Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/En6SeeMybb1jvUVfNInYt3n6TQk.roa
File: En6SeeMybb1jvUVfNInYt3n6TQk.roa (raw, json)
Hash identifier: 2UseblUqv71QKKqPi5s4cQa33dYnzndW6eJ5bU5wuWc=
Subject key identifier: 12:7E:92:79:E3:32:6D:BD:63:BD:45:5F:34:89:D8:B7:79:FA:4D:09
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018598A837F816790508E2F9CB5C3713AB3F
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/En6SeeMybb1jvUVfNInYt3n6TQk.roa
Signing time: Mon 09 Jan 2023 22:30:39 +0000
ROA not before: Mon 09 Jan 2023 22:30:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49192
IP address blocks: 2a0e:8f02:2200::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:98:a8:37:f8:16:79:05:08:e2:f9:cb:5c:37:13:ab:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 9 22:30:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=127e9279e3326dbd63bd455f3489d8b779fa4d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:af:1b:b0:84:d3:f0:b6:f7:55:ca:d9:30:e7:
67:53:62:71:83:3e:58:6d:03:e1:bb:55:76:1f:ba:
9b:13:d4:13:20:74:98:7f:f8:e3:e2:43:be:ed:02:
96:ce:0b:7f:24:50:32:cb:df:f5:ef:53:c0:0d:61:
6a:44:c2:38:38:34:b7:8f:d7:9d:ef:e1:98:56:0b:
cd:9b:19:e9:ac:79:6d:29:4a:4f:c4:d7:05:b5:61:
8e:51:9f:af:86:41:21:21:a0:ea:fd:58:d8:1d:a8:
20:81:39:18:2e:70:12:36:08:a6:07:fc:a7:ef:6f:
c8:2d:fe:c9:f5:06:bb:b9:eb:59:59:e0:06:ae:82:
5b:7b:75:3a:1f:39:60:03:2d:9e:30:9c:b2:4c:99:
a9:4a:da:97:e6:d6:26:5f:aa:09:83:33:96:54:e2:
95:54:41:54:3f:b7:cb:37:74:96:66:da:0c:57:d5:
79:b7:d3:6a:38:aa:a0:17:41:8f:c4:a5:8c:50:2c:
d6:5c:2a:36:64:1e:dc:68:43:ad:a8:49:2d:8f:08:
eb:4c:6a:c8:b6:63:68:22:27:9d:ca:5d:11:73:38:
92:92:e1:7e:63:45:bb:19:ec:7a:7e:c4:4a:7e:23:
9e:38:8c:e0:ea:9f:55:bc:fa:04:65:36:6f:37:e7:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7E:92:79:E3:32:6D:BD:63:BD:45:5F:34:89:D8:B7:79:FA:4D:09
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/En6SeeMybb1jvUVfNInYt3n6TQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2200::/44
Signature Algorithm: sha256WithRSAEncryption
88:b0:4d:2d:a5:58:47:91:c5:7c:a6:f8:80:57:57:d0:f4:dd:
7a:af:38:62:01:65:60:b6:15:ea:52:d1:7d:95:00:54:85:11:
e6:18:ae:b9:f9:a8:5e:5e:ce:db:90:65:89:c5:eb:ae:5b:97:
1c:5f:12:cd:46:8b:31:1f:ab:69:b0:56:c1:9a:f0:19:d0:8d:
77:fa:ce:d3:67:bb:4f:5c:1e:e5:fb:16:70:fe:56:70:f9:8c:
af:fc:58:b1:0e:43:83:bc:49:f0:dc:c7:27:29:c1:bf:a3:ae:
ae:70:bf:7b:8a:ad:3f:95:4c:0b:e2:35:18:00:f1:f2:be:13:
ef:2d:5c:3e:38:fc:04:d1:9f:df:9b:92:8b:2e:62:7f:53:b7:
0d:09:60:c0:22:b7:f9:81:7d:26:5d:2d:b0:f3:1d:8d:0e:3b:
85:66:cc:df:d9:4b:75:ec:25:d3:24:60:d3:9b:10:aa:13:49:
ff:bf:5c:1c:36:58:77:aa:ff:9c:56:5c:9a:62:69:0e:31:e9:
8b:7b:2e:b8:7c:72:cd:fb:d9:e1:c7:46:7a:ee:b7:89:c6:68:
d9:b5:5c:93:44:4f:0d:ec:e1:45:6a:c2:fd:0c:1b:72:49:39:
70:af:f2:cc:ee:20:93:b2:d7:d6:2a:21:d7:40:90:c3:e2:a9:
88:0c:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:52 2024 by rpki-client on console-fra.rpki-client.org