Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Thk4w1aewoC_K_Bkdx74rdUtifc.roa
File: Thk4w1aewoC_K_Bkdx74rdUtifc.roa (raw, json)
Hash identifier: hTt9d7yn5PEWtSeNvJuHc7HepGMeO2DBEnRGd4Lzw9o=
Subject key identifier: 4E:19:38:C3:56:9E:C2:80:BF:2B:F0:64:77:1E:F8:AD:D5:2D:89:F7
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246DFE9FCE15A9F077DC9855806FF5C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Thk4w1aewoC_K_Bkdx74rdUtifc.roa
Signing time: Mon 02 Jan 2023 11:38:45 +0000
ROA not before: Mon 02 Jan 2023 11:38:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210890
IP address blocks: 2a0c:9a40:8030::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:df:e9:fc:e1:5a:9f:07:7d:c9:85:58:06:ff:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e1938c3569ec280bf2bf064771ef8add52d89f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:46:19:26:32:f0:14:09:48:12:8b:0b:02:
b4:1a:1c:3f:22:84:2a:6a:6b:f5:bd:11:16:c5:f0:
d6:c6:ed:6f:e9:d4:46:03:b3:d6:ca:d4:10:ee:8d:
46:bf:5a:7f:d6:49:9a:33:e6:df:e9:25:fb:d8:88:
c1:30:be:b5:1e:a4:d6:72:99:23:fc:3c:0f:65:bb:
e0:e9:71:a7:af:9d:74:a5:94:9c:c4:e9:4b:d0:25:
79:a2:38:67:16:f6:a2:eb:76:1c:70:63:04:ef:f4:
bd:8c:1c:7b:a0:33:ac:de:b2:dd:f6:6c:a8:0f:d4:
33:d2:c2:ee:7a:fa:a9:ed:4a:7c:a8:6b:07:e6:e0:
55:1a:0f:ad:a6:e9:f1:60:86:4b:39:00:ea:32:8b:
e1:b7:5e:d1:ef:a5:c3:35:bf:91:69:0e:5d:5c:94:
d1:4c:0f:01:05:f4:11:cb:85:90:c7:55:9c:97:7f:
ba:bc:b6:ec:f5:ee:f0:d4:a6:14:5c:15:89:d6:2f:
77:c5:c8:43:3c:4c:89:8a:b8:6e:6e:04:6e:b6:5e:
db:4a:60:71:29:5c:fc:fe:02:07:07:03:e2:ce:23:
8f:42:aa:96:82:09:1e:88:27:55:66:af:36:0c:fe:
f5:7f:8d:74:c1:7b:7e:63:6d:0f:96:d1:bf:1d:fa:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:19:38:C3:56:9E:C2:80:BF:2B:F0:64:77:1E:F8:AD:D5:2D:89:F7
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Thk4w1aewoC_K_Bkdx74rdUtifc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8030::/44
Signature Algorithm: sha256WithRSAEncryption
1e:0c:98:29:05:fe:26:29:4b:83:6f:19:fa:cb:09:91:72:4b:
34:5c:e6:e7:44:62:f0:1b:2f:b3:90:cd:26:e6:82:0a:12:dd:
6a:9f:a9:35:8c:5a:7d:19:b7:43:8e:01:e8:f6:5c:06:b0:ae:
4a:f8:f8:a9:17:e3:77:ff:e1:16:98:23:b2:14:8f:d7:49:a0:
de:bd:d3:36:e9:3a:bb:85:f1:16:df:64:de:18:7e:84:54:d4:
bc:09:cd:3d:45:fa:f9:d2:02:a1:63:b7:2c:95:63:40:63:68:
cd:ee:28:17:ee:ac:14:97:b9:09:ae:28:d3:3c:4f:c6:0b:bb:
f5:2d:11:ef:88:6d:0f:2e:d4:83:bb:93:c3:06:08:a6:c7:e1:
ac:9b:07:90:92:de:2a:85:83:5f:4b:a0:ad:61:15:3d:83:41:
2d:05:16:73:2a:39:80:7f:04:d0:cd:e7:a9:ab:58:36:d4:27:
93:aa:df:b1:33:10:d1:2e:6c:58:ec:45:b8:88:f4:7c:e6:2b:
38:58:ed:c1:92:5d:5e:4d:2d:de:ff:74:fe:ec:a6:3c:79:9e:
16:08:6c:dd:b7:a6:c7:ff:60:18:10:36:c6:fa:93:86:e4:d4:
7e:51:fc:c3:d7:eb:3e:7d:67:54:72:62:86:a2:06:9d:c8:f4:
68:89:99:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:36:57 2024 by rpki-client on console-fra.rpki-client.org