Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gIn8bS1twft4Uk1T9aXjaMp8NT4.roa
File: gIn8bS1twft4Uk1T9aXjaMp8NT4.roa (raw, json)
Hash identifier: C5z/9awCF7SGffzO9dGbO56qCu3oEDhE/2BHUKOiDgE=
Subject key identifier: 80:89:FC:6D:2D:6D:C1:FB:78:52:4D:53:F5:A5:E3:68:CA:7C:35:3E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739014B37CAB3C46C7D7DE706D57B65C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gIn8bS1twft4Uk1T9aXjaMp8NT4.roa
Signing time: Mon 02 Jan 2023 17:38:20 +0000
ROA not before: Mon 02 Jan 2023 17:38:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212718
IP address blocks: 2a0b:b87:ffba::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:14:b3:7c:ab:3c:46:c7:d7:de:70:6d:57:b6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8089fc6d2d6dc1fb78524d53f5a5e368ca7c353e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:e4:1d:15:20:d8:01:14:dc:c9:34:9c:00:
ea:4c:fc:e7:cb:55:a9:43:29:e5:16:d8:a5:21:0a:
3b:49:01:55:86:8e:23:65:ea:13:2f:c3:ac:c6:72:
d4:69:2f:eb:e2:e5:e8:11:e7:b8:6b:1f:b7:31:e9:
7b:b6:3c:1c:d1:f5:2d:e4:9c:73:35:db:7d:04:3c:
07:25:22:a9:fd:06:24:5a:87:c5:65:ee:f1:e8:c4:
8a:94:fb:e3:76:5c:ca:bd:e4:e2:de:76:e1:6f:10:
cc:71:e9:55:8a:d9:34:f5:7f:6c:9d:39:34:fd:e8:
d5:e1:de:a1:c0:4e:1b:cb:70:79:58:6c:c9:8b:75:
12:99:c3:b1:51:d2:12:40:03:f9:1b:00:33:fb:5c:
c4:39:4a:a9:91:65:7b:db:a3:ce:28:16:32:84:c2:
09:ab:48:57:31:5e:2a:2c:07:fb:40:3c:e0:3d:b5:
ca:98:14:ff:d8:69:05:4a:b3:5f:e4:dc:8d:46:a6:
21:c4:ac:6e:36:cd:75:c4:45:48:bb:3f:7e:ff:ce:
96:cc:73:96:61:c9:49:c4:12:ff:b3:0d:d8:55:e5:
cc:64:15:be:03:a1:79:11:5f:58:9f:2c:0c:f2:9f:
7a:af:be:2e:05:fb:35:0f:64:ff:62:37:ad:32:97:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:89:FC:6D:2D:6D:C1:FB:78:52:4D:53:F5:A5:E3:68:CA:7C:35:3E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gIn8bS1twft4Uk1T9aXjaMp8NT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffba::/48
Signature Algorithm: sha256WithRSAEncryption
62:3f:e7:5e:78:13:3e:2e:6b:c8:73:4c:8c:19:91:26:05:9f:
57:a5:d3:00:ac:23:0e:ff:53:1c:c1:ea:47:de:70:c1:38:fa:
1d:3e:58:d6:5d:d3:db:5f:90:68:7d:8c:38:ee:5c:9a:87:10:
69:db:bf:aa:f1:61:84:ac:32:a4:09:19:fe:5f:52:b1:71:40:
6c:9c:28:91:a1:23:dd:fc:24:93:49:89:26:0a:18:f1:87:5a:
69:5f:a0:57:a3:cf:8f:c6:a7:2a:3c:82:a4:9b:87:14:76:bd:
22:52:03:ea:ba:4a:c8:c1:25:45:f3:30:be:b6:4c:ee:6f:80:
e8:84:97:9b:8e:7f:90:50:a9:54:51:49:35:99:09:9f:69:1a:
5d:42:fe:87:8b:f8:8f:45:f0:63:8e:46:e5:75:b9:8d:e9:59:
20:bf:30:2a:04:79:78:9e:d4:82:a3:43:73:ec:1c:8e:5f:ad:
aa:63:a7:eb:e3:9d:b9:a5:6f:e8:45:ce:f3:53:fc:f6:23:f1:
34:64:a7:c6:ed:e5:ae:57:fe:c3:bd:3a:47:1b:b7:c2:7b:e3:
08:ec:d0:98:54:22:22:c4:ba:cd:a0:04:28:25:dc:b6:71:43:
f3:b5:d0:75:45:e4:71:f1:42:cb:2b:1c:8f:2d:89:8a:6b:fe:
f7:d0:ec:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org