Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/w7T2PkITIR6BFL6uk9f6uQuinkM.roa
File: w7T2PkITIR6BFL6uk9f6uQuinkM.roa (raw, json)
Hash identifier: BuZo4G1RzoljokLMOXYtOhq1Md+xMbJcPWdLEw0wmDU=
Subject key identifier: C3:B4:F6:3E:42:13:21:1E:81:14:BE:AE:93:D7:FA:B9:0B:A2:9E:43
Certificate issuer: /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial: 01856C4142AC455D3C963A6CC463D64FE7EB
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/w7T2PkITIR6BFL6uk9f6uQuinkM.roa
Signing time: Sun 01 Jan 2023 07:34:54 +0000
ROA not before: Sun 01 Jan 2023 07:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206477
IP address blocks: 2001:678:ccc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:42:ac:45:5d:3c:96:3a:6c:c4:63:d6:4f:e7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Validity
Not Before: Jan 1 07:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3b4f63e4213211e8114beae93d7fab90ba29e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:93:58:e3:f5:26:d6:6e:db:88:01:ce:5c:
22:c9:7d:1e:75:4c:a3:d1:a0:b8:24:f1:88:80:ec:
28:00:78:73:f3:71:d4:c6:29:71:21:cf:e1:bc:88:
30:2a:38:1c:34:dc:f8:af:cf:36:5d:24:22:47:d0:
a4:b8:e8:80:f2:0e:d2:96:4f:1c:53:04:88:57:96:
7c:8b:38:fe:00:95:ad:1c:f8:1e:80:db:7d:63:3c:
0d:34:a6:bc:71:b3:ea:c5:2a:95:34:e3:a2:4e:9b:
23:85:c0:6b:b6:5a:a7:00:63:da:7c:5c:4a:df:e9:
e2:8e:3e:e8:5b:7a:b5:c6:a4:ec:84:e2:88:51:e7:
88:4c:28:bb:3a:ee:12:06:61:cb:7d:81:9e:48:65:
d9:b0:f9:e4:a3:c1:46:ad:c9:c6:0d:8a:98:9d:7f:
b1:ea:48:3a:9a:bf:b3:a4:f5:df:ba:83:79:27:90:
84:77:ac:47:f5:4f:de:99:b1:97:1c:8e:9d:9e:ce:
bb:5a:10:96:3b:ce:48:b4:a1:2e:d7:c4:6b:4e:df:
2e:b9:ca:69:39:9e:cf:76:0c:47:3a:6c:1b:92:74:
ac:2c:fd:29:95:a3:7c:ee:be:76:2e:11:6c:2c:59:
1f:d8:88:5a:ec:6c:1f:6d:68:d0:11:c3:8a:e0:c7:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B4:F6:3E:42:13:21:1E:81:14:BE:AE:93:D7:FA:B9:0B:A2:9E:43
X509v3 Authority Key Identifier:
keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/w7T2PkITIR6BFL6uk9f6uQuinkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ccc::/48
Signature Algorithm: sha256WithRSAEncryption
c8:36:29:65:fc:aa:53:70:24:b6:42:ca:c6:5e:d0:e5:6e:eb:
22:92:89:5d:ca:57:08:b5:41:46:90:b1:4f:81:f9:4b:f8:80:
5c:ab:18:e4:16:d7:b4:bd:b1:17:7e:b7:e7:f2:18:14:05:f9:
82:69:a6:3f:89:55:2b:29:1f:77:59:ec:73:ee:ba:a0:1d:9c:
89:d3:f0:4d:2c:74:1c:d9:ff:28:49:97:e2:44:09:14:e8:46:
3a:6c:bb:19:09:2c:3c:58:07:af:1b:bd:a1:dd:df:9a:3d:9e:
56:fa:7e:d3:9d:3c:5f:38:8f:e7:d1:3d:9e:9e:bd:c3:e2:25:
e8:7c:81:6c:6f:f3:d1:9a:10:7b:6e:69:2f:d7:33:93:9f:3a:
d1:f6:c6:ce:25:9e:79:a3:1f:db:b9:1d:85:9b:21:b8:30:0d:
6c:b0:e9:3d:88:33:4a:f5:62:17:7c:e4:3e:27:0a:04:f9:80:
a0:37:4e:d7:bf:26:43:ee:3d:59:b6:ad:30:bc:77:fe:33:90:
69:9f:2f:eb:04:9b:1e:e2:fc:a1:05:bd:0d:be:2d:d3:89:7a:
55:d0:d4:b0:75:23:f3:06:7e:f1:02:90:be:4e:f4:71:aa:1b:
97:20:c1:1e:e3:f6:91:4d:28:1d:c5:89:14:67:d1:9a:9d:78:
7e:c3:6b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:15 2024 by rpki-client on console-ams.rpki-client.org