Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/g1aIbIzyiDk7xuhgBIlt-A2sgZw.roa
File: g1aIbIzyiDk7xuhgBIlt-A2sgZw.roa (raw, json)
Hash identifier: +K9WRiqGyIYBQyx8PwKOE/rc6MdssdzYPxM4+0hm5po=
Subject key identifier: 83:56:88:6C:8C:F2:88:39:3B:C6:E8:60:04:89:6D:F8:0D:AC:81:9C
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018B9983D73B80BA3D2A10A9000208EFB999
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/g1aIbIzyiDk7xuhgBIlt-A2sgZw.roa
Signing time: Sat 04 Nov 2023 08:47:16 +0000
ROA not before: Sat 04 Nov 2023 08:47:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216044
IP address blocks: 2a0f:7803:fea0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:99:83:d7:3b:80:ba:3d:2a:10:a9:00:02:08:ef:b9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Nov 4 08:47:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8356886c8cf288393bc6e86004896df80dac819c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fe:1a:cf:d5:3c:f8:91:e8:a7:3e:1a:3e:81:
c0:41:aa:ed:8c:17:3f:24:b1:43:12:40:ce:fe:9f:
15:a3:47:82:6d:af:37:ca:b7:54:e9:9f:f1:0d:9e:
4b:57:dd:7f:03:00:d4:1d:c9:aa:be:2d:5c:03:29:
26:c1:b0:f8:6b:af:3a:31:db:ba:76:bd:61:1e:2b:
49:7f:70:79:0f:ef:0e:5b:cf:43:50:e6:d4:c8:5d:
ac:f8:2d:3d:0c:1f:6f:02:26:3e:4e:62:2b:ea:e6:
b1:51:d7:bf:be:01:20:34:5a:c6:e8:67:98:29:80:
a9:88:8e:dc:93:db:c0:0d:43:b4:d0:0f:b4:11:e6:
56:44:b4:30:d4:c5:78:14:fb:27:e8:80:cc:74:83:
eb:6c:3b:ff:98:bf:a0:d4:9d:16:28:a0:86:cb:30:
ad:59:7e:0f:40:99:72:a9:da:a7:9b:6f:dd:a3:84:
29:9c:a4:8d:4b:3b:90:d6:a6:7b:c2:8e:7d:57:0b:
14:c4:f2:60:2f:bc:5d:61:69:f9:93:80:4e:26:08:
ac:f2:7a:65:86:b3:b1:da:0c:41:ed:4e:68:f7:64:
ec:34:b4:05:5d:56:ed:b8:ec:bd:71:e5:84:c9:5a:
32:8b:4f:6d:1f:83:d8:3d:db:49:f0:8f:18:5b:42:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:56:88:6C:8C:F2:88:39:3B:C6:E8:60:04:89:6D:F8:0D:AC:81:9C
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/g1aIbIzyiDk7xuhgBIlt-A2sgZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fea0::/44
Signature Algorithm: sha256WithRSAEncryption
6f:d6:70:d9:76:c1:9b:58:6a:aa:a0:e8:e5:28:de:de:3d:5a:
8a:04:4d:7f:0f:9e:50:2a:a8:4c:f3:f6:6e:bd:dc:18:f1:7a:
36:60:b5:44:30:86:85:d1:3f:45:16:02:fe:a0:aa:78:c3:5f:
65:27:cb:a7:01:0b:b0:ec:9c:ca:34:2e:0f:6d:83:fe:81:19:
dc:97:ac:29:17:34:96:81:d5:2a:da:b7:69:fc:af:0e:d3:cb:
8c:da:39:2f:25:44:9d:98:68:5d:a7:76:d4:94:7d:64:32:a8:
58:79:73:70:34:ef:28:8a:c6:22:57:b7:e1:72:d4:e4:bc:28:
39:dd:48:9c:af:db:5c:f8:28:8c:8a:73:02:eb:f9:1b:27:9a:
f2:f6:91:57:76:c3:10:b0:85:05:ea:6d:64:7a:ef:a4:35:53:
34:e8:c8:05:f6:24:42:30:6e:23:25:66:80:98:c1:a2:d5:f1:
be:4d:f6:07:bc:b9:56:46:4f:cc:54:bc:8f:d0:88:52:66:4a:
26:6e:1b:b5:01:a3:60:5d:04:39:9a:fd:32:9a:dc:a0:8e:95:
98:f6:f1:d3:fa:fc:2f:8e:97:a8:e6:cd:3c:dc:70:13:2c:93:
5b:e8:5d:d8:38:60:98:da:1c:66:f9:a0:3a:e1:58:3d:f2:43:
fc:12:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org