Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1-T3hPKAJSd59DFzX5SXpYREoork.roa
File: 1-T3hPKAJSd59DFzX5SXpYREoork.roa (raw, json)
Hash identifier: 28G1DhGkzWuqpC6Je7pW8cj3E+J2c9KApXEcJ2XPfW0=
Subject key identifier: F9:3D:E1:3C:A0:09:49:DE:7D:0C:5C:D7:E5:25:E9:61:11:28:A2:B9
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01862E38F4E948CA24CFBB76236C512E2202
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1-T3hPKAJSd59DFzX5SXpYREoork.roa
Signing time: Tue 07 Feb 2023 23:32:09 +0000
ROA not before: Tue 07 Feb 2023 23:32:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210926
IP address blocks: 2a10:4646:110::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2e:38:f4:e9:48:ca:24:cf:bb:76:23:6c:51:2e:22:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Feb 7 23:32:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f93de13ca00949de7d0c5cd7e525e9611128a2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:68:90:90:87:ba:b5:c6:a7:7f:71:d2:31:99:
48:47:ed:2f:13:14:1c:fb:3f:d7:d4:7a:d2:94:2d:
d0:f8:be:ab:ea:a8:ec:da:d0:72:b1:a8:1a:f5:cb:
a2:6f:49:e4:49:f4:69:a3:cf:7a:cc:72:f4:f9:12:
6e:43:ed:b2:90:5b:da:be:2f:48:f2:b8:04:40:17:
08:e1:52:5b:93:6a:cb:01:05:58:d5:8b:20:bf:da:
90:8e:53:05:be:79:a2:c6:69:4e:85:10:30:99:bf:
fc:4d:b8:1b:ef:9d:81:51:5b:31:43:09:9b:9a:8f:
d7:05:e8:3d:3f:79:f0:e3:70:e4:1a:57:1a:61:b6:
35:c3:c4:36:69:fe:69:24:c5:80:3b:7f:a4:be:b8:
b0:ec:df:0e:1c:ff:b0:e2:e9:c1:1a:9e:f6:36:d2:
4e:6b:99:8e:db:68:67:68:c6:92:63:be:98:b2:ee:
2c:a8:62:30:ec:ea:7f:fd:89:f9:ac:50:b2:b4:47:
05:76:6a:2c:f3:b0:b1:c1:23:76:1f:14:a9:af:c8:
55:c0:d8:f8:f6:ac:78:ec:0e:32:50:cf:2f:4d:6e:
6c:51:69:cc:c8:47:80:28:fe:9a:bf:25:ff:80:81:
ba:6d:8a:9a:c4:fa:a1:aa:9f:10:51:95:b3:53:1b:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:E1:3C:A0:09:49:DE:7D:0C:5C:D7:E5:25:E9:61:11:28:A2:B9
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1-T3hPKAJSd59DFzX5SXpYREoork.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:110::/44
Signature Algorithm: sha256WithRSAEncryption
cd:ae:7e:23:d3:a9:cb:03:fa:05:97:3d:67:6e:e6:da:14:72:
35:d8:f3:6c:ff:8d:ac:88:1a:62:3e:e2:1a:a0:61:37:81:90:
15:d5:07:e9:3e:9f:e5:1e:bd:f2:4f:9b:9a:c4:0f:32:0a:2e:
30:a2:89:00:21:34:b7:e6:ad:0e:65:37:3e:77:c0:34:86:4f:
b4:aa:6b:38:1f:e4:ea:c8:84:ae:0e:b2:36:c1:ba:ac:53:26:
cc:d8:0b:92:14:8d:40:89:b3:57:0e:a9:be:db:d9:5e:80:ce:
68:62:86:7e:d8:a3:64:33:24:ce:4d:a6:cc:b6:44:3e:66:d1:
32:10:50:6c:d7:74:e5:66:51:93:01:26:f6:ae:f3:33:ac:5b:
ab:25:19:52:f6:8b:93:52:72:c4:2a:ca:f8:e2:16:15:9e:9e:
0e:51:03:f6:a0:11:05:ad:79:74:70:5b:c1:71:9f:7b:f9:da:
6c:be:a3:35:15:f4:83:20:ea:6f:43:2c:f1:8c:31:d3:17:d1:
49:6b:06:19:e5:ef:e9:4b:cd:55:fc:de:7e:17:a3:f2:ec:fe:
9f:d9:c8:b1:5c:68:00:b2:0b:24:32:67:90:76:02:83:bb:5b:
6f:96:a7:da:1f:37:fc:99:f8:7e:cf:10:cd:ea:de:ac:2a:63:
cb:29:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:48 2024 by rpki-client on console-fra.rpki-client.org