Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/DWQPzEVN3-nPRXrrRRqhvvC2Jr4.roa
File: DWQPzEVN3-nPRXrrRRqhvvC2Jr4.roa (raw, json)
Hash identifier: YHIp10UQgKyCJfzPp9PhxTnb/S3FSWqeoKmVytshbTo=
Subject key identifier: 0D:64:0F:CC:45:4D:DF:E9:CF:45:7A:EB:45:1A:A1:BE:F0:B6:26:BE
Certificate issuer: /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Certificate serial: 0187FF8CC9194A0B2DF587193CE318463A1C
Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/DWQPzEVN3-nPRXrrRRqhvvC2Jr4.roa
Signing time: Tue 09 May 2023 08:07:09 +0000
ROA not before: Tue 09 May 2023 08:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211207
IP address blocks: 2001:67c:b08::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:8c:c9:19:4a:0b:2d:f5:87:19:3c:e3:18:46:3a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Validity
Not Before: May 9 08:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d640fcc454ddfe9cf457aeb451aa1bef0b626be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:09:16:55:65:8b:50:8d:cb:e0:51:f3:da:
1f:94:6f:2a:72:a4:ea:bb:7c:a1:db:58:8d:d5:b2:
e0:f6:75:f5:ce:00:b5:4a:ba:c8:f7:84:79:68:70:
76:87:4f:c6:e0:93:31:11:40:c1:be:c9:f8:66:de:
c1:ca:1e:7e:1d:b3:9b:de:c8:1e:42:79:5c:ba:22:
4f:92:6e:e2:be:39:29:88:4c:d1:11:d3:c2:b1:a4:
a0:76:70:77:73:30:da:ec:8d:68:f0:65:95:d9:77:
0f:09:0d:5e:8e:99:b6:02:69:a1:4a:ba:5c:82:b9:
53:ff:c3:c6:d2:cd:29:6b:e8:98:9a:8b:67:e0:d1:
38:bc:34:be:73:b3:4a:bf:14:5f:8c:ee:9d:33:4e:
b1:9d:2e:3a:60:cf:20:10:70:93:ca:49:92:bc:ae:
26:83:eb:a4:f9:0f:53:9d:ca:78:9b:a4:e0:14:49:
07:27:24:e4:a6:8a:c7:27:ef:07:5e:ce:b1:6f:86:
9c:80:5e:70:d1:ed:fa:0b:32:41:3c:7b:7e:43:e7:
1b:be:e4:be:9a:6a:0e:1d:27:c8:bc:f8:ac:6b:60:
a0:5a:23:55:d9:b9:e7:b0:64:82:d5:ab:41:fd:d8:
35:c5:4e:a9:bd:88:a5:aa:42:e8:d5:ff:b9:86:0d:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:64:0F:CC:45:4D:DF:E9:CF:45:7A:EB:45:1A:A1:BE:F0:B6:26:BE
X509v3 Authority Key Identifier:
keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/DWQPzEVN3-nPRXrrRRqhvvC2Jr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b08::/48
Signature Algorithm: sha256WithRSAEncryption
73:ea:39:8d:62:03:83:91:50:08:31:8a:95:5f:2e:ac:61:81:
68:37:65:3d:84:18:b1:34:3a:f1:0c:17:ba:f8:95:75:6c:ac:
d8:4c:b7:31:a6:a6:70:f3:24:36:1d:00:63:ff:eb:3c:cb:b4:
d3:a4:24:47:67:96:6b:b9:a9:0f:d9:28:07:ed:1c:04:e7:a2:
8f:83:41:e8:dd:f2:38:ed:11:50:a7:7a:47:fc:74:14:2e:e2:
a6:4c:0f:a2:f4:e5:c1:0c:2a:fe:97:d5:ee:e6:87:a4:35:55:
2a:04:5b:d7:d4:f0:40:51:95:1a:d7:0d:75:05:9b:bf:5b:9d:
fd:70:49:16:99:58:5e:7e:25:dc:35:39:46:87:e5:fd:33:a0:
7a:7b:cc:f6:82:92:55:12:04:8b:c5:92:1d:98:9a:74:0d:a3:
3c:e5:cd:9f:ea:ca:f1:27:40:5c:75:f4:64:1d:52:06:cf:bd:
9b:17:a8:9a:c1:2b:6c:23:41:2e:fb:ee:fe:9c:6a:a4:ff:ac:
20:4a:d1:12:11:77:59:a9:ad:ce:0f:5a:25:d9:fc:f6:20:3c:
3f:85:ec:65:34:0d:e1:cb:cf:51:ff:38:64:68:23:66:37:00:
6b:92:93:81:b3:16:80:fd:6a:19:83:f7:01:20:49:3e:aa:ec:
e8:4d:1e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:24 2024 by rpki-client on console-fra.rpki-client.org