Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/g5EBlLKlBERhv69ffSadilqdjPo.roa
File: g5EBlLKlBERhv69ffSadilqdjPo.roa (raw, json)
Hash identifier: 9kBS2JiVJ3DRMXTSCU1sEm6fl78NDxaNg2tSd6A9Q04=
Subject key identifier: 83:91:01:94:B2:A5:04:44:61:BF:AF:5F:7D:26:9D:8A:5A:9D:8C:FA
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C416FE62FD16DAE8B710C1FC696EE9D
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/g5EBlLKlBERhv69ffSadilqdjPo.roa
Signing time: Sun 01 Jan 2023 07:35:05 +0000
ROA not before: Sun 01 Jan 2023 07:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209261
IP address blocks: 2a0d:2581::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:6f:e6:2f:d1:6d:ae:8b:71:0c:1f:c6:96:ee:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83910194b2a5044461bfaf5f7d269d8a5a9d8cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:50:1a:22:a4:a8:03:a5:ac:b8:54:bd:b7:
23:a5:53:03:2d:e7:13:b4:de:24:72:41:c0:3f:cb:
1e:44:d8:0a:cc:20:01:a1:ef:4b:13:68:10:7b:b7:
72:1d:e7:c6:25:4f:3e:12:4f:35:41:3e:29:92:02:
dc:55:76:8e:ba:61:4b:dc:71:4f:88:14:39:0a:58:
85:f0:ea:68:83:6c:06:11:bf:04:39:7c:39:3c:15:
5f:d0:7e:ab:ea:e1:be:08:2b:11:d5:83:7e:b6:50:
c2:c9:80:98:a7:18:dd:7c:d9:11:a6:9e:b7:c1:2a:
1f:1d:61:ed:24:ff:6c:39:56:79:33:9c:48:b8:83:
77:39:f6:8a:0d:c3:1c:bd:8e:d2:2c:37:e2:51:a4:
93:23:36:c4:19:37:7e:19:17:e9:de:48:54:45:b1:
9b:43:6c:e2:c4:f6:34:21:65:84:60:0c:0a:dd:25:
5f:3d:1f:fa:13:9f:47:a2:84:2a:df:2c:3c:15:7e:
44:59:74:fa:ed:56:f5:11:38:77:83:69:32:f3:e9:
a2:49:ab:75:5e:51:0a:0c:19:83:33:f9:ca:de:3e:
5a:85:88:93:68:4a:2e:c1:2c:86:b7:19:0d:14:b7:
91:5a:45:59:5d:3f:ac:94:7e:ec:3e:f0:14:5d:4f:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:91:01:94:B2:A5:04:44:61:BF:AF:5F:7D:26:9D:8A:5A:9D:8C:FA
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/g5EBlLKlBERhv69ffSadilqdjPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2581::/32
Signature Algorithm: sha256WithRSAEncryption
37:2d:26:88:63:fa:13:05:8a:dd:96:8a:b8:b3:4b:2b:eb:b1:
25:4b:26:0d:aa:46:13:b3:64:4d:c2:6b:21:97:1f:f8:5e:40:
80:fd:bf:3b:e1:eb:61:05:1d:6c:c4:dc:cf:3a:8c:13:2a:ef:
85:cf:e1:84:70:5f:67:28:b4:a3:a1:53:ea:53:43:b3:d9:b8:
48:73:f7:85:ae:16:d6:61:81:ef:85:57:f2:e7:2c:4c:c3:9f:
3f:c9:d1:a4:40:f6:80:ae:17:26:11:f0:21:a2:07:a9:f1:43:
e0:85:33:e8:81:d2:e3:e3:59:56:91:1b:13:6f:2e:25:c9:c9:
8c:1f:d0:3a:a0:02:58:45:87:b6:31:6c:1e:c5:57:f2:2e:6f:
71:c3:2c:63:33:ad:ae:7d:64:dc:5a:28:5a:8c:1e:42:88:30:
04:22:5d:8a:c8:90:d5:6c:ca:68:7d:85:7b:5b:38:dd:3e:75:
f2:e6:d5:66:a9:b7:77:4f:6b:31:08:24:0e:2e:11:bb:78:29:
af:0e:c7:f1:0e:b8:80:e4:14:b6:b2:38:fd:a6:a1:fb:e2:95:
ff:8a:e5:97:ee:04:bd:a5:c8:38:a9:d2:8b:fc:e5:23:11:59:
c6:ba:fc:fb:3f:2b:b4:89:ec:7b:b8:a8:42:e0:47:63:7c:07:
8a:13:d9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:35 2024 by rpki-client on console-ams.rpki-client.org