Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/vHv60Si26cWhQmEoSru2GDLAOlE.roa
File: vHv60Si26cWhQmEoSru2GDLAOlE.roa (raw, json)
Hash identifier: 9ckhgAAF9K8aNijIIc9g7UdgBFvei9QzYM00QR7GyIg=
Subject key identifier: BC:7B:FA:D1:28:B6:E9:C5:A1:42:61:28:4A:BB:B6:18:32:C0:3A:51
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0189B0FD249573541E5A270D63AACAA52B95
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/vHv60Si26cWhQmEoSru2GDLAOlE.roa
Signing time: Tue 01 Aug 2023 12:05:27 +0000
ROA not before: Tue 01 Aug 2023 12:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202564
IP address blocks: 2a07:3d80::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:fd:24:95:73:54:1e:5a:27:0d:63:aa:ca:a5:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Aug 1 12:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc7bfad128b6e9c5a14261284abbb61832c03a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ed:6c:b2:6e:21:db:7c:e4:1c:58:d9:8f:4f:
46:52:68:ba:db:28:79:8f:f4:d6:af:df:06:d2:95:
16:d5:e3:20:08:ee:ac:65:84:31:0a:c2:12:41:8b:
57:96:c2:48:f3:36:91:87:2d:81:99:3c:41:9b:b5:
f4:1c:62:54:57:cc:54:48:04:ab:b6:47:de:8c:d5:
37:f4:97:26:e5:c3:54:eb:b7:19:e8:82:4b:cf:81:
77:b1:17:9c:d9:8c:0c:70:c0:4f:34:6e:7e:d0:9d:
29:e3:da:e9:29:56:75:93:fb:a6:6b:82:df:90:84:
b0:bd:12:44:9d:c8:26:fe:66:3d:96:43:48:f5:0f:
74:e4:0c:e6:c0:66:71:88:b6:16:ec:9a:31:05:75:
5b:7a:81:97:26:11:1f:2d:0a:d9:02:20:00:fe:60:
57:47:8b:47:d9:e6:22:9c:93:d0:d9:48:94:2f:f5:
4c:e3:ab:f3:28:a8:47:55:6b:5c:b6:78:8e:2b:48:
42:92:e3:6c:6d:e1:16:9e:ad:8f:10:c1:b2:d7:56:
82:cd:b4:46:a5:85:29:94:4f:7f:09:78:09:27:40:
6d:64:93:fc:af:03:1a:f6:54:9e:c3:e4:ab:dd:9b:
de:b6:20:b3:96:84:e2:c8:73:f0:fc:af:bd:16:d1:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7B:FA:D1:28:B6:E9:C5:A1:42:61:28:4A:BB:B6:18:32:C0:3A:51
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/vHv60Si26cWhQmEoSru2GDLAOlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
6b:7b:10:42:21:a1:40:5f:c9:65:90:00:94:06:21:e8:3e:f5:
62:32:32:87:78:3d:1e:61:e6:c9:22:1f:3c:21:df:e5:ff:b3:
a5:2a:b7:01:1a:e7:67:ff:39:75:70:28:fb:ba:70:34:0d:0b:
6d:95:bb:5b:1e:50:d1:e6:48:9e:91:c9:91:36:88:84:8e:36:
f8:f9:fb:f9:7d:cf:81:a5:da:1b:7a:1e:85:12:db:50:98:b0:
8d:0f:61:41:94:f0:b6:f3:92:e3:46:87:97:b8:82:24:f7:d7:
e2:d6:76:c1:f3:aa:6d:9a:c9:7e:7c:be:21:0b:86:82:18:37:
23:41:80:73:9d:c0:f8:d1:5c:41:59:a5:4a:80:7f:07:1f:16:
7a:ea:d2:fb:59:b4:90:f8:ea:64:38:62:f2:44:5d:2e:9e:61:
50:d0:05:a0:0a:00:4d:25:21:13:5b:af:2b:c7:05:6b:cb:1d:
06:f7:98:85:51:c0:66:c4:c9:d4:68:04:88:42:61:82:38:5d:
0c:ea:5c:e7:80:81:67:40:3c:1d:1e:cc:9d:e4:ca:b3:d3:e5:
53:62:2e:29:f6:66:05:50:f6:5c:92:3e:56:3e:b8:03:db:27:
07:a8:a2:d3:4a:cc:5a:4a:58:d2:59:f0:ad:7b:d0:5b:90:73:
fb:e0:c3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:00 2024 by rpki-client on console-fra.rpki-client.org