Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/XqcvTB9S_3IxijJB0tIbTuceXMA.roa
File: XqcvTB9S_3IxijJB0tIbTuceXMA.roa (raw, json)
Hash identifier: 4xX8J4aXCJEgP9MLxauexloboQ8/6VYbGZPbj5j00qA=
Subject key identifier: 5E:A7:2F:4C:1F:52:FF:72:31:8A:32:41:D2:D2:1B:4E:E7:1E:5C:C0
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739000F8E6F4790396A3CA4DBF78251B
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/XqcvTB9S_3IxijJB0tIbTuceXMA.roa
Signing time: Mon 02 Jan 2023 17:38:15 +0000
ROA not before: Mon 02 Jan 2023 17:38:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207083
IP address blocks: 2a0b:b87:ffe4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:00:f8:e6:f4:79:03:96:a3:ca:4d:bf:78:25:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ea72f4c1f52ff72318a3241d2d21b4ee71e5cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:25:38:53:df:68:1f:80:ea:f1:f0:1a:a3:
08:84:e9:f9:a4:72:4d:cc:7d:92:32:02:5b:2c:e0:
3d:57:81:96:ba:40:81:fe:51:71:89:99:9a:3f:64:
81:0e:f1:71:41:7f:b5:fa:05:60:c6:ff:56:70:3e:
fc:77:53:02:ed:4d:04:cd:39:ba:d8:da:8e:ec:eb:
1d:f6:a7:75:ef:cb:3f:29:5a:99:91:40:7d:9d:0f:
46:66:f3:ce:33:21:8b:ed:2d:cf:ed:ac:e0:dd:e6:
99:4d:ea:0a:26:cd:8b:a7:f9:a5:a4:78:fd:3d:ac:
d8:1d:7e:33:fc:36:5c:00:21:54:e6:be:b0:3a:3a:
f8:fb:fa:c8:8b:ad:31:2b:2c:8c:8d:3d:97:38:57:
62:1e:ed:88:52:d2:ac:40:bd:86:ac:2d:34:23:1d:
82:3f:40:f4:22:35:73:38:e5:29:3a:6d:9c:d9:5d:
6f:1f:24:9d:8f:ad:4d:21:51:de:d7:5a:cf:22:70:
b0:eb:4c:07:9a:b7:d9:9a:f7:ff:16:64:d2:dd:3a:
f2:d2:b8:a6:4c:89:7e:9e:fb:a4:6d:69:5e:25:fe:
f7:a5:01:e2:18:9e:e6:9f:31:03:8f:39:45:8d:a0:
5e:86:9a:38:90:69:3c:55:da:6c:aa:1a:20:fa:d2:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:2F:4C:1F:52:FF:72:31:8A:32:41:D2:D2:1B:4E:E7:1E:5C:C0
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/XqcvTB9S_3IxijJB0tIbTuceXMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffe4::/48
Signature Algorithm: sha256WithRSAEncryption
73:40:d0:65:64:18:cc:79:83:b5:50:52:13:09:80:fb:0f:f4:
04:e3:c8:5d:ab:6d:e5:1d:84:2e:32:e6:99:f7:fa:64:40:26:
f4:8e:15:ac:49:d0:16:8a:25:01:c5:18:50:2a:0a:c5:ac:d6:
13:00:95:ae:da:cf:99:55:72:0c:a9:be:de:4d:52:c8:bf:26:
97:9d:88:fc:6f:68:88:4b:70:2f:7a:0c:54:92:37:f0:61:4b:
50:03:7a:a1:3c:ea:52:34:6e:09:f4:f8:f6:29:d8:f8:ca:ad:
0b:22:ff:88:22:9d:62:2c:ec:b0:e2:70:36:5c:61:21:a4:d3:
ac:0f:cf:8e:3a:09:8b:9f:af:2f:41:1f:27:d8:bc:e8:69:a1:
03:50:1e:64:57:54:9f:b2:7f:18:c9:84:7a:f9:97:eb:1f:1a:
b9:3d:e7:a7:9e:92:47:88:fa:cf:80:c5:ab:6a:0a:ef:d2:7c:
71:54:10:b2:d8:f6:c1:03:65:e0:31:74:f3:5c:ed:4f:f9:38:
5b:b8:78:92:0b:d0:6c:29:27:69:b3:b0:99:a7:a2:16:e8:3f:
91:78:de:57:f7:1f:df:11:36:c8:af:d5:40:2c:5f:96:bd:e8:
ab:71:bc:e5:aa:2f:c2:6e:e5:b9:83:26:b1:93:67:37:ed:4c:
40:a4:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:20 2024 by rpki-client on console-fra.rpki-client.org