Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/L-NGqOI9pgFcLp5ziphQ3BTosGk.roa
File: L-NGqOI9pgFcLp5ziphQ3BTosGk.roa (raw, json)
Hash identifier: 5WkyZfjxHNotIagXnuF0EgM7R5ptQuITv1J4mMiYQg4=
Subject key identifier: 2F:E3:46:A8:E2:3D:A6:01:5C:2E:9E:73:8A:98:50:DC:14:E8:B0:69
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA409B8828808EAFEBACC36FE30A3A
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/L-NGqOI9pgFcLp5ziphQ3BTosGk.roa
Signing time: Mon 02 Jan 2023 13:44:46 +0000
ROA not before: Mon 02 Jan 2023 13:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8278
IP address blocks: 2001:648:2960::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:40:9b:88:28:80:8e:af:eb:ac:c3:6f:e3:0a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fe346a8e23da6015c2e9e738a9850dc14e8b069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:bf:66:73:b6:48:df:12:ea:be:86:d3:6b:
9c:7c:ab:d3:b2:b2:8d:b7:2e:b1:07:9e:61:86:1e:
64:c6:8c:a6:da:18:64:d4:ae:28:6d:92:e5:e1:fa:
62:0c:29:61:3f:0d:66:7f:3d:2f:96:73:6b:9c:58:
ae:86:df:58:81:55:e7:25:a5:ef:47:2e:02:e1:dc:
c1:99:56:36:97:5a:44:bc:81:bb:97:cd:05:a6:20:
83:8f:ab:a1:b8:3f:00:c5:76:8f:8f:4b:0c:f8:46:
bc:e8:3b:62:a1:34:fa:7d:b3:eb:8f:65:bf:4c:e8:
e3:70:5d:54:80:68:af:21:23:d7:a5:8f:31:d3:1c:
9c:5b:af:58:30:25:42:60:74:80:d0:90:73:2e:b5:
72:96:d6:d7:31:a2:69:9f:63:07:fb:92:1f:e9:a4:
ff:53:2f:e2:76:64:82:a0:a3:05:9e:85:69:4d:18:
81:f8:ef:17:5d:15:ef:2c:d6:1b:ed:af:5a:76:39:
2e:bd:b8:4c:9d:e1:6e:81:9b:69:c6:4a:f6:60:d6:
18:b3:0c:e6:cb:52:11:1a:b2:78:eb:34:54:c7:f1:
dc:23:00:4a:4a:dd:82:13:1d:60:91:a9:14:f2:a3:
cf:8a:15:cb:77:9c:27:16:4e:90:f5:b5:ff:56:d5:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:46:A8:E2:3D:A6:01:5C:2E:9E:73:8A:98:50:DC:14:E8:B0:69
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/L-NGqOI9pgFcLp5ziphQ3BTosGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:2960::/48
Signature Algorithm: sha256WithRSAEncryption
11:b1:8a:da:14:95:23:ed:ec:5d:ce:03:e8:a0:fd:96:db:b2:
62:bf:f9:2d:b2:c5:3e:0a:98:bc:b7:5a:05:a7:28:ba:5e:ba:
0a:ad:57:26:82:30:44:be:2f:5c:9a:84:de:2f:6f:5a:fc:1b:
ee:81:69:c7:ad:9f:b7:64:e1:4a:db:43:f5:ff:b8:e4:90:99:
03:b7:cf:f4:f4:5e:8d:68:25:a4:d1:26:5f:1b:2d:d6:52:c4:
8b:26:40:4b:4a:b0:28:11:a3:74:8b:fd:d8:45:3c:1a:d7:26:
09:0f:4b:0d:27:d3:0b:1e:50:f0:ea:50:89:3a:e1:ac:a8:25:
7e:09:ed:8b:3c:fb:9c:48:4d:64:93:e9:01:3d:bf:2e:b7:4b:
46:ca:3f:d1:dc:78:f1:3c:a8:ee:6a:14:69:60:8b:7a:a3:4f:
1b:33:aa:ab:f9:93:6a:cb:fb:2d:f7:59:2f:75:2c:ac:d5:08:
eb:ec:12:45:0f:f0:e0:66:bf:d4:be:67:42:7f:a6:db:8f:13:
49:f8:29:94:bb:a6:7e:16:38:97:f0:d2:40:f9:c5:a1:fd:6c:
0e:08:e8:0a:ca:fe:9d:6e:b7:d5:7a:b2:99:1a:7c:80:81:7f:
bc:8c:a1:2a:72:e3:c8:c1:50:84:a2:f5:72:61:89:98:fb:b5:
33:01:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org