Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e58949-0302-41c3-ab49-305c7372579e/1/9Xw2bVINoVfrPsVR-IMC8I8weGM.roa
File: 9Xw2bVINoVfrPsVR-IMC8I8weGM.roa (raw, json)
Hash identifier: 4aa5C1CSM1OtRpHybY7hlym1niOcrG2BWGgJscEYA/0=
Subject key identifier: F5:7C:36:6D:52:0D:A1:57:EB:3E:C5:51:F8:83:02:F0:8F:30:78:63
Certificate issuer: /CN=566fb9b37c55df1aa8f0034a57d622f4d3732355
Certificate serial: 01856F42DDC9C98A01E18D8F2B6DCC3B3C11
Authority key identifier: 56:6F:B9:B3:7C:55:DF:1A:A8:F0:03:4A:57:D6:22:F4:D3:73:23:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e58949-0302-41c3-ab49-305c7372579e/1/9Xw2bVINoVfrPsVR-IMC8I8weGM.roa
Signing time: Sun 01 Jan 2023 21:35:31 +0000
ROA not before: Sun 01 Jan 2023 21:35:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208904
IP address blocks: 2001:67c:2754::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:dd:c9:c9:8a:01:e1:8d:8f:2b:6d:cc:3b:3c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566fb9b37c55df1aa8f0034a57d622f4d3732355
Validity
Not Before: Jan 1 21:35:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f57c366d520da157eb3ec551f88302f08f307863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:db:c2:51:b4:66:b5:8b:da:92:2b:b1:ca:ea:
fb:36:53:24:58:56:e0:4a:5c:31:40:8a:b9:56:b4:
54:8a:96:df:49:1a:a0:c2:5c:c5:2a:c0:51:75:dc:
c8:87:9b:4b:80:f0:66:a2:3d:2b:32:61:ae:d2:79:
59:d7:94:17:8c:0d:34:18:30:99:5d:89:8d:8b:4b:
65:92:d4:74:9c:5d:1d:4b:cb:4e:de:ea:5c:56:b5:
9e:bc:80:2f:b4:ed:fe:49:f9:69:9f:1d:b9:31:59:
df:99:82:5b:74:72:15:67:b1:59:e0:45:84:38:d6:
c7:bb:4f:f4:26:53:bc:67:2b:9a:f7:04:ff:ff:ec:
c0:fc:5c:ce:dc:27:58:95:9b:8e:c6:82:19:a5:48:
f3:89:d8:62:b8:4f:a1:f0:fc:e6:ee:62:91:14:a9:
c0:d8:18:01:c1:87:d9:84:cf:f3:74:55:5c:00:82:
36:4e:b4:bb:56:45:3d:3b:7d:82:6b:c2:f8:f4:df:
4f:b5:a0:ed:68:22:03:1f:51:4a:bd:b7:f8:0a:c5:
ab:72:d7:03:ae:5e:73:cc:b8:a5:91:fd:ce:c8:6a:
6f:de:23:eb:a1:b9:91:58:2e:89:ae:f1:65:f6:e0:
08:59:a6:92:49:b2:e1:9f:de:56:08:8d:d5:9b:a5:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:36:6D:52:0D:A1:57:EB:3E:C5:51:F8:83:02:F0:8F:30:78:63
X509v3 Authority Key Identifier:
keyid:56:6F:B9:B3:7C:55:DF:1A:A8:F0:03:4A:57:D6:22:F4:D3:73:23:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e58949-0302-41c3-ab49-305c7372579e/1/9Xw2bVINoVfrPsVR-IMC8I8weGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e58949-0302-41c3-ab49-305c7372579e/1/Vm-5s3xV3xqo8ANKV9Yi9NNzI1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2754::/48
Signature Algorithm: sha256WithRSAEncryption
62:4f:9a:23:8e:bc:5e:04:3f:2b:21:d4:76:5b:00:8d:e0:59:
1c:c7:6f:6f:4d:dd:12:ba:93:ec:94:4d:15:85:de:70:c0:42:
e4:59:f9:14:fb:40:ea:21:d1:c3:c4:6e:05:67:34:66:2c:4f:
5b:9a:6e:85:bf:5c:91:51:4d:ef:cc:e5:cb:06:48:8d:11:79:
81:5d:3a:54:20:0e:db:62:8a:6c:35:5c:64:d0:be:f0:ce:7d:
f4:fe:d4:bb:5e:6d:44:49:9e:61:a0:e0:f5:cc:0b:8d:f2:8f:
5e:35:1c:df:c8:af:58:e2:a8:68:d9:38:81:3a:4e:31:0c:f4:
44:04:06:b0:61:9e:e5:69:38:df:e2:d2:dd:12:0c:b1:f9:fb:
1b:34:46:01:e9:e7:37:db:6d:07:b9:a9:fb:fc:72:2f:b0:cc:
8c:d9:0f:b4:d3:11:00:89:e5:19:87:5d:2d:70:5d:bd:0c:34:
a1:9c:e3:64:69:9a:f9:24:97:68:f0:3e:43:01:a3:b9:ee:d8:
4c:d9:c2:4b:6a:10:df:26:a0:23:68:f0:6b:b9:e8:5e:7b:a1:
eb:cf:3b:36:e7:4b:64:36:d6:c6:91:57:bc:13:de:94:99:bc:
19:d9:1b:62:2e:e4:90:09:31:fa:c8:2b:56:bd:ec:47:e6:18:
39:0b:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:18 2024 by rpki-client on console-fra.rpki-client.org