Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hQwkbRJ_yW6NTeikT9Av12Fwp-s.roa
File: hQwkbRJ_yW6NTeikT9Av12Fwp-s.roa (raw, json)
Hash identifier: NNJBWkKWsfa/qRu1s9T3uXQQp1xn0qq93wF9TIAQIAg=
Subject key identifier: 85:0C:24:6D:12:7F:C9:6E:8D:4D:E8:A4:4F:D0:2F:D7:61:70:A7:EB
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01856BC0F796D6AB7490FEAB51E26579A67D
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hQwkbRJ_yW6NTeikT9Av12Fwp-s.roa
Signing time: Sun 01 Jan 2023 05:14:46 +0000
ROA not before: Sun 01 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210625
IP address blocks: 2a10:2ec0::/29 maxlen: 36
2a0c:ab07:8000::/36 maxlen: 36
2a0c:ab07:2000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:f7:96:d6:ab:74:90:fe:ab:51:e2:65:79:a6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=850c246d127fc96e8d4de8a44fd02fd76170a7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:4e:06:9b:b2:1a:56:93:12:ba:2b:17:d6:
91:1e:f0:26:48:ca:1f:51:64:4a:eb:73:28:b2:28:
ea:06:30:8b:d6:af:6e:31:2b:dd:b5:58:71:66:ed:
59:d7:bf:4d:40:6a:fe:41:28:60:3b:e2:a6:67:b7:
58:b5:5e:1a:76:7b:59:a0:db:42:0d:5f:ba:10:3b:
8c:d6:32:30:1b:50:e3:e2:40:3f:79:13:f6:c1:26:
00:bb:ca:ca:4e:3e:97:69:3d:16:f3:71:d2:18:f3:
cf:13:e0:08:f2:d5:05:3f:ac:cc:5b:26:af:d2:dd:
e9:8b:ac:89:40:04:c8:3b:da:d0:51:74:4f:bb:40:
75:00:47:53:f9:36:a9:a9:d2:0c:46:f8:e1:e4:e8:
30:9b:d4:7a:7f:c8:89:39:b5:09:b7:6e:82:4a:73:
bb:49:77:de:94:68:a0:51:18:1c:16:8c:03:18:5d:
8d:12:3a:84:61:4e:5f:06:56:32:fe:b3:a9:49:12:
3a:17:cd:df:96:f5:29:ad:a1:fe:2d:a3:9b:a9:90:
ac:f4:9e:01:1e:ef:80:89:ab:89:fe:33:c8:be:6c:
03:26:d5:7c:8a:30:fe:aa:6f:ed:f8:e5:e6:0c:9e:
6d:b6:ef:98:70:6f:08:d5:a4:60:3d:61:ba:2f:02:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:24:6D:12:7F:C9:6E:8D:4D:E8:A4:4F:D0:2F:D7:61:70:A7:EB
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/hQwkbRJ_yW6NTeikT9Av12Fwp-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ab07:2000::/36
2a0c:ab07:8000::/36
2a10:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
77:a7:98:12:f2:2e:58:21:73:13:24:f3:96:7a:eb:e2:47:bf:
e6:44:48:d8:8e:0f:ad:8f:80:03:34:06:0a:2c:32:a0:9c:76:
4c:b2:90:9e:42:12:65:df:ba:0a:36:c4:94:11:64:13:16:8b:
29:b2:3c:09:54:52:aa:4a:a2:ab:d7:0e:45:42:4b:58:ac:bb:
72:bd:68:df:d3:ed:57:40:bf:d0:bc:e9:9f:5e:7e:15:a8:66:
1f:e3:25:88:31:ce:b2:b0:aa:37:ac:2a:f1:c7:18:51:24:b6:
8d:ce:5c:92:c5:c8:c9:a9:d6:10:e4:55:62:b2:4b:e3:22:ca:
cc:6b:27:34:a0:cd:32:a0:4f:88:ec:9d:32:1b:23:bb:78:95:
21:a0:c6:3e:87:e5:cc:88:b6:b7:d0:03:23:46:a9:6a:11:20:
4a:65:b5:ff:65:a5:e8:28:fd:4c:70:f5:3a:9d:84:15:d5:f5:
83:1a:ea:7e:4c:32:a9:a4:23:82:aa:81:a1:d6:38:ef:9b:87:
7b:83:59:86:04:7f:3f:55:23:7a:5a:a1:0c:05:f3:e9:2e:f7:
14:45:09:84:30:ca:49:94:d4:eb:13:ed:3a:2b:6f:85:ae:42:
ca:74:b2:bf:3a:ce:26:65:01:9c:9f:db:8a:17:be:50:55:4c:
13:48:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:36 2024 by rpki-client on console-fra.rpki-client.org