Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/KyJT3g49aA7ZiJ3TL4qb6fZxaY0.roa
File: KyJT3g49aA7ZiJ3TL4qb6fZxaY0.roa (raw, json)
Hash identifier: 6+7oyJxicgzZjumKjOesO8dRi9hw4UW86D/tHpGN2/s=
Subject key identifier: 2B:22:53:DE:0E:3D:68:0E:D9:88:9D:D3:2F:8A:9B:E9:F6:71:69:8D
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42EC942C2E0AA1EE0125CD127ED8C2
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/KyJT3g49aA7ZiJ3TL4qb6fZxaY0.roa
Signing time: Sun 01 Jan 2023 21:35:34 +0000
ROA not before: Sun 01 Jan 2023 21:35:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212387
IP address blocks: 2a0e:8f02:f04a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ec:94:2c:2e:0a:a1:ee:01:25:cd:12:7e:d8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b2253de0e3d680ed9889dd32f8a9be9f671698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:23:d9:a6:88:b1:64:20:f2:14:ad:03:d1:
18:b4:5b:51:71:c2:d8:89:da:0f:42:0e:a5:53:47:
54:8e:24:24:76:ff:6d:7f:ba:7f:23:e6:b0:f7:c2:
b5:44:4b:4d:c0:15:df:97:fe:87:3c:c7:81:c2:90:
78:d5:0e:20:90:77:02:88:cf:54:cb:55:2f:e5:ae:
93:0f:cf:42:69:78:3c:5a:a3:a1:c3:6e:c5:db:33:
5e:2f:46:c4:e0:37:5d:7a:85:81:74:20:c6:3b:76:
dc:6f:92:88:e7:ce:c0:07:46:82:25:e7:8d:da:dd:
1a:08:93:6f:90:89:18:c4:7f:bd:0d:b9:4c:c7:8c:
09:10:27:8f:c2:10:80:78:29:ac:a0:74:6d:b4:4a:
77:c6:29:ee:72:85:59:80:79:b7:bf:58:24:9a:8e:
9a:e6:25:7a:45:5b:2a:fc:db:98:58:36:06:19:3d:
04:d1:7e:5e:6d:48:c2:8f:77:8b:6f:48:ff:c2:2c:
46:a1:65:36:78:93:bc:7b:b6:99:f9:f6:c7:e5:28:
92:70:45:8b:9e:65:45:51:9c:80:1e:78:47:2f:ed:
a6:85:6f:6c:85:70:ae:51:a5:8e:9a:07:08:22:1d:
8a:dd:f9:ce:e8:64:06:bc:91:52:1d:69:09:d9:ec:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:22:53:DE:0E:3D:68:0E:D9:88:9D:D3:2F:8A:9B:E9:F6:71:69:8D
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/KyJT3g49aA7ZiJ3TL4qb6fZxaY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f04a::/48
Signature Algorithm: sha256WithRSAEncryption
0a:92:fb:83:d5:5e:b1:8b:c7:e3:7a:ff:ed:ec:61:ca:c8:28:
a9:32:a2:f8:40:7a:50:cb:36:2b:3d:a0:92:a6:90:63:a3:7f:
fb:9d:17:15:05:5c:9d:87:b5:42:99:32:54:18:53:1f:c2:d4:
19:82:60:c5:a0:c0:86:fc:a8:d9:85:e4:39:f4:e4:44:9c:b7:
a8:1c:a3:4e:ed:ae:47:75:4f:5c:4a:79:db:cc:45:f1:a5:0d:
5f:4a:37:c9:4c:97:8b:37:c1:8d:61:ec:a5:3d:bf:ac:56:20:
b9:2a:da:63:c4:30:8a:9e:52:5e:be:26:0b:c2:7f:2b:ee:c7:
ea:f3:88:ba:2e:08:a8:cf:81:2b:e7:fc:93:ff:7d:de:dd:8a:
83:29:7d:f6:73:81:61:08:46:17:5c:b8:f8:9d:cd:bc:62:a1:
bc:50:90:ef:85:9d:c9:e6:17:2b:30:e7:85:64:0b:ba:de:79:
00:c3:67:2c:48:aa:74:3e:5e:57:82:88:c8:0e:7d:60:cc:86:
d6:95:e7:71:c0:7c:fd:7a:6b:bd:69:a3:e7:97:73:23:3e:ed:
06:84:75:75:c8:39:70:19:9d:34:d3:3f:e0:f4:e1:ad:f5:e7:
77:e3:4e:dc:46:a5:b3:f6:63:f6:8a:ae:72:f4:1c:a2:d2:42:
19:9c:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:52 2024 by rpki-client on console-fra.rpki-client.org