Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Dw1yvNGtU78IZsx0b6pmAYyjSY8.roa
File: Dw1yvNGtU78IZsx0b6pmAYyjSY8.roa (raw, json)
Hash identifier: BerHU19SaXhMrhynaGU6TixhMncyXUxfxxdid4NgjBo=
Subject key identifier: 0F:0D:72:BC:D1:AD:53:BF:08:66:CC:74:6F:AA:66:01:8C:A3:49:8F
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018C43F58BECB5381C5D0BA98B6A5D438574
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Dw1yvNGtU78IZsx0b6pmAYyjSY8.roa
Signing time: Thu 07 Dec 2023 11:06:54 +0000
ROA not before: Thu 07 Dec 2023 11:06:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 124345
IP address blocks: 2a0d:2685:a000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:f5:8b:ec:b5:38:1c:5d:0b:a9:8b:6a:5d:43:85:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Dec 7 11:06:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f0d72bcd1ad53bf0866cc746faa66018ca3498f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:bc:a0:a5:b8:b4:84:c4:5e:f9:56:7b:02:
aa:c6:2a:c7:99:22:0f:31:fd:ba:97:44:37:79:50:
f3:84:b2:68:c5:4c:86:7a:d6:4a:ed:3b:c6:8f:b5:
fa:e8:90:f8:17:da:1d:e3:9b:3d:9d:08:98:4d:26:
85:ea:59:f5:72:80:2b:a7:b2:e7:52:66:53:01:ee:
11:75:62:3c:dd:f8:bf:7b:7f:3a:34:0b:00:68:05:
ea:9e:b2:86:22:bd:2e:4b:c7:a6:75:17:df:1c:93:
1b:3e:e5:62:4b:71:f8:35:ed:f5:48:bd:84:df:f1:
aa:49:ae:80:23:e9:b2:12:29:f9:cb:80:5d:13:3f:
89:a7:a0:84:39:f4:52:01:fd:15:3a:65:e5:af:ac:
34:bd:e7:ce:07:13:71:5c:c7:db:36:79:07:1c:5c:
28:68:81:45:c3:2b:c4:51:ae:af:ac:98:27:7b:d4:
de:4a:a6:4b:0a:af:5e:c7:6d:8b:70:c8:b1:e7:9e:
e5:50:a4:de:e4:00:6d:67:5b:06:14:c1:08:b4:7c:
06:72:ee:7c:a9:b3:e1:9b:86:37:8d:15:84:3b:96:
72:69:a3:79:0d:0a:af:45:32:21:31:56:27:b7:d4:
b2:b0:f5:70:69:f9:35:85:23:d8:ce:97:75:af:c7:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:72:BC:D1:AD:53:BF:08:66:CC:74:6F:AA:66:01:8C:A3:49:8F
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/Dw1yvNGtU78IZsx0b6pmAYyjSY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2685:a000::/36
Signature Algorithm: sha256WithRSAEncryption
87:e9:88:20:36:29:e1:d6:cf:38:0b:af:51:72:3c:bb:2d:d3:
0a:c4:ff:fd:28:1f:b8:09:04:c1:fd:d7:c5:5c:c8:4d:99:30:
4b:69:28:1a:36:18:07:50:70:5a:f9:5f:62:b8:b3:27:c8:81:
9b:e2:cd:8a:4a:47:3c:03:ac:2a:ac:5a:ad:c9:fe:c1:ee:b4:
8b:20:24:ae:ff:b8:b5:b1:28:43:09:ef:ac:4a:a4:d0:60:f5:
ea:6f:8a:a7:b7:15:a1:d7:88:43:c7:95:bb:7b:2b:c7:37:ac:
d6:27:51:59:3e:e2:70:9d:af:fb:b4:59:b0:19:d9:9f:c9:38:
9c:76:bf:94:02:bd:d4:49:79:00:e3:6b:a5:bf:c8:0b:e0:22:
c5:16:44:49:bb:c5:96:98:3e:b3:0d:a3:b6:68:b0:00:1e:86:
f1:4c:eb:e7:54:a0:16:fe:6d:23:00:bb:ba:eb:a7:80:51:9c:
ea:da:49:7f:5d:0a:ef:ba:99:70:33:5d:c0:c0:96:15:c0:64:
33:88:a5:a5:23:b5:ee:11:d4:ef:02:26:b4:dd:39:38:0e:eb:
cd:b5:7b:72:50:97:37:da:0e:8e:2b:70:2c:dd:6a:43:67:93:
29:f0:48:5a:45:ef:52:61:dd:d3:1a:60:da:5f:bd:8c:f5:a8:
4f:76:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org