Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/RQp1i3DBwWHLvwfbVZVp1oWmNIw.roa
File: RQp1i3DBwWHLvwfbVZVp1oWmNIw.roa (raw, json)
Hash identifier: KEJgmcXydpBG2eRSc04Vbns23hkQt1lfcsRrbkKykZs=
Subject key identifier: 45:0A:75:8B:70:C1:C1:61:CB:BF:07:DB:55:95:69:D6:85:A6:34:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 018B4728ED5B9F5A27F57DCEF3FF08A045F6
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/RQp1i3DBwWHLvwfbVZVp1oWmNIw.roa
Signing time: Thu 19 Oct 2023 08:59:06 +0000
ROA not before: Thu 19 Oct 2023 08:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216195
IP address blocks: 2a13:fc41::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:28:ed:5b:9f:5a:27:f5:7d:ce:f3:ff:08:a0:45:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Oct 19 08:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=450a758b70c1c161cbbf07db559569d685a6348c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:09:74:ec:45:87:5f:16:7c:8d:f9:0f:b9:
77:50:c1:fd:8e:92:44:ea:0d:51:c0:bc:a3:2b:c9:
49:ac:c9:84:4a:f7:18:74:36:4e:ff:d9:46:0d:ea:
07:f2:65:79:62:46:9e:74:64:af:c5:92:5d:ad:90:
4d:0f:4c:29:ff:9c:0e:ac:fe:d8:c7:a3:ba:47:4e:
44:25:e1:ca:31:b5:d7:bf:f9:df:6b:f1:bf:af:20:
22:d0:a1:82:25:37:74:67:cb:d5:f1:4a:fd:64:33:
d4:78:91:13:ce:30:2e:2c:ec:7e:d0:08:fe:a5:ae:
57:17:93:44:0a:8d:7c:7c:6e:22:5e:73:01:31:9a:
5c:2a:24:b9:54:ad:af:bf:e4:09:17:e9:29:31:12:
3c:db:37:bb:28:97:13:21:f1:4d:3e:f5:7a:f8:67:
c0:6e:35:52:39:3c:af:c8:f5:cd:a7:ff:bc:94:13:
0b:de:b6:5b:61:aa:1d:c2:a1:d3:31:69:c0:91:2f:
aa:c4:fc:41:01:3a:2c:b1:80:89:7c:e8:23:ab:56:
7a:1d:d7:85:71:1b:54:a5:ea:68:e3:4e:07:8b:37:
a6:3f:0b:85:83:75:54:b7:7f:3c:59:a7:e4:b7:b5:
d6:57:f7:a5:b6:21:da:dd:01:29:63:d4:41:08:9d:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0A:75:8B:70:C1:C1:61:CB:BF:07:DB:55:95:69:D6:85:A6:34:8C
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/RQp1i3DBwWHLvwfbVZVp1oWmNIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:fc41::/48
Signature Algorithm: sha256WithRSAEncryption
7d:64:e7:f1:22:cc:c1:20:20:a9:bf:73:96:d1:0e:5e:fc:a8:
99:2b:72:5f:61:a9:33:6e:4c:3f:0e:a2:bd:28:73:12:61:c5:
31:27:c3:48:b7:ed:c8:9f:a5:0b:fe:5a:a0:03:94:1f:89:d8:
68:ce:df:e1:7a:b4:ac:c0:d8:81:d5:ef:cd:3b:39:94:8b:7b:
87:aa:b7:d3:f1:b0:46:99:b4:34:cd:db:0f:32:c1:53:a0:27:
30:f5:f0:c1:28:0c:44:60:3c:80:3d:b8:bb:81:3d:43:6a:da:
a0:e1:ef:ba:1a:a7:de:89:e9:f1:0c:2a:9e:09:21:56:d9:c9:
6a:91:07:d2:d3:ce:e3:b5:5e:ae:0b:20:59:f6:2c:4c:96:da:
d4:ab:b2:71:0c:e9:d4:62:cf:1a:1c:79:25:dd:c7:4c:bd:b5:
ce:4c:af:db:95:d8:93:15:ef:b0:e2:04:10:4c:12:16:b1:31:
bd:f7:74:06:1a:aa:9e:4a:69:5f:95:b2:cc:f7:c2:92:47:7b:
5a:f9:b8:42:86:dc:41:57:22:48:5f:92:f3:37:fb:67:ab:ec:
17:4e:5a:ce:7d:f6:06:2f:cc:8f:9a:ba:03:d2:18:e4:0e:41:
b3:7e:83:2d:b6:18:97:a9:12:3f:27:7e:da:3f:c7:40:ee:7a:
0e:13:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:02 2024 by rpki-client on console-fra.rpki-client.org