Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/RxNFdhhsFYbttVxaYlZlFoH3UZU.roa
File: RxNFdhhsFYbttVxaYlZlFoH3UZU.roa (raw, json)
Hash identifier: jfPtaIOxKRcOrnoXH8OfeT4w8ExZv8voqzSiHw5i7hI=
Subject key identifier: 47:13:45:76:18:6C:15:86:ED:B5:5C:5A:62:56:65:16:81:F7:51:95
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01857227FD4B20FD464075CCCC870193BFE3
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/RxNFdhhsFYbttVxaYlZlFoH3UZU.roa
Signing time: Mon 02 Jan 2023 11:05:01 +0000
ROA not before: Mon 02 Jan 2023 11:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211617
IP address blocks: 2a10:4646:40::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:fd:4b:20:fd:46:40:75:cc:cc:87:01:93:bf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 11:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47134576186c1586edb55c5a6256651681f75195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:49:de:e8:0e:7d:94:68:e0:0c:b1:df:8b:
bf:c0:5d:0d:76:3d:e8:c6:d2:89:d6:00:eb:fb:c0:
90:5f:52:a4:0f:9d:5e:20:d2:da:a9:28:ca:bb:26:
39:5d:15:f2:4f:5a:82:6a:8a:e5:11:b5:d6:35:c1:
8b:ce:e9:fe:c3:73:95:72:09:ec:26:c1:7e:c0:b7:
de:fa:80:88:14:ae:4f:d0:0e:3d:20:39:80:d2:db:
4e:c0:92:88:80:be:99:6b:4f:f8:50:b5:77:8a:95:
30:88:97:ca:26:5f:fa:5c:34:8c:81:24:4d:7f:62:
09:d4:ca:2b:dc:b4:93:7e:0d:9f:15:02:8b:0b:1e:
b5:7d:7e:b0:d4:e6:3a:9b:e3:0d:75:7b:2a:ee:87:
34:d2:33:76:4c:2d:a5:5d:ca:af:c1:c8:3a:a3:56:
b1:ef:09:79:d2:1a:24:35:ab:54:7d:b3:c9:11:06:
e5:52:65:24:80:8e:2e:a3:8c:20:1f:54:1d:47:78:
75:aa:21:c7:fe:ec:f9:a7:7a:58:3e:ee:d7:96:f9:
56:5e:8c:2d:28:45:01:92:a9:57:02:7c:7e:80:98:
da:f4:59:15:c3:ab:02:f9:35:cd:e2:c2:1f:26:70:
ac:b9:44:95:3d:70:08:06:95:35:16:5c:d5:54:db:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:13:45:76:18:6C:15:86:ED:B5:5C:5A:62:56:65:16:81:F7:51:95
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/RxNFdhhsFYbttVxaYlZlFoH3UZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:40::/44
Signature Algorithm: sha256WithRSAEncryption
6b:7f:49:1d:45:b2:d5:68:ad:26:d1:3f:d6:c5:2a:57:3a:cd:
1a:49:61:0c:a6:73:67:e2:04:23:b8:3b:f3:bf:5f:c7:22:f0:
d1:9a:0f:d3:40:44:eb:f7:c0:91:5f:c0:2f:0c:59:45:5d:6a:
f8:66:32:6e:0d:27:6f:2c:0d:41:6a:a5:99:ef:dc:89:35:77:
f5:a1:bf:7f:8c:db:6f:d8:2b:13:b9:a0:49:a2:fa:15:d2:fc:
f1:48:44:2c:28:5b:96:2a:1d:f7:1b:c6:db:c0:4d:70:30:ed:
a1:93:19:4d:0e:f6:5d:fa:7f:19:fc:08:f6:eb:d1:f1:a2:2d:
88:b5:a6:36:73:ae:9a:09:c5:1f:28:b8:e0:ca:39:d1:57:20:
a6:41:e5:65:93:9c:63:14:11:dd:24:ee:69:3d:40:5f:80:5c:
b4:d9:63:eb:72:fe:2a:6a:34:94:24:42:cb:90:bb:7f:62:77:
ba:29:af:db:55:7e:91:fd:f5:68:8b:f9:b2:07:de:30:15:bf:
1e:7d:9a:88:8e:0b:44:d7:f6:c4:66:20:fb:eb:11:04:69:9a:
1b:f5:99:a3:b5:52:08:a8:49:dd:12:d5:58:66:26:5b:9b:3f:
37:d9:77:cb:6f:7a:07:3d:43:5e:c8:9f:8d:7e:d3:3b:12:d0:
75:10:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:48 2024 by rpki-client on console-fra.rpki-client.org