Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/u25YP53r4wOcCwR9BB8JaDo8gSI.roa
File: u25YP53r4wOcCwR9BB8JaDo8gSI.roa (raw, json)
Hash identifier: 9P4prUKpRXpLsZdKUTM7WubWNur6CQ20JCg4ysnOlro=
Subject key identifier: BB:6E:58:3F:9D:EB:E3:03:9C:0B:04:7D:04:1F:09:68:3A:3C:81:22
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246E55ACA7A453FE07390D051195D33
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/u25YP53r4wOcCwR9BB8JaDo8gSI.roa
Signing time: Mon 02 Jan 2023 11:38:46 +0000
ROA not before: Mon 02 Jan 2023 11:38:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212704
IP address blocks: 2a0c:9a40:8078::/45 maxlen: 48
2a0c:9a40:8070::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e5:5a:ca:7a:45:3f:e0:73:90:d0:51:19:5d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb6e583f9debe3039c0b047d041f09683a3c8122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:8b:43:41:dd:d3:3a:c2:57:74:2f:b0:73:
02:2d:9f:cd:80:9b:80:8a:7b:a9:3b:90:a6:f2:c5:
cc:b4:83:0e:24:17:c2:cb:42:9a:f0:55:4e:bb:eb:
b0:95:cd:7d:19:39:17:e4:fa:e8:ad:97:79:2d:e4:
fd:b6:00:fa:57:ce:84:f3:0d:0c:7b:c9:9a:80:75:
0d:b2:87:d9:99:65:5b:46:6c:eb:3e:cd:a6:32:f9:
48:1b:c1:8e:1f:63:a2:c6:70:6e:a8:d5:5e:f8:f2:
b4:4f:d7:60:f6:e6:46:9d:48:0f:fe:80:7c:e3:66:
11:dd:e1:7d:43:f2:d9:22:76:94:47:c9:4e:8c:4d:
59:01:bb:42:93:c4:70:10:3a:a9:cc:33:e7:ef:86:
9b:e6:d3:0c:76:43:33:75:c1:de:98:ec:0b:02:9e:
30:87:b2:d9:dd:53:55:80:c6:d7:df:81:b0:02:3f:
14:bf:4a:d0:b6:89:de:70:44:d0:e5:93:a7:96:44:
9c:3c:eb:07:3e:ff:e6:54:99:b1:1e:2f:8d:07:9b:
5f:76:9c:41:b8:81:9f:2d:28:94:66:29:6a:1a:7f:
90:75:22:fd:d9:9e:c4:4c:64:ba:e3:e1:7d:34:c7:
cb:a3:2d:63:02:bd:7e:81:3f:0f:02:d3:ca:1b:86:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6E:58:3F:9D:EB:E3:03:9C:0B:04:7D:04:1F:09:68:3A:3C:81:22
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/u25YP53r4wOcCwR9BB8JaDo8gSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8070::/44
Signature Algorithm: sha256WithRSAEncryption
3b:7c:22:a0:f1:cf:45:73:71:76:fa:b4:fe:92:54:f9:ee:1d:
b5:53:d4:5c:dd:22:7b:c9:1a:9d:2d:db:b2:21:70:65:3b:5c:
15:79:ca:78:e1:21:f1:b3:a5:08:01:09:db:c6:41:61:dc:c0:
92:59:de:82:94:71:98:52:7f:63:1a:8e:e5:0d:05:16:36:34:
c7:6b:64:9d:0c:bc:04:3e:a1:1d:53:ad:42:b4:5b:76:57:d6:
1b:7d:45:78:e7:59:79:18:c2:d1:73:4a:e2:89:82:e9:06:dd:
fc:c4:b5:4d:d9:dd:c3:0b:03:c5:93:2f:2f:b5:f7:06:13:e7:
ce:1e:cf:ca:fa:97:15:f8:dc:52:57:1f:a0:2e:0e:71:28:65:
2e:9a:29:d4:67:ef:da:56:f5:90:f0:5e:39:e8:a0:2e:79:7d:
f9:b5:d2:10:58:45:d3:60:21:f8:87:71:c8:d9:cd:a1:29:63:
18:a8:f3:3e:83:a9:63:cf:41:40:c8:3b:c6:91:30:75:95:94:
60:e8:76:1b:63:45:32:72:7f:05:c6:ba:15:e8:1c:d6:9e:cc:
bd:e2:9b:9f:bc:b8:34:d2:25:ad:38:7b:3d:1a:24:fc:9b:0c:
95:22:92:cf:fe:05:0f:54:58:cb:d9:3f:46:07:97:77:57:09:
97:25:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:36:58 2024 by rpki-client on console-fra.rpki-client.org