Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/PQk0V2awr5H3yee9ofh8vz4GhwE.roa
File: PQk0V2awr5H3yee9ofh8vz4GhwE.roa (raw, json)
Hash identifier: SRVgWyX1Whc0BdJb5UfkQWr1b1Zcz8nwYKM7NO5C+Kk=
Subject key identifier: 3D:09:34:57:66:B0:AF:91:F7:C9:E7:BD:A1:F8:7C:BF:3E:06:87:01
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 0185DD98D0A77F8502DD8A203C17A6193106
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/PQk0V2awr5H3yee9ofh8vz4GhwE.roa
Signing time: Mon 23 Jan 2023 07:47:37 +0000
ROA not before: Mon 23 Jan 2023 07:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201073
IP address blocks: 2a05:bb80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 07 Feb 2023 18:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:98:d0:a7:7f:85:02:dd:8a:20:3c:17:a6:19:31:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Jan 23 07:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d09345766b0af91f7c9e7bda1f87cbf3e068701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:26:03:17:0a:b0:d4:4b:f5:55:53:c1:b9:
85:6e:13:4a:8b:cc:b1:2b:c9:05:57:6d:3f:fa:20:
67:4f:42:d3:bc:ad:6e:86:4b:3c:e9:94:e7:d1:db:
47:a6:fe:03:a7:7e:24:0c:50:55:75:76:5a:3e:0d:
d5:d6:39:32:15:15:22:76:28:16:d0:2c:8c:0d:2c:
e1:32:73:f3:94:b3:88:47:c1:3d:89:88:6d:d1:71:
81:55:aa:77:c6:7b:6a:c5:60:44:77:c5:5d:fd:42:
3a:de:54:4b:ab:f3:ec:21:f1:14:77:78:34:ca:05:
fd:0b:2a:2c:47:8a:25:99:cb:13:7d:58:eb:a6:e1:
b0:61:0e:bd:78:ef:a6:84:51:92:41:a6:fb:1f:3a:
83:e5:52:8e:bd:68:81:df:ef:13:65:cd:8b:eb:99:
8e:c8:2a:77:0b:99:1a:83:8a:ae:ae:0e:8f:8b:b0:
94:75:dd:90:78:f6:cb:dc:85:3b:73:01:d5:ef:46:
8b:e6:ef:94:a1:fd:9e:12:0c:af:19:a9:a5:da:8a:
29:5c:8c:bd:7e:9a:1e:3c:e9:38:f5:fd:c1:2f:9a:
b2:b6:2d:d5:3e:8c:c6:d7:83:0a:5a:e6:b5:6b:97:
07:62:2c:c9:68:1c:4e:22:53:9f:aa:ee:e9:b7:8f:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:09:34:57:66:B0:AF:91:F7:C9:E7:BD:A1:F8:7C:BF:3E:06:87:01
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/PQk0V2awr5H3yee9ofh8vz4GhwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
68:a4:c9:97:18:47:5e:53:c2:13:9f:00:d3:1a:92:9b:02:c7:
f6:49:84:7e:27:f7:87:f2:42:be:39:06:c8:d8:19:b7:32:0a:
d8:ad:34:ae:be:0c:a4:c6:2d:ff:63:8a:68:c4:59:0f:cd:ee:
15:5c:ce:d0:ef:78:ab:e8:45:9b:e4:36:52:19:88:a1:65:02:
29:9d:b6:5e:42:4b:08:1c:c5:b8:06:8a:26:b8:e7:fd:a4:da:
31:2f:95:65:00:8d:63:8b:d6:59:63:c7:5b:12:3d:8a:aa:8a:
3f:89:6f:94:f5:d5:ae:9f:af:62:d3:7a:2b:5f:8e:f4:fa:00:
aa:44:ee:0c:87:57:e6:81:d7:2f:6a:67:01:9b:7a:33:81:2d:
97:f6:81:31:72:3d:f6:6f:bf:97:9b:e1:d5:4e:96:d9:e2:64:
ad:a2:85:ae:be:30:86:0b:42:a7:b4:fc:af:a6:18:bb:81:93:
84:a1:66:8b:29:48:83:78:e5:92:47:a7:30:40:9e:59:cb:b2:
61:3f:90:e8:2f:7f:b7:f3:69:44:71:05:3d:63:fc:b0:ae:18:
1a:11:0d:a6:0f:04:8c:96:a0:1b:05:8d:22:7e:26:95:c3:42:
4e:49:2c:e5:14:eb:b0:3e:95:3f:b5:d4:49:f3:ac:5e:da:73:
cb:0b:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:10 2024 by rpki-client on console-ams.rpki-client.org