Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/xSSfOrxXNkraH9XP60Wure3LOro.roa
File: xSSfOrxXNkraH9XP60Wure3LOro.roa (raw, json)
Hash identifier: TQPvNbeis3o3r2AjgqaOrbk2lIcdPYHSYRzYgMNw67g=
Subject key identifier: C5:24:9F:3A:BC:57:36:4A:DA:1F:D5:CF:EB:45:AE:AD:ED:CB:3A:BA
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C4167378A5EFD6078157CA3679643C4
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/xSSfOrxXNkraH9XP60Wure3LOro.roa
Signing time: Sun 01 Jan 2023 07:35:03 +0000
ROA not before: Sun 01 Jan 2023 07:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 146992
IP address blocks: 2a0c:e643::/33 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:67:37:8a:5e:fd:60:78:15:7c:a3:67:96:43:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5249f3abc57364ada1fd5cfeb45aeadedcb3aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:98:48:61:ab:7e:64:68:73:71:e8:d7:dc:
f5:e2:1d:13:f9:0a:3b:3c:22:da:27:a1:b0:e9:43:
e5:ed:29:2e:ae:1f:84:3f:11:97:33:18:e3:8f:71:
30:cc:93:e0:46:db:9b:bf:c4:da:9d:9b:ae:46:a5:
f3:32:e9:e0:ba:c3:75:a6:d7:2f:5b:af:0a:b7:c3:
7c:6e:92:2a:7b:fd:35:e0:8f:0d:a8:16:cc:8b:32:
23:68:85:78:1e:ec:7b:c5:7d:c6:c6:41:ac:f8:21:
2f:42:5b:fc:c1:d4:bd:31:01:ee:2a:70:e8:c4:29:
3f:9f:d6:ff:ac:31:0d:93:43:5e:73:48:4b:20:cc:
9f:11:51:f9:74:8c:84:02:e7:f6:d3:b5:a7:3b:5d:
f7:79:ab:01:83:c1:3e:84:4f:6b:56:bc:59:60:84:
1f:f4:46:f9:b5:6e:17:c0:dd:0d:c6:85:02:cd:4e:
c5:2f:65:bb:59:5e:86:ed:c8:a2:e2:4a:d3:d2:fd:
9f:97:c8:e3:62:8f:6f:b9:06:47:ef:1c:f4:60:ae:
11:9b:ca:fd:b2:b0:b9:d1:08:af:46:d5:b8:4e:d5:
d6:11:14:b2:ec:d3:e5:59:11:2e:e5:05:0c:be:61:
a9:1c:a7:06:a5:3a:ca:14:41:fb:5f:92:34:0c:39:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:24:9F:3A:BC:57:36:4A:DA:1F:D5:CF:EB:45:AE:AD:ED:CB:3A:BA
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/xSSfOrxXNkraH9XP60Wure3LOro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e643::/33
Signature Algorithm: sha256WithRSAEncryption
38:ca:f2:c9:b6:d7:b8:43:bf:4f:af:2e:44:c2:bc:c7:9f:ea:
63:6f:a1:43:36:bc:74:6e:9b:e9:47:c8:b4:69:f4:9d:07:1b:
e1:c3:b2:11:2c:a4:3b:eb:a1:31:0f:0e:e0:1b:b1:1f:b6:b1:
6a:24:fb:41:22:40:c9:36:57:e7:94:3c:01:28:6a:4d:ad:34:
c0:04:5b:23:5a:5a:7c:7c:df:73:e6:5f:6e:15:bd:99:1c:b0:
c2:5a:f6:27:2e:9f:1d:d6:55:cd:f4:de:ab:5e:b5:6f:09:37:
f4:24:74:4d:2e:ea:7c:33:96:5f:a4:16:cd:cc:d8:29:d5:e9:
f8:25:0b:0b:52:41:45:35:e0:26:e2:da:f1:a7:26:ab:c2:2f:
9d:bf:d4:13:0e:c9:ab:c0:ff:1e:33:d5:0d:11:7d:99:c7:0a:
5d:bc:43:5f:57:52:8f:c4:95:bb:05:bf:00:ee:ce:9d:c0:c6:
9f:dd:c0:a9:5c:9b:7f:2b:03:52:c2:58:71:20:cd:aa:ed:86:
bb:a8:ff:58:f0:51:fb:c7:4c:59:b9:c7:3a:a8:e6:66:6d:79:
1f:a1:86:78:99:6d:4a:ac:9f:c9:97:55:e8:d0:87:51:e7:c9:
1d:14:a4:da:39:69:87:bd:7e:eb:c1:af:ce:01:d2:d8:36:32:
61:88:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org