Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/1-Pl5YvhcRoKBuDQk4_JTJgGJloo.roa
File: 1-Pl5YvhcRoKBuDQk4_JTJgGJloo.roa (raw, json)
Hash identifier: FSXg4iwhsKECi0Mn3LRIF3KLPnyE/Uc0fvE2qf54lHM=
Subject key identifier: F8:F9:79:62:F8:5C:46:82:81:B8:34:24:E3:F2:53:26:01:89:96:8A
Certificate issuer: /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Certificate serial: 0188C4C1431B9990007D7420CAAA8D18AA2D
Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/1-Pl5YvhcRoKBuDQk4_JTJgGJloo.roa
Signing time: Fri 16 Jun 2023 15:09:39 +0000
ROA not before: Fri 16 Jun 2023 15:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8893
IP address blocks: 2001:67c:2064::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:c1:43:1b:99:90:00:7d:74:20:ca:aa:8d:18:aa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Validity
Not Before: Jun 16 15:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8f97962f85c468281b83424e3f253260189968a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:ae:77:d0:58:b9:73:a9:35:74:c0:38:c1:
7d:ae:b4:fe:e7:12:45:35:35:d6:0a:51:93:c9:1a:
ce:20:89:0d:53:03:d0:e1:90:94:cf:e5:1b:9f:79:
88:19:6a:40:8a:e5:37:5d:ae:8b:f4:1f:39:0f:fa:
bb:33:b8:3b:7c:08:f6:60:19:91:11:42:d6:df:90:
40:76:75:6b:54:ee:d7:db:41:01:d5:07:54:04:ec:
d6:1f:7d:09:fd:0c:77:53:70:7a:b8:2e:65:6b:c3:
b7:d5:6c:66:1c:77:cb:dc:72:a3:52:b3:d6:fb:2d:
ff:9b:db:79:f9:39:3a:cf:9a:10:b0:f9:f5:c3:3f:
66:ea:ec:7c:94:64:4d:9c:1a:0d:30:a4:d6:f3:84:
a7:8f:af:44:de:d8:be:00:20:7d:e4:66:aa:e0:ed:
24:6c:03:b9:19:fc:e3:f9:6d:75:79:8f:72:78:e3:
47:be:fc:4f:43:33:8c:f0:f7:d7:59:3a:4b:55:e2:
2c:f4:f9:9d:d7:56:e3:dd:52:05:98:3c:4c:07:6b:
8f:bf:5e:18:39:36:e4:98:e0:76:8d:8d:22:bb:32:
36:2f:86:0e:2f:25:c3:d9:e8:f7:aa:89:26:a4:38:
d3:ec:b9:99:f4:ea:28:44:10:2b:9d:21:20:f6:65:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F9:79:62:F8:5C:46:82:81:B8:34:24:E3:F2:53:26:01:89:96:8A
X509v3 Authority Key Identifier:
keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/1-Pl5YvhcRoKBuDQk4_JTJgGJloo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2064::/48
Signature Algorithm: sha256WithRSAEncryption
8b:54:35:85:ca:d9:0e:fb:6d:0a:11:81:84:2e:ca:6b:e2:31:
ac:65:47:7c:b9:a0:38:aa:cc:f8:0f:93:f1:cf:77:31:51:78:
85:73:b1:de:0a:53:88:3b:96:ff:5c:d0:87:4d:24:2f:84:e0:
a7:bc:35:40:0f:ac:fb:4d:ef:34:5e:92:eb:05:9c:5e:3b:66:
a9:62:be:d9:8e:5b:2f:c2:af:1b:28:19:02:38:d5:1a:e5:b3:
98:60:a2:4d:16:6f:ff:0a:9f:27:97:3b:a3:30:07:52:90:75:
a6:83:47:9f:b7:43:b0:4b:d2:1d:e8:73:4e:96:67:69:2c:1d:
81:1c:b0:b8:d3:b1:b8:f7:16:35:39:2d:60:0e:63:f5:e1:a8:
8f:17:0a:79:63:cd:30:dc:41:bd:a0:b8:2b:4e:69:e6:db:13:
78:45:e0:d5:49:9f:a0:54:18:a8:b2:c3:7c:ab:c4:1a:ee:e9:
2d:09:a5:4d:d8:4c:4d:dc:e3:13:2d:30:c1:08:c7:65:30:25:
b6:8d:b0:38:69:dd:3f:92:0a:63:10:63:2f:f9:0f:4d:b7:ad:
b2:82:20:0b:7b:46:16:9b:a1:e8:f3:f9:65:9c:38:18:95:c2:
1c:3d:7d:a2:ae:5b:54:b9:00:01:4c:54:76:44:c3:f0:6c:64:
83:33:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:28 2024 by rpki-client on console-ams.rpki-client.org