Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/auSNsC14X01BQ2LseaJEtVs7x6A.roa
File: auSNsC14X01BQ2LseaJEtVs7x6A.roa (raw, json)
Hash identifier: yqJCg61opfRYxEEzXBPGyZQoPBryjiTRV2sMFUWXvfs=
Subject key identifier: 6A:E4:8D:B0:2D:78:5F:4D:41:43:62:EC:79:A2:44:B5:5B:3B:C7:A0
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C318BD1BEC60571407B0C424F4F5A8
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/auSNsC14X01BQ2LseaJEtVs7x6A.roa
Signing time: Mon 02 Jan 2023 09:14:49 +0000
ROA not before: Mon 02 Jan 2023 09:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136620
IP address blocks: 2a06:e881:7700::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:18:bd:1b:ec:60:57:14:07:b0:c4:24:f4:f5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ae48db02d785f4d414362ec79a244b55b3bc7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:b2:5c:37:ac:59:c2:cb:3d:ba:48:68:66:
43:ef:d3:8c:66:60:01:a8:82:18:20:e0:82:12:00:
f6:c4:58:7d:8b:d3:05:c1:2b:1a:d2:66:c3:01:15:
bf:a1:df:5d:96:00:e5:f7:1c:d9:40:18:9f:06:38:
72:70:a5:fe:b1:30:d5:db:be:bb:77:59:fa:7b:c1:
9f:7a:3c:88:95:85:80:2c:27:9b:b5:4e:97:82:19:
3a:e0:19:41:20:dd:62:58:f6:79:fe:ea:57:c0:52:
f5:03:00:d3:eb:14:2e:83:00:fb:6d:06:c9:9f:4f:
3d:32:51:5f:f5:e7:90:7f:fa:22:65:c7:9e:46:dd:
6e:6e:98:24:e7:8d:a5:6b:65:8d:d3:38:00:a0:72:
74:ab:5f:bd:bc:99:a5:5b:4c:ea:b6:07:da:97:14:
e0:af:49:97:63:9b:24:e1:07:a6:47:cb:1d:ee:b0:
e6:89:41:7f:77:21:59:5a:a0:8c:89:e3:30:ae:b1:
c1:d7:da:47:a3:12:11:95:35:ea:c1:ed:10:89:a8:
bb:31:4b:43:51:3d:a2:f7:ae:8f:b3:aa:57:89:38:
70:97:6d:35:af:b1:91:6c:e0:67:bf:9d:91:58:ac:
18:34:6e:7d:b8:cd:f8:7a:54:e5:60:32:a7:80:a2:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:8D:B0:2D:78:5F:4D:41:43:62:EC:79:A2:44:B5:5B:3B:C7:A0
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/auSNsC14X01BQ2LseaJEtVs7x6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7700::/40
Signature Algorithm: sha256WithRSAEncryption
99:b9:fb:12:3d:6a:32:2d:17:23:0f:96:61:c3:07:80:87:39:
68:da:9c:15:22:04:cb:d1:68:7f:0e:e9:1a:27:58:c6:42:d9:
9f:63:c6:cf:64:bf:9a:df:72:35:dd:14:73:e1:1e:00:64:6d:
f2:1e:6b:94:ea:a3:b6:9b:03:7f:28:48:56:67:37:b0:31:8f:
dc:c6:9b:55:fa:c9:bc:d1:a7:b1:b0:ed:04:2c:6f:a2:b0:0f:
cb:30:77:04:57:03:98:2d:ac:12:17:1e:36:a1:9e:93:41:8c:
87:bf:29:84:35:29:2f:d7:a6:dc:63:f4:1e:68:35:c5:77:c0:
63:88:3a:4f:8e:fa:5e:99:ea:59:8e:1f:4a:dc:16:b9:d6:1c:
d6:9d:b9:6e:88:67:71:5a:5c:a0:9e:77:6f:11:c6:68:d6:dd:
f7:2d:6f:81:39:aa:9f:a4:2d:76:40:0d:85:4f:8b:8a:b7:c4:
90:0b:00:c2:9b:b9:ca:bc:63:30:0c:50:5f:80:e5:6e:25:82:
5a:77:d7:53:f2:0c:59:69:07:f4:4c:1f:b5:49:2f:66:a3:df:
28:94:9e:c2:18:bb:9c:4d:98:0d:68:ff:53:3d:09:13:5a:26:
95:1d:40:23:a7:13:2d:83:aa:c1:70:20:b2:ab:b4:6a:94:d4:
a8:e6:73:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 15:25:11 2023 by rpki-client on console-fra.rpki-client.org