Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/1-q8QcwsQydlGsZlnIMG_6bw4j1k.roa
File: 1-q8QcwsQydlGsZlnIMG_6bw4j1k.roa (raw, json)
Hash identifier: cfyaIOaDcgI70l/zOs43W1/CLKNbTZvnuyQlfiCbHFk=
Subject key identifier: FA:AF:10:73:0B:10:C9:D9:46:B1:99:67:20:C1:BF:E9:BC:38:8F:59
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 01856F9DB4D539A0D5D29793A168126287BB
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/1-q8QcwsQydlGsZlnIMG_6bw4j1k.roa
Signing time: Sun 01 Jan 2023 23:14:44 +0000
ROA not before: Sun 01 Jan 2023 23:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209915
IP address blocks: 2a0b:1300:81dc::/48 maxlen: 48
2a0b:1306:1dc::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b4:d5:39:a0:d5:d2:97:93:a1:68:12:62:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 1 23:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faaf10730b10c9d946b1996720c1bfe9bc388f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:ba:7d:6b:7d:b1:78:1c:b5:be:3a:f8:fa:
9d:20:2f:f4:a0:a3:f0:7c:39:c7:ec:83:71:51:af:
cf:21:b2:4d:cb:20:5d:79:94:99:e2:40:5c:f4:cc:
0d:20:1b:dc:9a:e4:0e:64:0c:a1:cd:59:19:b0:80:
d2:20:dd:d0:d7:44:67:5d:00:0e:04:e1:6a:cf:62:
fb:68:38:95:8c:81:23:50:a7:f0:91:6e:60:47:f3:
35:85:93:65:d6:78:2a:e3:85:00:56:64:85:fb:80:
99:97:35:03:8b:67:8d:3e:f0:24:9c:bc:9b:18:f1:
39:4a:af:1d:52:5f:80:b0:f5:be:fb:84:9d:90:0d:
33:ac:88:17:6b:c4:7b:f0:a5:40:79:c9:e2:81:c9:
cc:25:92:93:7d:11:1a:46:67:e7:b3:b5:20:e3:6f:
8a:9e:16:19:5e:48:74:bb:92:2c:b7:e6:f4:c8:20:
e4:a4:78:3d:ab:91:6c:0d:2f:0f:c3:d0:34:df:17:
41:e4:8f:fa:18:81:5e:33:15:14:d3:e1:95:67:7d:
bb:b9:6d:11:40:16:65:c3:6e:c3:25:d3:77:60:7d:
75:7c:24:a4:6a:7c:39:93:1e:e2:f1:0a:6f:6f:3b:
3c:31:74:22:d3:82:a6:56:d6:ef:a9:c0:08:25:b7:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AF:10:73:0B:10:C9:D9:46:B1:99:67:20:C1:BF:E9:BC:38:8F:59
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/1-q8QcwsQydlGsZlnIMG_6bw4j1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1300:81dc::/48
2a0b:1306:1dc::/48
Signature Algorithm: sha256WithRSAEncryption
29:10:de:54:49:f2:56:89:a8:18:42:4e:e7:d7:8f:bd:a8:9e:
b3:d1:5a:2a:76:2f:4b:c0:37:e4:2e:c6:ad:92:9d:ce:d0:d4:
76:45:f2:68:6e:58:83:ee:da:0a:d1:59:96:01:58:86:cc:40:
3d:3f:24:46:e3:6b:ca:5a:f8:de:1e:ed:bc:90:e2:f3:18:1f:
6a:b0:0c:6c:71:58:bd:67:dc:81:37:4d:b0:91:22:5b:1e:68:
fd:62:10:18:a4:0e:6a:7c:07:1f:56:c1:e5:74:06:be:90:84:
7b:2e:4e:93:81:07:09:22:f3:e6:34:ba:7f:e4:00:b0:35:c4:
4f:0f:39:b5:6c:1b:2d:00:a2:e5:b8:d4:71:f1:1c:33:28:d5:
e7:cc:3d:20:7b:d2:ed:35:95:74:61:5c:69:c6:26:ef:60:04:
4f:24:4e:f6:e1:9b:6a:1b:49:24:78:f1:74:d4:e6:67:25:fc:
86:bc:79:21:6d:2a:8e:9d:60:d6:7c:a7:10:3f:21:c5:0d:75:
8f:00:59:00:fe:a1:8f:81:03:81:1c:89:e6:0c:8e:ac:26:d8:
e0:51:61:58:89:88:ee:e4:62:01:91:ab:e4:db:1c:6e:d5:83:
da:a0:2e:98:cb:5a:cd:4c:f1:fd:07:96:87:d1:8b:26:15:3d:
91:38:be:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:21 2024 by rpki-client on console-fra.rpki-client.org