Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/1XMJcDTNa3VG2wTp71js1P0tUY4.roa
File: 1XMJcDTNa3VG2wTp71js1P0tUY4.roa (raw, json)
Hash identifier: hisJveEg41WgK4ymDifCvsXEguirsXB9aHXFSXX//uA=
Subject key identifier: D5:73:09:70:34:CD:6B:75:46:DB:04:E9:EF:58:EC:D4:FD:2D:51:8E
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 0189DF541A8F8DA374D39D86D2494FD9F7F1
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/1XMJcDTNa3VG2wTp71js1P0tUY4.roa
Signing time: Thu 10 Aug 2023 12:02:58 +0000
ROA not before: Thu 10 Aug 2023 12:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47741
IP address blocks: 2a0f:7803:ff00::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:54:1a:8f:8d:a3:74:d3:9d:86:d2:49:4f:d9:f7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Aug 10 12:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d573097034cd6b7546db04e9ef58ecd4fd2d518e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:8b:a2:eb:a7:34:db:13:0f:83:b8:0c:36:
6b:8f:57:a6:8c:2e:6c:b4:09:b4:0c:74:ff:99:18:
08:55:28:06:d7:76:8f:c4:5a:b3:17:3e:eb:a0:f6:
af:e4:f4:5c:74:80:07:3c:b0:1e:98:7a:5e:7b:8a:
3c:b1:24:ca:0f:50:3f:28:d9:9a:c1:b6:74:dc:44:
09:ab:fb:d1:16:e8:47:09:e8:c1:82:56:fa:e6:2f:
b9:ef:e5:08:c3:2c:b8:ef:ba:7a:8e:7b:ac:2e:2d:
3c:1c:52:5d:5d:cf:4f:6b:23:dd:8d:ea:d3:7e:1d:
75:40:ff:f9:2f:4e:1f:b9:79:35:b1:93:7f:5b:42:
9f:0f:18:bd:ea:4e:59:00:c5:e1:dc:1f:46:11:2e:
6d:9d:61:07:c0:98:22:18:bc:7d:01:88:eb:cd:f4:
aa:18:1b:d3:11:fe:3e:8d:99:46:48:38:f2:0f:43:
d0:ff:25:97:3c:02:fe:c2:6a:c2:fb:7b:fc:33:f5:
da:11:e6:a1:6f:70:3c:5b:24:5e:1b:20:33:3f:61:
aa:8d:7d:ed:31:b2:00:6c:83:9e:34:ca:07:db:a3:
17:55:5a:a0:2b:24:f8:0a:64:6d:52:11:c0:30:57:
a4:cc:73:08:1f:e2:09:4c:48:7a:bf:16:78:ac:1b:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:73:09:70:34:CD:6B:75:46:DB:04:E9:EF:58:EC:D4:FD:2D:51:8E
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/1XMJcDTNa3VG2wTp71js1P0tUY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ff00::/44
Signature Algorithm: sha256WithRSAEncryption
74:c9:70:26:41:17:3f:8b:35:b4:7d:5b:5f:90:ae:77:7a:50:
56:40:cc:06:7f:b3:3d:e7:b8:9c:46:5f:43:f3:6d:b5:81:fe:
13:86:0b:40:26:6a:34:f0:cb:a5:1b:16:22:11:fd:8b:bc:03:
08:2c:3a:7c:31:c5:bf:9f:9e:3c:cf:09:e9:14:db:46:82:e9:
1a:08:62:92:34:be:d0:58:6b:36:14:1a:a0:c0:2a:15:ff:ca:
36:5f:3a:dc:0c:3b:f1:b3:bc:a2:00:74:22:17:fe:d8:ce:a0:
12:62:bb:c8:83:4d:43:85:15:cd:c4:bf:7f:35:23:6a:43:b0:
17:24:e5:b3:18:97:a8:5f:57:ce:d7:db:8d:b0:f6:e4:b0:60:
5a:36:d9:a0:bc:6c:d4:1b:fe:86:58:48:f6:8b:74:99:63:e9:
2c:2d:07:f3:fa:e6:43:a0:18:1a:b1:ed:c5:ac:1a:d5:37:c6:
57:62:ad:92:d6:4b:4d:98:e3:b3:36:64:53:37:6e:09:27:73:
fa:59:84:2e:e5:59:0b:6d:3f:e8:9b:ff:2e:53:32:0e:e2:71:
18:83:40:74:71:14:5e:d9:d6:b8:45:93:b6:4f:6e:36:b3:f9:
92:24:d7:de:f3:74:52:a4:e0:41:7c:fb:28:3d:c0:09:c2:b9:
18:46:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org