6:4e:6a:
2a:dc:f9:b1:48:11:66:5e:70:e1:7e:35:9e:04:5c:9e:c8:19:
2f:65:12:4b:0d:c7:e9:8f:6f:9f:55:c1:13:dd:cb:b8:58:46:
5b:75:e0:c2:34:a0:dc:b6:29:66:23:23:ba:e9:f0:6f:32:c9:
9f:fd:7d:fb:cf:6d:d1:f7:c4:c8:ec:47:48:87:10:05:aa:9d:
ce:f8:85:1b:cc:a7:6a:cd:07:78:21:1d:50:a1:ab:7f:42:76:
c8:13:c6:75:be:ce:57:da:11:81:da:47:57:d4:54:18:b2:c9:
9b:27:7c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:19 2024 by rpki-client on console-ams.rpki-client.org