Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/yOdJAIOyQRHDHJFu9Kd_-rjyC_k.roa
File: yOdJAIOyQRHDHJFu9Kd_-rjyC_k.roa (raw, json)
Hash identifier: IqsPvMm1unhHFQqHEb529ClwcMF3y9IiNZC4WgPZedo=
Subject key identifier: C8:E7:49:00:83:B2:41:11:C3:1C:91:6E:F4:A7:7F:FA:B8:F2:0B:F9
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0187E29365D9546CBEF98895F2CA770BB038
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/yOdJAIOyQRHDHJFu9Kd_-rjyC_k.roa
Signing time: Wed 03 May 2023 17:05:23 +0000
ROA not before: Wed 03 May 2023 17:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50058
IP address blocks: 2a0d:2582::/32 maxlen: 32
2a0c:e644::/30 maxlen: 48
2a0d:2685::/32 maxlen: 32
2a0d:2584::/32 maxlen: 32
2a05:1084::/32 maxlen: 32
2a0c:e640::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:93:65:d9:54:6c:be:f9:88:95:f2:ca:77:0b:b0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: May 3 17:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8e7490083b24111c31c916ef4a77ffab8f20bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:28:47:68:2d:6d:f0:3a:f0:6f:bc:77:24:
a0:fc:94:93:49:62:4f:ec:20:a7:d6:65:25:93:63:
46:15:c3:db:ef:da:a1:7a:c1:93:54:d2:e4:fc:3b:
5c:18:26:0d:cc:25:db:58:93:c5:b5:e6:31:cb:0f:
4e:2d:6d:9b:0c:ed:fc:e6:d6:2c:00:6a:1d:45:44:
52:1a:ad:c8:5e:ef:e3:75:6f:7c:01:53:46:c2:d7:
99:e3:2c:4b:eb:48:a0:9c:c7:05:ef:0a:5d:ff:f7:
54:e4:b9:53:c0:dd:6c:d9:6e:77:da:ea:c6:32:96:
84:42:e7:f4:cb:39:a6:ee:28:c0:8e:c9:bc:cc:f4:
5a:59:e1:bf:95:83:a2:0c:4e:c9:3d:cf:08:2d:9a:
5a:c6:3f:96:69:f9:1a:1d:11:bb:15:44:22:f5:09:
7a:41:c4:d0:ac:b9:82:16:58:0f:f5:13:ea:fd:20:
ca:cf:11:bf:8c:1c:2c:01:58:a9:ea:e4:ff:c3:2b:
7d:89:87:73:d3:a4:e0:5d:21:e3:9f:47:46:2c:f7:
5e:d0:50:e2:5e:b5:b6:c6:8e:6b:0a:d1:06:25:db:
89:0c:93:6c:7d:3d:6f:cb:dc:0d:79:e2:80:fb:a4:
f6:4a:ec:b3:a6:fb:3c:c8:73:37:38:77:a6:d2:39:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:49:00:83:B2:41:11:C3:1C:91:6E:F4:A7:7F:FA:B8:F2:0B:F9
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/yOdJAIOyQRHDHJFu9Kd_-rjyC_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1084::/32
2a0c:e640::/32
2a0c:e644::/30
2a0d:2582::/32
2a0d:2584::/32
2a0d:2685::/32
Signature Algorithm: sha256WithRSAEncryption
b2:1e:52:68:23:5f:35:04:27:75:27:a0:77:8b:b8:bc:76:50:
16:59:4d:9b:38:b6:e4:32:a4:be:3c:48:9a:b2:ff:d5:40:0d:
96:73:22:dc:e0:e2:19:11:b1:6b:4a:cd:27:5b:34:6e:4d:50:
87:c6:c4:06:e4:07:83:30:d6:e7:f0:53:69:dd:9d:70:3f:0e:
65:32:07:37:18:cb:74:bb:4e:5d:dc:a0:71:25:90:7d:56:a8:
cc:72:ea:0b:6b:bb:f9:f6:85:38:85:9c:f7:71:4c:fd:f8:d4:
fd:5c:fb:95:0e:00:81:05:e0:4f:69:56:45:09:f4:81:0e:ce:
de:8e:48:a0:9f:a5:40:a9:b6:9a:13:22:6c:97:c0:00:e9:1e:
4e:0a:16:f1:38:91:d8:3e:d8:6e:c9:0b:65:f7:62:67:eb:7a:
91:1c:b1:b3:2e:2c:62:2c:bf:f9:17:53:6f:a0:83:8d:1e:37:
df:90:0a:a2:2a:a6:dc:32:4b:ce:a3:d9:2b:fe:46:48:05:f2:
a8:dd:db:ce:e4:a0:f7:4c:95:22:8c:f8:36:1f:c8:6b:30:4b:
92:66:2e:62:5b:02:3c:8e:31:be:12:6f:fb:0a:1a:db:17:a8:
21:84:3a:4e:2b:5d:4a:a3:d7:74:8c:cb:6f:f8:b2:93:54:41:
b7:e0:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:48 2023 by rpki-client on console-ams.rpki-client.org