Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/k7BqWiWcOzJOdMtVHnVHgKu4pMo.roa
File: k7BqWiWcOzJOdMtVHnVHgKu4pMo.roa (raw, json)
Hash identifier: TjjnykPhQfLg2meOZhSLOlwyCQDM0xgz+4iaYIkVz6M=
Subject key identifier: 93:B0:6A:5A:25:9C:3B:32:4E:74:CB:55:1E:75:47:80:AB:B8:A4:CA
Certificate issuer: /CN=544905eaad4cea6c3f2d650c08fae3d445186752
Certificate serial: 01856CAF1263E1263E76A769242F83CAFA08
Authority key identifier: 54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/k7BqWiWcOzJOdMtVHnVHgKu4pMo.roa
Signing time: Sun 01 Jan 2023 09:34:50 +0000
ROA not before: Sun 01 Jan 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210941
IP address blocks: 2001:67c:810::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:12:63:e1:26:3e:76:a7:69:24:2f:83:ca:fa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544905eaad4cea6c3f2d650c08fae3d445186752
Validity
Not Before: Jan 1 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93b06a5a259c3b324e74cb551e754780abb8a4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:f9:4a:f0:ee:d4:f8:1e:8c:01:a9:6f:88:
8b:eb:c7:bf:64:b8:72:91:41:8a:03:c0:cc:fd:6f:
5e:ff:d0:e2:55:da:c1:7a:80:fb:18:d3:b7:0d:8b:
ac:c1:e7:af:0c:ee:83:d7:e2:10:b9:b0:8f:a2:b1:
12:8d:f7:3d:7c:ac:f6:4f:06:cf:c7:54:be:c0:e4:
58:b8:18:41:30:04:3c:c7:e2:f6:8e:0b:c3:92:b0:
7d:12:f2:43:29:d3:ac:34:f7:c4:f3:a3:f6:6c:65:
16:0f:63:a4:be:56:45:8c:93:75:f7:b1:2a:12:e4:
fd:0b:f0:f0:34:56:33:d7:fd:80:f3:94:cd:0d:4e:
28:e3:73:3f:bb:53:32:52:83:76:b6:ee:8e:f9:c8:
83:89:48:88:9a:69:fc:62:6d:f0:6e:fc:da:79:f0:
a5:fd:46:b1:ea:2a:ce:a5:5c:eb:8a:66:d9:19:82:
6b:7f:47:33:cb:75:de:e5:62:29:10:f7:85:e6:97:
c4:4e:43:12:78:86:11:43:af:ff:24:fb:78:54:95:
86:4d:7a:bd:ec:78:0a:4d:f6:a3:d6:5a:35:f8:ef:
06:84:18:c7:86:af:7a:1c:b2:f7:32:b8:55:ad:e8:
df:56:c4:28:33:60:54:95:15:3d:40:57:80:56:5b:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:6A:5A:25:9C:3B:32:4E:74:CB:55:1E:75:47:80:AB:B8:A4:CA
X509v3 Authority Key Identifier:
keyid:54:49:05:EA:AD:4C:EA:6C:3F:2D:65:0C:08:FA:E3:D4:45:18:67:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/k7BqWiWcOzJOdMtVHnVHgKu4pMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/99ccfa-c96f-4d12-b18f-5b3a41125bea/1/VEkF6q1M6mw_LWUMCPrj1EUYZ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:810::/48
Signature Algorithm: sha256WithRSAEncryption
0b:ed:14:17:1a:ed:9b:4a:a7:45:0e:76:22:85:31:34:3c:4b:
99:c6:20:5e:45:ca:eb:7a:18:4f:28:90:5d:d9:6a:fd:41:3b:
98:91:4a:01:0e:e3:ef:de:4a:3e:dd:5f:21:90:0e:26:68:91:
b4:2c:91:e9:ee:4e:6e:cb:ef:2d:59:1d:cf:64:f4:23:39:bb:
9c:0f:ed:a5:d0:2b:5c:0c:59:eb:f5:bc:34:7d:0b:03:da:ab:
94:e0:83:4b:64:62:5e:8f:a4:da:bd:27:b0:74:eb:68:72:57:
7f:1b:f7:f4:81:26:3b:a4:ca:30:bd:42:c7:ba:76:23:93:5a:
07:73:d7:74:6a:05:5e:b4:57:9b:71:d1:4e:ef:f4:6b:16:0f:
ca:1a:d2:0f:f4:3a:8e:d6:ac:6e:03:11:43:ff:7c:eb:78:63:
7e:9d:76:d4:80:63:64:52:28:5d:fd:63:ed:7a:58:78:96:0b:
56:a3:2c:12:ab:2e:8e:31:44:95:0c:7f:81:e0:b3:dd:0c:35:
40:7b:24:c5:04:ed:35:24:17:43:b9:ba:6e:12:f3:c0:9b:eb:
65:86:f6:5d:10:ce:e5:53:29:dd:fb:4e:49:25:ce:4c:10:d0:
ab:c1:d1:d1:b8:58:b9:5e:96:bb:db:4a:a0:a5:8b:73:18:c2:
e8:1b:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org