Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/alQFywLYvQmpD71WA6cnskd5YfM.roa
File: alQFywLYvQmpD71WA6cnskd5YfM.roa (raw, json)
Hash identifier: kyl2W8bXqvDgACCV8ZYjVYpsnh9SOdq/cdeSaB0Zkso=
Subject key identifier: 6A:54:05:CB:02:D8:BD:09:A9:0F:BD:56:03:A7:27:B2:47:79:61:F3
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 0187C394CD0486DF0824CFE1ACA6D891567E
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/alQFywLYvQmpD71WA6cnskd5YfM.roa
Signing time: Thu 27 Apr 2023 16:38:41 +0000
ROA not before: Thu 27 Apr 2023 16:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202505
IP address blocks: 2a0f:6580:107::/48 maxlen: 48
2a0f:6580:105::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:94:cd:04:86:df:08:24:cf:e1:ac:a6:d8:91:56:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Apr 27 16:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a5405cb02d8bd09a90fbd5603a727b2477961f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:10:f3:6c:ac:c3:81:61:21:56:e1:a8:43:
07:ad:7a:24:f8:74:46:97:c6:54:96:ee:02:9e:d5:
c3:62:25:a9:47:0c:0b:e4:0b:3c:8c:12:d8:8e:9b:
23:32:e7:b2:d1:94:b4:36:c4:9c:57:d8:1f:5d:f6:
2a:e3:82:b1:1d:35:dd:01:45:b8:a0:37:55:b6:84:
23:77:11:3d:5f:9a:32:a4:0a:41:93:59:e9:bc:b9:
00:05:d3:e5:cd:3f:b9:64:5f:2e:01:ac:77:e1:7a:
33:2c:68:de:b2:31:f9:09:5c:fa:db:4c:29:95:b3:
f6:0d:62:1f:97:f6:83:36:a3:f8:6c:e1:84:03:c7:
1a:fc:02:76:de:c2:70:66:1e:91:e0:59:b0:20:b8:
da:49:9a:fc:fc:a5:87:c4:55:4f:6b:c5:9f:4a:2e:
22:05:d4:1d:10:2f:76:9e:97:54:7c:dc:d3:f1:39:
f6:d4:b9:68:fe:b5:ce:13:26:cc:38:1a:97:4b:96:
cb:0e:72:fc:3c:28:44:54:f4:4a:b4:aa:2b:50:58:
4f:c6:67:61:9a:df:af:0b:81:8d:1b:b5:b8:7c:f6:
b4:18:9b:26:3b:0d:23:9a:a6:99:1e:90:45:12:c9:
50:46:64:be:44:78:6b:f2:a8:65:9e:6e:da:24:5c:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:05:CB:02:D8:BD:09:A9:0F:BD:56:03:A7:27:B2:47:79:61:F3
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/alQFywLYvQmpD71WA6cnskd5YfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:105::/48
2a0f:6580:107::/48
Signature Algorithm: sha256WithRSAEncryption
b8:68:76:d2:80:6c:0d:35:36:78:c2:ea:30:2e:39:80:80:05:
f5:c2:a8:54:c2:fd:81:9d:b1:7e:54:96:75:1b:f3:8d:c8:af:
72:7b:31:ab:82:ab:41:d1:f0:d9:12:08:7c:99:4a:6b:ce:15:
86:d7:98:de:74:5e:c3:b2:97:67:58:58:37:55:22:cd:0f:26:
12:b7:52:6f:5e:12:5f:97:3e:0e:60:fc:79:25:41:ec:92:20:
4d:bd:c5:b1:82:02:f6:0c:05:1a:d9:54:54:fe:f4:92:61:98:
33:93:9a:83:b1:07:e1:af:4d:8b:1d:62:f7:3b:ce:6b:84:c7:
23:22:77:dd:77:a8:99:d9:08:1b:d0:61:81:23:c8:30:50:a6:
01:af:22:95:53:ea:05:30:06:d7:65:be:05:44:87:c2:46:ae:
da:e0:1a:de:7c:70:3d:14:4c:6b:3c:f0:f2:e3:59:95:1d:90:
ab:7a:80:8b:98:ed:51:65:7f:3d:18:10:65:c4:c8:3c:5b:a1:
e2:6c:03:c5:89:a1:2c:11:f1:d7:fb:da:8d:ea:9f:51:2c:3f:
f3:a9:7a:88:40:7a:69:e1:da:3b:7b:a3:71:c1:58:cc:06:c6:
33:cd:2a:81:15:aa:e2:4a:b3:29:ca:7d:d9:a4:4d:72:d0:a3:
59:14:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:28 2024 by rpki-client on console-fra.rpki-client.org