Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/OOPmkbUYi3hG5DHDTjC-vpJebwY.roa
File: OOPmkbUYi3hG5DHDTjC-vpJebwY.roa (raw, json)
Hash identifier: 5myrSGlKrfw01/Gc1IQfujaNFDybl98ton6BbZAawig=
Subject key identifier: 38:E3:E6:91:B5:18:8B:78:46:E4:31:C3:4E:30:BE:BE:92:5E:6F:06
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA3DFFD3AACC7FC869EA9F2907D1E5
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/OOPmkbUYi3hG5DHDTjC-vpJebwY.roa
Signing time: Mon 02 Jan 2023 13:44:46 +0000
ROA not before: Mon 02 Jan 2023 13:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5470
IP address blocks: 2001:648:2800::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:3d:ff:d3:aa:cc:7f:c8:69:ea:9f:29:07:d1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38e3e691b5188b7846e431c34e30bebe925e6f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:87:44:24:2f:66:68:ef:90:0a:a8:7c:88:
2d:6d:8d:2e:fb:56:62:c1:03:10:94:d0:77:cc:54:
a3:32:81:8c:3d:b1:32:66:f8:c1:6b:d2:79:2e:f4:
cf:4f:55:ec:5f:75:42:4d:cf:7f:44:e4:e3:bc:fc:
89:25:67:9b:31:78:4c:53:85:e6:7d:5d:0e:a9:d1:
fb:02:3a:4c:63:f3:c2:1b:cd:91:9e:b1:6e:ca:8f:
d7:c7:e2:e2:fe:44:63:4e:ae:d0:27:9a:31:52:16:
31:97:ea:6a:34:e0:ad:1d:74:ee:7f:b7:99:71:22:
f6:d2:c0:4e:e5:36:96:7e:c3:b8:90:ce:81:d8:1c:
90:0c:07:a2:14:9b:98:d5:92:34:b5:be:cd:75:87:
f9:77:05:67:a3:69:d2:06:a9:e2:72:6e:ff:98:4e:
16:12:af:ea:48:df:03:15:f0:b2:69:d0:b5:54:f5:
08:3c:ef:9c:4f:93:b3:9e:95:c3:52:35:46:68:1d:
9b:33:02:7e:b1:ef:c9:0c:31:f2:77:65:d9:64:f8:
8d:21:34:06:61:ea:d3:97:73:ee:0d:cd:b2:61:ce:
9e:fb:95:1d:fa:9e:7a:35:27:d0:a4:34:a0:b3:dd:
cd:78:e7:f7:bd:f5:c5:0f:5b:42:0e:27:cb:af:c3:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E3:E6:91:B5:18:8B:78:46:E4:31:C3:4E:30:BE:BE:92:5E:6F:06
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/OOPmkbUYi3hG5DHDTjC-vpJebwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:2800::/48
Signature Algorithm: sha256WithRSAEncryption
6c:d2:c1:c4:5b:32:fc:f5:4f:4f:ed:6e:3c:0e:79:14:3a:e1:
16:2c:df:c2:3b:8b:e5:d4:15:a2:07:06:31:cd:00:d8:62:44:
6e:3f:88:56:92:17:33:f7:a5:d2:61:57:ea:63:61:e2:cd:1f:
f0:35:30:37:b0:3b:51:e4:c4:25:8b:9c:b8:71:51:52:27:c8:
6d:38:48:d8:6a:0b:f2:e3:47:bc:c4:5b:7b:35:9b:ff:24:d4:
bf:ce:e9:7e:0e:0d:98:e9:d7:0a:1c:5f:b4:07:ec:bb:8e:ae:
54:61:4b:ee:d5:be:ec:24:de:0e:e8:90:ae:c3:9c:6a:a4:74:
80:09:82:ed:22:69:be:d7:8b:6e:78:35:52:fc:e2:7c:fa:75:
cf:6f:d7:cf:58:8b:14:60:7c:66:98:e1:b5:1f:56:4d:a4:61:
0b:83:eb:f6:01:fb:69:58:78:37:54:9a:2e:41:eb:4c:08:22:
bd:2f:50:7c:4e:70:64:3e:3d:1f:f0:b5:d3:23:7e:79:ff:5e:
a6:0d:82:db:37:34:ef:cd:9c:69:3c:15:1a:36:11:8d:f2:39:
f7:4b:e5:c8:51:b4:cd:4c:38:c3:24:c8:19:c5:0f:05:62:b0:
a0:f1:55:b4:1b:0b:b0:24:ac:ed:67:6d:98:6c:19:5d:49:2f:
46:2e:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org