Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/S_mT_i7NiiikCvwO7waKG0BLIRU.roa
File: S_mT_i7NiiikCvwO7waKG0BLIRU.roa (raw, json)
Hash identifier: tBnZx7+HIWG8VitW2CHb6wgzZ37CKyDDFe6bETLrvpY=
Subject key identifier: 4B:F9:93:FE:2E:CD:8A:28:A4:0A:FC:0E:EF:06:8A:1B:40:4B:21:15
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 018AB6A9841EB55575BC4BE97253593B3AE0
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/S_mT_i7NiiikCvwO7waKG0BLIRU.roa
Signing time: Thu 21 Sep 2023 07:34:37 +0000
ROA not before: Thu 21 Sep 2023 07:34:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28952
IP address blocks: 2a03:6947:1800::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:a9:84:1e:b5:55:75:bc:4b:e9:72:53:59:3b:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Sep 21 07:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf993fe2ecd8a28a40afc0eef068a1b404b2115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:93:60:77:ee:84:c0:0b:90:1d:94:6f:b9:
55:14:eb:b6:14:4a:68:07:cd:26:07:07:f1:92:95:
70:f6:9e:d3:f3:b6:a6:67:39:3f:44:87:7e:ae:c0:
58:35:1b:d6:d9:97:54:8d:5c:57:57:b8:10:73:d2:
ec:f7:a1:15:e6:c6:49:9d:83:57:31:f0:3d:44:6a:
6d:97:7f:3a:6d:78:ab:7b:2b:1f:bf:1d:ec:52:ea:
cc:2d:0a:14:10:28:7f:3d:e0:1c:3b:e9:f1:b7:2d:
8d:61:1a:bc:9a:cb:98:28:7a:4c:0c:9d:13:bf:67:
f4:29:61:a1:05:5d:de:fd:1c:76:44:36:a3:42:f6:
58:70:8c:39:e2:90:4f:5f:58:d2:47:f0:d6:f7:4c:
31:3b:f7:8b:dd:e5:d5:e3:7b:67:e2:6a:3d:62:bb:
45:9f:42:59:f8:5d:63:27:6a:85:85:f4:6c:22:05:
84:44:d0:b8:e0:34:4e:03:60:47:f2:11:36:cf:54:
12:0b:4d:41:35:0e:ae:cf:ff:75:fb:75:3b:69:c6:
ac:22:fc:b7:69:96:40:b7:43:e1:6c:1e:22:50:c4:
8a:b2:83:ed:55:71:f1:06:47:3f:0d:57:c0:54:8c:
74:ec:93:5a:74:20:1a:79:7e:44:89:6d:8d:cd:03:
38:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F9:93:FE:2E:CD:8A:28:A4:0A:FC:0E:EF:06:8A:1B:40:4B:21:15
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/S_mT_i7NiiikCvwO7waKG0BLIRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6947:1800::/40
Signature Algorithm: sha256WithRSAEncryption
69:27:f7:41:37:c7:61:5a:88:4e:67:1c:7c:53:b3:0b:4f:7a:
07:38:83:3f:df:24:c1:d0:72:07:f6:5e:0e:e8:76:81:e8:c4:
6c:91:77:0c:14:eb:37:0e:af:b1:e4:af:71:e8:e9:b2:7e:c6:
7e:88:8a:1d:7b:be:e1:06:8b:c6:5f:ca:18:6e:12:d4:63:d0:
c1:eb:86:f4:8c:54:ce:a1:47:25:d0:45:2b:ec:c3:c2:c6:70:
e1:ce:67:cd:cd:c7:50:9b:e6:06:10:dc:9d:bb:37:26:eb:8b:
61:6b:ac:ae:b7:9a:90:88:4c:1c:b6:f8:ca:58:0b:a1:11:f4:
b2:56:5e:a6:56:17:28:27:7d:20:2d:17:de:b7:dc:39:34:08:
28:f8:f6:bf:da:5a:99:b8:d0:0f:d8:a3:79:65:36:dc:3f:36:
72:dd:f8:4a:bc:40:6e:c0:ba:44:56:70:98:c5:bb:ca:3f:0c:
78:72:89:e2:ea:09:7a:f4:2c:cd:6f:bb:48:90:d6:b5:e8:17:
36:1c:fc:67:60:f4:8a:2e:cd:32:9c:9d:4d:59:4f:3a:b8:6c:
d9:a6:b4:9b:54:2a:46:c7:89:1a:5d:5a:a3:4f:b9:b8:b9:d9:
52:e7:42:5a:00:d9:e0:d3:5e:80:09:da:08:ea:8b:a2:1d:26:
91:6e:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:18 2024 by rpki-client on console-fra.rpki-client.org