Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/iw5I9H-hawSw15L7qLmLws7UmfY.roa
File: iw5I9H-hawSw15L7qLmLws7UmfY.roa (raw, json)
Hash identifier: yQnfyB34do86Q6MtyWpYLrACHuGKfQnCLrZWSfPK4Zc=
Subject key identifier: 8B:0E:48:F4:7F:A1:6B:04:B0:D7:92:FB:A8:B9:8B:C2:CE:D4:99:F6
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 018572CCD35CDC7BA7D4E74AE70DF58B012E
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/iw5I9H-hawSw15L7qLmLws7UmfY.roa
Signing time: Mon 02 Jan 2023 14:05:04 +0000
ROA not before: Mon 02 Jan 2023 14:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15542
IP address blocks: 2001:67c:2c24::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:d3:5c:dc:7b:a7:d4:e7:4a:e7:0d:f5:8b:01:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Jan 2 14:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b0e48f47fa16b04b0d792fba8b98bc2ced499f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:c6:6f:5c:b5:f1:8b:53:b5:b6:71:53:b7:
0c:cf:52:d0:ff:f7:09:4d:5f:61:af:19:3b:80:a9:
e1:51:94:23:5e:8b:ae:fd:89:50:d8:14:83:7d:17:
16:d4:09:e3:2d:1c:7c:b5:9f:24:d8:9e:1e:7b:41:
11:ec:ac:fc:9c:a4:b7:8a:f7:04:ec:7e:47:8e:0d:
bf:83:52:a8:0c:21:de:1e:76:02:65:ce:9c:74:fd:
7c:49:e6:b1:e3:c2:78:34:ac:52:1c:e8:c9:0c:4d:
cf:91:1b:fb:f7:30:a8:8d:7b:23:c4:7d:73:97:ce:
ab:ab:aa:4b:c5:23:57:a7:8f:82:37:cf:13:0e:40:
44:1a:b1:ca:2e:dd:97:d0:95:31:a4:92:93:f8:7d:
7d:3f:52:c0:2d:48:09:58:8b:f2:f8:28:8c:51:ff:
e7:43:90:c5:fd:29:8a:d0:cc:20:ce:1b:b1:55:20:
53:d5:14:aa:a4:9a:67:56:c8:bb:db:6d:3f:b2:8a:
aa:05:ac:bd:61:54:80:78:06:20:f7:16:8f:37:5a:
30:41:40:47:d3:eb:d6:e9:12:37:49:6f:a0:41:10:
55:e6:af:f6:66:e2:c1:e7:b7:cc:e8:22:0a:71:74:
82:3d:e2:37:fd:a4:82:f1:3e:ff:1d:0d:59:af:14:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:48:F4:7F:A1:6B:04:B0:D7:92:FB:A8:B9:8B:C2:CE:D4:99:F6
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/iw5I9H-hawSw15L7qLmLws7UmfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c24::/48
Signature Algorithm: sha256WithRSAEncryption
8a:78:eb:8f:9d:a6:2d:5f:ab:fd:bb:63:15:16:2b:5e:73:c9:
23:eb:0f:38:a3:6f:ca:7e:c2:c9:f1:4b:d3:2b:07:b0:3e:0c:
ab:80:89:94:38:b2:39:2f:fc:42:26:7c:82:61:ff:7b:1b:de:
cb:7a:04:f6:c2:ca:6f:9e:e1:e7:49:9f:04:b7:47:b1:7d:2f:
6c:71:90:5d:7c:cd:4f:d2:f0:56:6b:7e:39:78:5e:92:94:fd:
03:75:af:c9:44:24:9a:df:bc:7f:96:be:61:dd:2c:32:c1:26:
a7:d3:31:71:b9:b1:ac:0d:b8:80:46:61:a9:d8:28:74:d8:0b:
80:4b:a1:bd:a8:38:58:44:9b:c1:09:08:97:f6:2a:2e:d5:f1:
fe:22:3b:83:32:29:61:96:7b:56:6b:79:b6:0a:e6:30:04:9d:
b2:78:19:72:ba:d5:65:db:51:f8:af:f9:6f:d1:8e:5e:84:c8:
12:63:91:40:51:cc:9e:33:6b:c3:64:6e:9b:60:4a:93:ce:34:
42:9c:36:42:e5:a3:0f:09:bb:90:ba:5b:b8:64:1c:db:70:f1:
08:46:5d:85:0d:d0:f1:08:6b:ac:c5:05:62:c1:4b:0b:84:fc:
45:96:34:8d:1d:95:2a:58:1b:ff:f8:a8:4c:24:49:52:a6:3b:
7d:57:a3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:50 2024 by rpki-client on console-fra.rpki-client.org