Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/WuwUOS56xjsGjYEiwvpA4CzwMTA.roa
File: WuwUOS56xjsGjYEiwvpA4CzwMTA.roa (raw, json)
Hash identifier: aApFdBEicAuZyt3TG8REbzpnhsn9lNu+GnCIiCZ1uNA=
Subject key identifier: 5A:EC:14:39:2E:7A:C6:3B:06:8D:81:22:C2:FA:40:E0:2C:F0:31:30
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 01856F5DF2F18EC3586D35AE5530DFAF4287
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/WuwUOS56xjsGjYEiwvpA4CzwMTA.roa
Signing time: Sun 01 Jan 2023 22:05:06 +0000
ROA not before: Sun 01 Jan 2023 22:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3096
IP address blocks: 2a02:6a0:8ffe::/48 maxlen: 48
2a02:6a0:8fff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f2:f1:8e:c3:58:6d:35:ae:55:30:df:af:42:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Jan 1 22:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aec14392e7ac63b068d8122c2fa40e02cf03130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:1a:48:3e:6c:72:bf:86:ee:c9:cb:18:37:
23:c0:44:3b:49:bb:6e:ef:49:60:2a:ee:3f:c3:c7:
4a:41:64:9d:76:9a:ae:bc:a4:66:c3:18:34:b2:bb:
98:7d:20:07:4e:47:26:46:88:58:5f:56:3f:c1:72:
bf:0c:7e:1b:d6:c6:b7:4a:12:b3:95:73:ad:1e:ce:
e7:4d:7c:88:cf:0b:3f:a2:1a:ef:27:b8:13:32:a7:
b5:66:01:9e:ee:11:2d:fb:95:ed:d8:31:2d:b9:2a:
f3:b0:d3:19:71:06:d7:3b:7d:82:93:47:d3:5f:d3:
a5:8c:55:18:c9:26:0e:35:f6:2e:1e:52:86:4e:b3:
8e:6a:80:ee:a5:e2:8a:d6:4d:31:7e:78:90:15:00:
cf:68:44:81:e8:9f:42:01:ab:a1:f1:74:d7:33:22:
e3:2d:29:bc:1a:29:c6:9e:fc:2d:57:30:e2:17:63:
ce:6b:98:be:05:fa:4a:ea:e0:1b:41:f5:48:a7:10:
1a:39:a7:e5:ca:81:61:79:56:6f:37:1a:57:fd:34:
48:b4:fc:dc:36:37:57:8b:d4:0b:26:1d:b7:32:2f:
50:c5:f2:36:09:e8:b9:14:55:47:a5:7f:07:7e:07:
d3:cb:bb:98:2c:03:b3:9c:4c:6f:36:d0:37:57:01:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:14:39:2E:7A:C6:3B:06:8D:81:22:C2:FA:40:E0:2C:F0:31:30
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/WuwUOS56xjsGjYEiwvpA4CzwMTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6a0:8ffe::/47
Signature Algorithm: sha256WithRSAEncryption
36:a4:f4:2b:24:8c:ea:65:48:2a:00:08:49:ed:ab:0f:10:d3:
a0:63:15:5e:ec:93:10:d8:b0:e6:9f:0d:03:d3:13:e2:42:fc:
09:3d:bf:45:2a:d5:bc:44:83:eb:f5:3e:13:f2:44:19:4d:7d:
8e:17:89:cf:47:b9:09:af:9c:96:fc:80:86:b6:ac:00:12:9c:
3d:5a:ed:90:04:8b:36:3e:1d:c8:f4:94:52:3c:83:c6:50:6b:
79:cf:82:61:ec:f9:1e:f7:72:ba:9b:46:f3:3a:38:d7:aa:ad:
e8:36:57:0d:17:89:01:1b:22:f7:b3:24:59:8f:ee:0a:91:e7:
60:ac:ec:2d:91:d5:30:98:fe:65:00:54:21:d4:3b:04:c8:9e:
93:d4:f3:0a:2e:6c:0e:df:93:25:dd:b4:4c:6d:90:d4:18:c0:
5b:70:92:f1:49:5d:b9:ef:72:cf:e8:a3:a3:c5:70:68:5e:bf:
36:3c:88:d1:1e:c0:3b:2c:65:2f:0a:6f:d0:a0:db:76:a9:7f:
40:d2:e0:c4:b5:5e:9c:6c:69:c6:ae:f3:a2:09:62:c6:ee:db:
60:02:e1:3a:51:98:26:23:e5:24:0d:97:57:73:9f:af:de:48:
83:96:ac:64:54:75:6a:db:29:6b:46:ca:53:8d:f1:69:12:59:
a7:c4:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:35 2024 by rpki-client on console-fra.rpki-client.org