Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/X6v_e-E5S_nqy3nMJyjccVKRDZY.roa
File: X6v_e-E5S_nqy3nMJyjccVKRDZY.roa (raw, json)
Hash identifier: RKqrSaVTmCYMr/VFDCEMT56KrK3itrokq1aRTYG09ZQ=
Subject key identifier: 5F:AB:FF:7B:E1:39:4B:F9:EA:CB:79:CC:27:28:DC:71:52:91:0D:96
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018A6471B4AB94636976F61F46D4B7106300
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/X6v_e-E5S_nqy3nMJyjccVKRDZY.roa
Signing time: Tue 05 Sep 2023 08:24:47 +0000
ROA not before: Tue 05 Sep 2023 08:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216354
IP address blocks: 2a0f:7803:fec0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:71:b4:ab:94:63:69:76:f6:1f:46:d4:b7:10:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Sep 5 08:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fabff7be1394bf9eacb79cc2728dc7152910d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:24:f3:b9:cd:92:fa:db:66:91:8a:05:39:e9:
03:df:69:8b:d5:97:ac:ff:42:2c:e5:98:cf:30:c4:
c7:f4:60:b0:ac:7c:52:3b:55:ee:19:4c:28:4f:a4:
28:b5:fd:1b:3d:02:3f:11:9a:cd:d6:0b:b8:b8:6d:
ed:d1:e2:76:7a:6e:63:6e:17:15:43:f2:c7:59:94:
e5:d9:59:80:69:57:c9:8c:ca:1a:34:96:71:fc:85:
05:2a:89:e5:fa:21:e4:c5:c6:ca:51:56:4a:aa:20:
4a:58:f4:31:6e:27:9f:32:27:44:d9:22:62:d4:de:
42:0b:58:43:a4:d5:e6:09:0d:1e:92:8c:f9:c5:72:
b4:17:dd:f3:ca:ca:24:7a:5f:63:f5:b7:1b:30:76:
e4:52:f5:76:85:ef:13:87:15:ae:1a:08:41:44:9c:
da:35:2c:6b:74:2b:5e:4f:11:41:c7:d8:a7:17:23:
97:1d:2a:5c:30:6b:2f:cd:71:9f:4b:c5:0e:5f:bb:
12:90:e2:42:22:c8:19:15:95:a9:f6:ea:08:ba:bf:
ba:fb:19:0d:dc:6e:3f:6d:27:82:5c:06:5b:cf:a1:
33:ff:9b:72:9c:2d:78:2c:34:98:74:18:e6:b9:59:
c7:9f:84:56:54:86:42:d0:84:0f:7f:1d:b2:02:61:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AB:FF:7B:E1:39:4B:F9:EA:CB:79:CC:27:28:DC:71:52:91:0D:96
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/X6v_e-E5S_nqy3nMJyjccVKRDZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fec0::/44
Signature Algorithm: sha256WithRSAEncryption
8e:6d:50:54:4d:3c:d2:63:54:85:1d:87:07:98:3f:57:a8:2a:
48:69:11:6c:a3:1b:64:4b:c0:78:cf:af:73:90:25:a5:91:cc:
f7:d8:4a:02:f1:10:35:04:39:95:65:c1:2b:0a:5e:ca:b5:71:
13:40:7e:d1:50:28:50:b3:f1:f5:db:4c:cb:c4:87:46:21:09:
a8:96:e7:c1:d3:fa:82:4d:52:a9:c8:fc:a8:f1:72:76:3c:50:
52:ca:b0:89:21:ce:1d:bf:c3:c9:ac:cf:ff:4e:62:02:d6:2e:
75:1d:82:57:43:99:75:0c:fe:b7:44:d1:8d:06:1f:04:22:d7:
60:78:15:ba:9d:8d:cb:20:ed:fb:16:6c:1a:63:a0:c9:eb:df:
cf:77:9d:1a:ea:bc:6d:82:5e:4d:b5:84:ec:dc:90:48:3f:4c:
ae:38:e1:2a:80:f7:88:0e:0a:36:68:58:68:62:63:5d:da:98:
2c:33:ee:07:4d:84:dc:d4:16:55:c7:68:c0:ea:7d:c3:54:57:
64:ff:db:b8:43:8f:aa:c9:9a:05:37:ee:22:7f:73:71:05:79:
e8:b9:6a:bb:93:7e:f7:63:3b:3a:80:bd:4b:24:19:2e:76:2e:
9a:ad:ef:a3:08:cf:28:78:a0:83:de:62:24:1c:28:ec:aa:20:
53:fd:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:32 2024 by rpki-client on console-ams.rpki-client.org