Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4bzn0xnriFuoylijoqeGGEKtxec.roa
File: 4bzn0xnriFuoylijoqeGGEKtxec.roa (raw, json)
Hash identifier: Uuq89Em7hmOTk0o9ODRW18rz3uFz+rUiSIHVNl1Pl8A=
Subject key identifier: E1:BC:E7:D3:19:EB:88:5B:A8:CA:58:A3:A2:A7:86:18:42:AD:C5:E7
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42E0319333F4E3A0996925A5A02C0A
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4bzn0xnriFuoylijoqeGGEKtxec.roa
Signing time: Sun 01 Jan 2023 21:35:31 +0000
ROA not before: Sun 01 Jan 2023 21:35:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211581
IP address blocks: 2a0e:8f02:f020::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e0:31:93:33:f4:e3:a0:99:69:25:a5:a0:2c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1bce7d319eb885ba8ca58a3a2a7861842adc5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:be:d4:07:67:56:c3:6a:6e:1e:80:c6:03:0f:
81:41:68:4d:17:f0:f7:c6:78:b5:c8:8e:c0:c2:0d:
d4:02:87:02:b7:a8:d4:c4:84:53:9c:a7:48:37:19:
8a:01:7b:d0:a7:ea:25:b7:88:63:3c:53:76:f5:76:
4e:00:2b:f9:ed:ec:9e:70:e7:79:b2:aa:5f:9d:55:
70:3f:ce:09:6f:76:e8:00:0c:f2:b2:f5:29:54:8e:
26:ff:99:22:b6:7e:5f:87:88:cd:60:99:98:00:f3:
05:23:9f:70:68:3c:b6:5a:36:50:4e:8a:68:36:79:
9b:62:a7:37:b3:50:25:b4:3c:33:fd:c3:34:1d:01:
cb:d4:27:95:b5:9f:63:3a:94:0d:91:75:92:f9:78:
0a:8f:43:61:5e:4f:9b:c3:a7:5f:db:f8:62:85:d7:
2d:7b:89:95:14:18:0e:3b:55:90:2f:bb:43:87:16:
1f:b0:d2:e9:d9:45:95:b5:36:fa:a2:86:8a:80:30:
ec:3c:40:a8:17:54:23:31:f9:b1:d4:cf:b3:86:ef:
8f:3e:55:56:1b:75:3d:ab:94:06:ad:69:c4:eb:4c:
e4:6e:e8:c5:a4:22:24:53:63:f4:54:ce:88:f9:35:
f4:a8:e0:cc:a2:84:a1:2f:05:1d:62:40:50:c3:8e:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BC:E7:D3:19:EB:88:5B:A8:CA:58:A3:A2:A7:86:18:42:AD:C5:E7
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4bzn0xnriFuoylijoqeGGEKtxec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f020::/48
Signature Algorithm: sha256WithRSAEncryption
49:69:33:ab:e0:df:4e:5b:aa:c0:25:12:2e:e7:f0:9d:fa:bc:
14:db:76:09:4e:b8:2c:c4:82:a4:b5:ee:f4:31:96:5c:b7:04:
7a:d0:30:a8:6a:73:a2:3b:28:4f:e1:b0:af:ed:98:da:a2:9e:
33:57:6f:2e:c7:b8:51:53:23:74:f0:8c:b0:bd:57:52:61:5d:
da:f5:a3:d8:fe:3a:cc:b4:16:44:fe:2d:9e:60:b4:f0:6a:fd:
a0:7a:a4:57:fd:6a:fa:2c:27:4f:3a:a7:9d:3c:f1:75:01:57:
70:32:90:d1:f9:7a:43:c7:0c:e5:3f:fd:6d:b5:41:f9:47:6b:
ff:ab:6f:4a:38:1e:2f:27:a7:48:82:24:9a:bf:76:7e:0b:7a:
b3:fd:12:79:c4:50:3a:32:de:09:11:30:1f:47:1f:87:81:6c:
a7:15:3d:e5:21:25:e5:2d:b3:f3:39:5c:ac:32:ea:22:1a:70:
37:53:fc:b0:89:3b:74:75:0c:26:96:f6:e3:57:04:a6:7f:b1:
76:03:25:3b:eb:aa:78:df:2a:b7:b0:35:9c:9a:5a:e2:38:e0:
90:75:3c:9e:99:e5:aa:b2:65:7b:74:29:31:9b:70:ea:e8:c2:
e6:01:55:be:85:7c:f3:29:4c:ab:88:07:47:36:a0:35:96:56:
e0:8f:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:52 2024 by rpki-client on console-fra.rpki-client.org