Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/kylv2y-QV-J1ONS8UXVNpWWbuog.roa
File: kylv2y-QV-J1ONS8UXVNpWWbuog.roa (raw, json)
Hash identifier: YpznWJk6IItUyQnpMPdI8mGEdPPRPdERynweYKUirQc=
Subject key identifier: 93:29:6F:DB:2F:90:57:E2:75:38:D4:BC:51:75:4D:A5:65:9B:BA:88
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739005E6AEBAE90315004941A947DD30
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/kylv2y-QV-J1ONS8UXVNpWWbuog.roa
Signing time: Mon 02 Jan 2023 17:38:16 +0000
ROA not before: Mon 02 Jan 2023 17:38:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209862
IP address blocks: 2a0b:b87:ff17::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:05:e6:ae:ba:e9:03:15:00:49:41:a9:47:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93296fdb2f9057e27538d4bc51754da5659bba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:6e:53:cd:5b:62:ff:b9:1c:68:f4:a1:ea:
ed:80:4e:ab:7d:9e:83:d6:11:2d:3e:a7:de:40:34:
5d:38:50:79:1b:08:78:fd:bd:2e:2b:ef:78:52:93:
1f:e5:a1:ff:b5:8c:b3:cc:5d:18:89:e3:16:21:7a:
b1:b6:b3:3f:0d:a4:65:ae:f5:a6:4b:41:7e:7f:a9:
06:b2:db:27:88:81:11:de:e0:e9:de:80:c3:8b:3a:
16:3f:a5:4e:2d:40:a1:b2:6a:f0:f0:75:b2:47:8f:
42:f7:34:02:29:ec:bf:1e:55:98:f7:16:67:63:14:
9c:ed:13:a8:46:84:ea:e6:ea:7c:9c:f8:59:96:8f:
05:09:11:a1:1e:61:30:4d:36:4f:b2:53:a8:33:5e:
cb:40:28:3c:6a:b9:0c:43:6f:44:ab:8f:4e:98:ef:
ec:bb:29:1b:4c:ae:f9:66:94:7a:c4:47:90:3d:6f:
a6:1b:bd:c0:e5:80:c7:8a:f6:ce:02:e9:2f:c4:e9:
80:81:7a:d5:dc:71:52:2a:9d:de:ef:8f:15:90:f6:
78:af:67:d6:3f:06:ca:3f:9f:0a:27:af:43:c4:5b:
fd:d8:57:b9:66:02:1f:f1:bb:9c:e7:68:9b:b5:6d:
08:19:ea:e5:87:fb:e2:9c:f7:60:d7:6d:ff:83:6e:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:29:6F:DB:2F:90:57:E2:75:38:D4:BC:51:75:4D:A5:65:9B:BA:88
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/kylv2y-QV-J1ONS8UXVNpWWbuog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ff17::/48
Signature Algorithm: sha256WithRSAEncryption
5d:2b:41:3d:fc:89:1b:a4:5f:06:83:c8:c0:c8:d0:7b:d3:33:
d5:85:fd:c0:19:63:65:cc:74:bf:b0:af:90:b3:32:70:f5:c0:
d6:a7:f5:4a:4c:d0:b1:96:f2:40:b3:e2:ef:58:ed:96:50:84:
2b:95:ae:ec:19:42:6a:09:db:76:03:56:94:fb:95:3d:87:de:
dd:d9:69:d7:75:ab:3f:17:fd:66:ff:a0:1b:8d:1f:d3:2a:a1:
79:d4:3d:b2:80:85:10:d9:81:76:f9:a8:0d:5b:29:eb:be:9d:
f1:63:0d:b5:94:ba:7d:33:27:d1:9a:ec:aa:40:1d:5b:09:5a:
82:80:02:bd:45:c0:a8:c2:f0:c3:98:5b:df:5a:10:45:98:f7:
a4:48:54:44:12:c4:3a:8c:39:97:b8:f7:05:e3:49:02:09:c3:
81:e5:84:a9:bd:ec:f2:a4:f4:2a:1e:2d:ec:ba:88:48:bb:c7:
e2:d3:f0:1c:bf:8f:a0:f4:87:77:98:58:cd:c2:50:7e:11:ae:
7c:ed:1a:b0:11:cf:37:ac:c1:be:c1:d7:40:4d:e5:3d:2b:2f:
e6:d3:92:ba:9b:c1:79:17:04:2a:5e:35:31:63:2b:01:82:c9:
3a:08:2a:fd:a7:d6:f3:d7:3b:88:a4:59:53:d7:41:f2:5c:d5:
0f:f1:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org