Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/1ElJ9l3J6r6y59xvffIR98VFy-c.roa
File: 1ElJ9l3J6r6y59xvffIR98VFy-c.roa (raw, json)
Hash identifier: 4xz+ij7elaFj/V8J/3+EqLVEe7KD1Xi0N1LldTq04as=
Subject key identifier: D4:49:49:F6:5D:C9:EA:BE:B2:E7:DC:6F:7D:F2:11:F7:C5:45:CB:E7
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 01856F429D69DDD186B284209BA6F229689C
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/1ElJ9l3J6r6y59xvffIR98VFy-c.roa
Signing time: Sun 01 Jan 2023 21:35:14 +0000
ROA not before: Sun 01 Jan 2023 21:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204508
IP address blocks: 2a05:4140:300::/40 maxlen: 48
2a05:4140:21::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:9d:69:dd:d1:86:b2:84:20:9b:a6:f2:29:68:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 21:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d44949f65dc9eabeb2e7dc6f7df211f7c545cbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:c8:e7:fc:b6:cf:76:62:7c:0c:61:1a:6a:
ff:cf:d4:58:9a:ab:f6:ab:55:4b:47:8a:ab:00:b4:
ed:45:43:bd:dd:e5:82:4b:ba:05:de:0d:25:a5:b2:
00:9a:38:af:83:30:ec:16:24:6b:42:5b:57:dc:a1:
e6:5f:f1:46:a8:1a:38:32:34:98:55:24:43:24:fc:
00:e5:0a:c7:be:7f:16:ba:0b:64:bb:36:5e:f1:d0:
de:a0:5b:aa:ca:b1:6c:52:8f:c2:75:af:6f:35:a9:
96:29:d8:8b:a6:a9:c9:7a:db:81:c0:d8:f5:63:0c:
d1:b7:5f:24:de:81:2a:31:dc:e1:e6:24:0c:59:8d:
bb:59:22:b2:bc:d8:59:ec:3a:20:ba:37:e6:62:ea:
83:1d:75:bd:cb:27:2b:b6:9f:8d:bf:90:0d:7f:65:
10:ef:57:8a:f8:ea:34:d0:83:c9:b4:0d:83:ba:cc:
f1:2a:20:e8:9b:2e:02:c4:8e:54:03:ed:8b:0f:38:
e4:87:96:7e:fb:d8:47:14:86:72:cf:84:eb:1f:79:
76:54:6e:3e:05:25:fe:0f:21:23:56:d5:74:bc:86:
65:73:04:ac:aa:b8:76:b1:0f:3b:00:4a:a0:61:35:
55:4e:1b:06:4f:37:9b:07:75:b0:8b:a0:df:17:65:
83:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:49:49:F6:5D:C9:EA:BE:B2:E7:DC:6F:7D:F2:11:F7:C5:45:CB:E7
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/1ElJ9l3J6r6y59xvffIR98VFy-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:21::/48
2a05:4140:300::/40
Signature Algorithm: sha256WithRSAEncryption
07:58:65:8f:8c:62:60:11:11:26:72:6b:34:0c:d7:b2:92:f3:
5f:a6:9e:b0:65:c4:c5:a2:79:b1:ea:59:a0:50:04:f7:9b:67:
6c:a6:5e:c9:1e:01:0e:bf:5e:8d:73:0a:54:c4:fd:90:da:ff:
bf:34:00:64:79:37:94:b1:62:b1:24:43:66:39:22:3f:41:2b:
70:db:77:bc:de:c8:a5:ef:a6:a1:a6:47:d9:13:87:3b:0f:90:
13:1f:5c:82:f9:0d:08:b2:c5:92:9d:45:85:6e:d6:c9:70:b6:
61:4b:a9:76:a5:4e:45:ff:bc:94:b8:9c:3a:f6:3b:7c:3b:6d:
14:62:45:35:b6:6f:8a:27:b3:6c:65:3b:55:a7:bb:ab:21:2d:
ea:1e:74:bd:45:5b:22:1b:88:55:8a:a3:a3:1b:00:87:92:f5:
3e:e9:ee:95:9e:36:f4:ff:16:52:2e:b7:33:3d:bd:db:7c:5f:
52:f8:a0:c6:2a:d2:28:81:6c:fd:a3:86:77:d7:24:75:28:03:
0f:b4:1c:0d:c3:9c:b4:5e:ed:d0:30:01:3b:2a:21:25:c4:8e:
59:72:f1:f6:72:bf:39:fb:71:0d:19:3c:08:2f:59:e4:d9:67:
72:86:19:6c:08:a6:4e:88:65:b5:04:30:3b:3c:2e:22:77:7c:
f5:13:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:26 2024 by rpki-client on console-fra.rpki-client.org