Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/4Jy53HaCc6PC443BUyzAptsZecI.roa
File: 4Jy53HaCc6PC443BUyzAptsZecI.roa (raw, json)
Hash identifier: J1LgPgsxGpimxtRxXwj48lF+pYV2QT0Zn9Ia0Ja13Yk=
Subject key identifier: E0:9C:B9:DC:76:82:73:A3:C2:E3:8D:C1:53:2C:C0:A6:DB:19:79:C2
Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial: 018572D5A91F6856FAA9D91AD7728A89FB36
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/4Jy53HaCc6PC443BUyzAptsZecI.roa
Signing time: Mon 02 Jan 2023 14:14:43 +0000
ROA not before: Mon 02 Jan 2023 14:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51531
IP address blocks: 2001:67c:4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:a9:1f:68:56:fa:a9:d9:1a:d7:72:8a:89:fb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Validity
Not Before: Jan 2 14:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e09cb9dc768273a3c2e38dc1532cc0a6db1979c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:36:33:23:84:43:40:c2:b2:35:18:22:83:c7:
da:d0:3f:90:30:91:29:8f:a8:8b:ff:2b:05:84:2e:
b6:2c:4f:ef:e3:cf:60:a5:e6:bb:ef:a5:3e:4e:5f:
cb:42:6d:62:59:f5:c8:2a:4d:26:cb:a2:3e:b8:2e:
f3:47:1a:d8:8e:b8:3e:6a:a0:96:bf:12:a9:7b:22:
a2:d6:5c:f7:5f:94:bf:53:50:ba:51:e3:82:f7:52:
e2:c0:fe:b7:a6:6f:1e:92:cb:b2:b5:9d:83:43:19:
35:74:c6:ad:28:60:1b:69:c9:e3:3a:39:d4:24:2b:
4e:fd:8d:42:88:ef:ba:6a:cc:e2:6a:99:53:de:b7:
c6:f6:61:9a:b3:ea:fb:dd:c8:e1:ee:7f:85:27:62:
49:79:3d:54:5c:37:4b:3f:87:1d:f1:ea:32:d4:f1:
cd:91:98:16:2c:dd:d1:53:bb:bc:e4:a4:e8:0d:c0:
77:b6:5d:da:c8:4a:78:82:cb:5d:d0:b1:90:54:7b:
8e:42:31:68:e1:17:18:a7:7f:84:34:79:b5:58:ea:
d0:fe:ff:98:49:5d:b9:19:c5:48:91:12:e5:4e:27:
a4:92:1e:01:9d:38:db:19:73:83:3a:d7:8a:45:cf:
c3:78:8b:6b:2f:e7:1d:55:44:18:b2:64:a5:ab:08:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9C:B9:DC:76:82:73:A3:C2:E3:8D:C1:53:2C:C0:A6:DB:19:79:C2
X509v3 Authority Key Identifier:
keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/4Jy53HaCc6PC443BUyzAptsZecI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4::/48
Signature Algorithm: sha256WithRSAEncryption
36:b9:b1:ae:a2:2b:27:a0:8e:4a:7f:6e:5f:13:fc:d7:ab:7d:
2f:69:07:13:62:21:cc:0a:43:8e:83:30:3a:97:18:47:74:e1:
af:78:3a:44:7f:97:28:f9:17:60:fb:85:2b:da:56:f2:b4:dd:
57:4a:d2:f0:6d:eb:12:aa:c7:87:e5:c1:af:43:bf:2b:74:9b:
62:12:77:91:4e:a8:3e:47:4d:8b:9e:cf:7a:23:71:d5:e2:4f:
2e:67:d1:40:37:b2:12:c9:b1:60:57:fd:29:64:ac:d0:ad:ac:
1b:ad:98:90:b7:f7:38:55:28:dc:1c:2a:df:a8:f0:66:d7:7b:
24:91:d7:e6:98:cd:62:4c:12:78:fc:e8:e4:47:87:2c:a7:a6:
be:bc:da:46:64:08:b2:cc:9c:65:5d:b0:30:1d:8d:9c:7d:68:
af:de:e5:8a:cd:0e:6a:31:70:1b:84:a2:4e:67:49:8f:7a:70:
57:82:1d:77:d4:43:a5:4d:09:1f:29:28:0e:d1:3b:3d:fe:2f:
fb:d6:47:c2:37:a1:62:ec:95:02:9d:b3:c4:7d:37:82:d1:d4:
11:ab:37:b1:26:ae:36:ff:ce:ea:ef:1a:be:10:10:67:92:99:
b1:9a:14:e0:01:88:de:bc:59:ad:5e:a7:0e:f2:a2:44:cf:28:
31:af:3d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:54 2024 by rpki-client on console-ams.rpki-client.org