Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/5yrh8GFXMoq6tFvEF4Wd3NRENQw.roa
File: 5yrh8GFXMoq6tFvEF4Wd3NRENQw.roa (raw, json)
Hash identifier: +ZCQ74XQB3v8xvs9YHRIF8tcYlaXIDK0LUBXkLjhVuQ=
Subject key identifier: E7:2A:E1:F0:61:57:32:8A:BA:B4:5B:C4:17:85:9D:DC:D4:44:35:0C
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 01856BAED0436A038DC3E0F90FDE6276FEC3
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/5yrh8GFXMoq6tFvEF4Wd3NRENQw.roa
Signing time: Sun 01 Jan 2023 04:54:56 +0000
ROA not before: Sun 01 Jan 2023 04:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50525
IP address blocks: 2001:4de0:1006::/48 maxlen: 48
2001:4de0:49::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:d0:43:6a:03:8d:c3:e0:f9:0f:de:62:76:fe:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 04:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e72ae1f06157328abab45bc417859ddcd444350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:d2:9a:52:e8:77:aa:9b:48:96:33:2f:51:
a2:12:96:15:b3:d5:07:21:bf:0a:17:ea:a9:b8:54:
1d:0f:e4:86:5c:31:92:e3:6a:26:4b:6f:83:06:ee:
f7:dd:dd:c9:c3:1e:c8:a6:53:8a:18:b0:ca:4e:dc:
d7:da:52:3b:1d:49:9b:0d:5f:38:24:cf:cc:e9:62:
c1:20:4b:1d:b3:11:2f:84:3b:59:cc:7e:1d:e5:f3:
39:47:aa:e9:4f:7e:e6:ee:4b:1c:86:57:da:9b:5a:
1d:ae:c1:79:2e:4d:4f:f2:34:7a:09:5f:12:f2:c6:
b0:a2:90:b6:a4:1c:e7:36:e3:2e:db:a4:60:37:df:
e3:10:b9:34:b4:05:66:83:31:ff:c3:4c:27:8f:2e:
9c:6b:8c:c8:c1:25:a2:17:cb:ec:32:27:2b:79:f0:
aa:26:95:35:78:fc:b2:ff:33:7e:4b:d0:43:6c:12:
5f:eb:ac:e6:38:7f:0e:5a:ef:16:a4:d4:d5:6c:2d:
ef:37:eb:e5:8a:9d:a2:1f:26:66:ba:15:64:4d:9e:
51:ff:a2:ab:31:ae:a2:78:59:a4:08:f3:65:26:c7:
66:3b:e6:53:15:18:59:a9:65:fc:c6:79:49:71:9c:
54:90:c3:2e:62:bf:ed:d9:d5:0c:4f:25:47:10:37:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2A:E1:F0:61:57:32:8A:BA:B4:5B:C4:17:85:9D:DC:D4:44:35:0C
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/5yrh8GFXMoq6tFvEF4Wd3NRENQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4de0:49::/48
2001:4de0:1006::/48
Signature Algorithm: sha256WithRSAEncryption
90:c0:4d:ca:0d:2c:a7:00:a9:59:ec:65:54:17:2e:5f:62:3f:
a5:39:eb:92:aa:f3:60:9a:7f:6d:d2:89:df:f8:5d:14:b4:1b:
92:df:cb:de:87:bf:59:52:e0:50:5b:a7:6d:71:1e:16:d4:56:
0a:26:9a:c9:fc:11:71:a5:5e:d9:0f:fe:e4:ce:9d:ff:36:54:
08:19:10:76:23:15:6a:cf:48:94:6c:60:cf:9e:82:d9:2a:1e:
61:aa:59:30:32:e2:1e:5b:93:08:48:62:ca:ad:50:c3:af:31:
e8:41:56:10:0d:20:3e:da:27:f9:4d:07:45:d7:53:1b:0d:47:
cb:08:cc:3a:84:10:38:6e:8d:92:65:62:de:92:85:14:ab:c8:
7c:ab:60:14:5a:ea:f6:30:94:72:26:04:59:2d:2c:f8:86:36:
f1:d8:8d:fb:e3:d1:8c:8b:a5:96:44:e7:fd:cd:64:5a:74:ea:
f0:ab:9d:5c:91:23:69:7f:ca:9b:30:d5:b5:46:0d:fb:19:ed:
b6:47:dd:53:8c:03:f7:20:b5:85:78:0a:9b:96:be:2a:f8:94:
04:37:5b:b2:ff:1b:56:ad:87:87:61:fa:e8:52:37:74:92:ef:
0d:cb:d8:6b:ff:e5:85:f5:70:24:c1:68:f2:94:75:8a:ff:52:
99:ca:95:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:17 2024 by rpki-client on console-ams.rpki-client.org