Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/I66xu3FI6e-labJGOs7zq5cP12s.roa
File: I66xu3FI6e-labJGOs7zq5cP12s.roa (raw, json)
Hash identifier: YEkB4VQDhB0j6AWok38qubYbtXBCTffIrU/8fvaXBs0=
Subject key identifier: 23:AE:B1:BB:71:48:E9:EF:A5:69:B2:46:3A:CE:F3:AB:97:0F:D7:6B
Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial: 01856F0247F4ACB2B5C3FED3807FE52603A9
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/I66xu3FI6e-labJGOs7zq5cP12s.roa
Signing time: Sun 01 Jan 2023 20:24:58 +0000
ROA not before: Sun 01 Jan 2023 20:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12695
IP address blocks: 2a00:f940::/49 maxlen: 49
2a00:f940::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:47:f4:ac:b2:b5:c3:fe:d3:80:7f:e5:26:03:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Validity
Not Before: Jan 1 20:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23aeb1bb7148e9efa569b2463acef3ab970fd76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:5a:b7:cf:b7:7b:7f:63:cc:b4:af:5e:ab:
d1:cb:44:ff:ff:49:fd:85:48:48:30:8d:c3:21:c2:
c6:4a:2f:e5:c3:99:a9:b4:d8:f6:99:da:c7:8b:05:
5f:03:c4:95:ff:62:0b:10:54:58:b7:b3:38:b0:e9:
e6:6e:2f:d6:77:66:e7:0a:30:06:b3:31:c6:70:72:
e6:10:20:23:7d:31:ec:33:ce:3e:b0:2d:e0:42:e6:
6a:b1:b2:b3:04:94:21:6d:26:c4:ff:db:62:b5:d0:
d8:ab:f0:52:14:7d:be:4c:5e:eb:3f:31:dd:77:c3:
b7:3c:23:8d:29:7f:a7:ed:6c:3f:e1:d3:13:48:f9:
9e:d6:02:90:a0:83:3e:c0:d2:8f:45:0f:a5:26:9c:
d1:d8:7a:85:13:cd:f1:a3:9f:cc:4a:09:2d:b0:ed:
16:7e:6a:ed:7d:76:37:90:0e:a0:57:24:ea:20:c6:
37:ed:46:d9:a8:25:45:ea:b1:a0:56:a0:9b:b1:e6:
29:f0:66:e0:a1:11:ba:fc:36:02:dd:fe:90:13:8e:
7a:bc:0f:12:5b:c6:7c:f0:6f:1c:c0:45:02:62:98:
f3:6c:9a:8a:e4:bc:4c:42:7a:3a:12:cb:13:53:43:
13:39:dc:29:4a:9a:42:1d:ca:5d:d0:5f:f7:85:ba:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:B1:BB:71:48:E9:EF:A5:69:B2:46:3A:CE:F3:AB:97:0F:D7:6B
X509v3 Authority Key Identifier:
keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/I66xu3FI6e-labJGOs7zq5cP12s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f940::/48
Signature Algorithm: sha256WithRSAEncryption
b7:52:bd:b3:55:8f:f4:be:31:3e:44:f0:84:ed:bf:70:bb:67:
29:ae:d5:23:86:4f:a0:ce:b4:ff:1f:b8:81:82:81:c4:b8:ac:
83:dd:b3:dc:bf:53:90:1e:97:dd:78:96:15:e8:97:ac:67:29:
f2:ec:76:bc:18:74:50:45:6c:0f:32:ef:89:d6:c9:00:c6:31:
84:17:68:d8:f7:20:b0:6f:d0:f8:4d:af:c2:d0:b5:9e:14:61:
46:03:e4:4a:d9:e7:29:08:4c:81:41:6a:fa:72:15:2d:78:39:
7f:4f:8f:3b:15:0a:00:21:57:5d:65:5d:99:ba:a4:47:a1:01:
71:b2:99:ca:bc:30:f0:55:fc:c3:2f:63:8f:e3:ba:5d:ac:3c:
30:86:56:1d:c3:30:4c:09:69:28:ba:e4:2c:ad:c4:f4:f0:86:
ca:64:48:af:10:35:79:1d:76:3f:46:ff:cb:30:1e:89:73:9d:
c4:45:52:c7:d3:14:fe:f9:1b:42:87:cc:12:0b:24:f4:7f:01:
63:73:61:65:15:10:90:d8:c1:ff:c4:23:99:53:66:4d:d4:6a:
d4:d9:01:85:5e:78:38:f0:aa:4f:35:6c:9a:85:18:25:1f:ca:
fa:c6:c6:ef:be:ef:9f:0c:b8:ed:1d:5b:f4:77:ea:c2:64:82:
69:f6:a8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org