Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/0mEaDSd0AjMXrLIO00PHoYgwaK0.roa
File: 0mEaDSd0AjMXrLIO00PHoYgwaK0.roa (raw, json)
Hash identifier: xo7p9nA0rUywyNdacOLklcZm9cxRA8UqivheZ5r4jB0=
Subject key identifier: D2:61:1A:0D:27:74:02:33:17:AC:B2:0E:D3:43:C7:A1:88:30:68:AD
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C4165D3CB3F5B6F3F6A4F59E8CC58FA
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/0mEaDSd0AjMXrLIO00PHoYgwaK0.roa
Signing time: Sun 01 Jan 2023 07:35:03 +0000
ROA not before: Sun 01 Jan 2023 07:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142549
IP address blocks: 2a0d:2686::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:65:d3:cb:3f:5b:6f:3f:6a:4f:59:e8:cc:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2611a0d2774023317acb20ed343c7a1883068ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:6f:9b:ff:08:5e:8b:91:4a:08:9a:80:01:
d1:30:7f:03:a0:61:98:78:9b:c7:f0:cf:da:ae:5c:
c9:da:b3:06:fc:9c:6f:a8:05:99:36:68:5e:41:14:
31:a2:04:26:ae:d6:e2:96:1a:71:7e:f2:18:82:be:
29:0b:de:3d:90:a5:25:5f:38:55:8a:04:63:51:f6:
2e:d5:b3:22:73:29:61:34:20:9f:d3:96:cf:c6:27:
02:2e:26:07:02:64:55:d7:e2:16:c2:46:93:b0:d1:
12:87:9b:d9:7c:32:b5:21:91:3d:c6:49:ff:c6:8c:
cf:8e:4f:6a:9c:4c:01:b1:d8:e4:fc:ed:eb:59:e5:
eb:eb:55:c4:8f:f8:24:a1:c7:02:cd:46:15:85:db:
3b:4d:52:20:b4:bb:a2:d1:c6:13:26:3d:fe:69:3c:
8c:ef:59:f2:16:03:b4:1c:19:cd:61:f1:d1:82:ad:
be:8a:74:39:a6:8b:20:dd:e6:d5:43:69:4e:91:f4:
70:81:74:bb:7d:1d:4e:5f:8f:23:36:c5:1a:91:18:
31:85:7b:1c:22:3d:8e:69:9b:04:c8:89:34:4d:95:
e6:47:99:c0:12:1f:65:94:5a:df:65:bc:f8:b1:3d:
3e:91:47:32:68:ca:53:58:06:c8:cc:2e:d4:11:c5:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:1A:0D:27:74:02:33:17:AC:B2:0E:D3:43:C7:A1:88:30:68:AD
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/0mEaDSd0AjMXrLIO00PHoYgwaK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2686::/32
Signature Algorithm: sha256WithRSAEncryption
a7:80:5f:1f:81:dd:a1:e8:35:e3:33:bf:93:91:19:d9:37:10:
d8:6c:99:e9:a8:40:a4:d6:35:70:a0:35:a9:ae:f5:22:6a:5b:
9a:3c:cf:42:14:7f:60:dd:e3:8f:e8:2f:16:00:2e:44:59:17:
60:2e:61:7e:a5:8e:a9:0b:2e:bf:49:fe:0d:ef:f7:c9:c2:79:
e4:72:ed:49:50:7c:03:c1:c5:a3:f8:38:06:44:d4:89:e5:d2:
fe:b8:dd:3f:93:f8:a7:ec:6b:20:ba:fe:8b:5d:0b:24:93:72:
92:58:74:9f:9f:d1:61:ae:c6:e3:7b:be:43:93:de:cc:6f:1c:
54:dc:91:03:50:14:cd:96:19:2e:13:e8:f7:ac:fa:fe:f9:db:
c2:2d:5c:51:75:2e:58:95:95:92:2f:94:82:c6:34:34:97:0e:
24:10:ca:88:5f:6b:7a:fa:73:e8:26:1b:b1:a8:33:ca:b8:cb:
1b:48:e0:13:aa:13:5b:52:44:43:f2:0a:7b:c2:90:7f:c0:60:
0a:af:a5:f6:7b:28:58:3c:77:e8:1a:02:1d:a3:57:4c:8a:99:
a7:52:a9:17:ed:7e:d7:5e:92:da:78:1a:86:cd:72:9a:c6:35:
d5:7b:37:f8:80:0f:89:da:02:d3:7f:05:95:cb:f7:ad:52:cb:
19:de:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:35 2024 by rpki-client on console-ams.rpki-client.org