Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rHj1B_8JrrVMBQqSS2FiFg8TUPA.roa
File: rHj1B_8JrrVMBQqSS2FiFg8TUPA.roa (raw, json)
Hash identifier: w4zUO2Q0jTC4ONSZp1Bsu0ZTTZgdp1OsnykahsTnFSU=
Subject key identifier: AC:78:F5:07:FF:09:AE:B5:4C:05:0A:92:4B:61:62:16:0F:13:50:F0
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42F22FF3C5A0562EBF935A94B83C73
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rHj1B_8JrrVMBQqSS2FiFg8TUPA.roa
Signing time: Sun 01 Jan 2023 21:35:36 +0000
ROA not before: Sun 01 Jan 2023 21:35:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213021
IP address blocks: 2a0e:8f02:2010::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:f2:2f:f3:c5:a0:56:2e:bf:93:5a:94:b8:3c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac78f507ff09aeb54c050a924b6162160f1350f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b2:4a:d9:d3:4e:96:c7:62:12:8e:a0:39:c2:
91:f2:71:a3:ef:08:6f:b9:ce:ec:2c:51:e7:f7:80:
a8:1b:d1:24:38:57:d8:65:fe:8f:09:8c:87:d5:d1:
9c:6c:6b:01:7d:a4:bb:07:96:b2:4a:9e:c8:be:7d:
d8:72:71:18:e9:9a:4b:61:78:2c:f9:38:e9:8d:8f:
1a:07:19:16:34:65:10:82:58:98:41:08:6e:e1:7f:
bc:38:37:f0:49:57:89:68:6c:28:f7:c2:ba:88:31:
ff:95:79:33:c7:74:94:e7:80:b7:aa:1d:ed:3b:7c:
e7:4c:89:18:bb:94:d6:98:63:ce:9e:72:02:9b:01:
6c:10:34:b5:d1:12:8e:7c:99:0a:e4:c3:bd:58:ab:
f2:b3:c5:78:13:04:cc:29:f9:8c:59:57:a7:5f:f1:
73:d0:84:d7:85:e3:5a:22:3f:55:22:b8:e9:d3:1f:
3f:be:c6:62:7e:50:3e:b8:34:f2:16:09:5e:00:30:
ae:d3:ab:da:9d:22:82:15:fc:77:fa:75:56:24:7c:
16:4b:3c:9e:0b:6e:17:23:fd:5a:8d:0c:72:fb:7a:
07:de:09:b7:d1:6f:a1:06:09:82:a2:ea:3a:db:1c:
41:eb:ac:4d:ff:5a:a0:3b:a1:9c:c1:3c:53:e6:cc:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:78:F5:07:FF:09:AE:B5:4C:05:0A:92:4B:61:62:16:0F:13:50:F0
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rHj1B_8JrrVMBQqSS2FiFg8TUPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2010::/44
Signature Algorithm: sha256WithRSAEncryption
47:71:bf:8d:0f:bc:b5:c4:e5:85:5a:12:c9:01:77:fc:20:02:
8a:e2:f9:0f:a1:09:25:ea:96:77:95:ce:9f:c8:ab:40:c9:29:
5c:2d:8e:76:5a:95:c8:9f:e1:80:d8:e9:45:9d:69:0c:a3:42:
d1:3d:e7:f6:cb:66:d6:55:79:b9:cd:3a:7d:6f:8c:2e:ab:ad:
2a:7a:db:50:bb:8b:66:b3:c6:31:94:92:b4:9a:2f:6f:b4:0e:
c0:72:aa:70:74:e3:f4:8e:d0:6a:7e:4f:28:a3:2e:b8:87:fb:
f7:2e:b7:04:de:a2:a6:f9:48:0f:6c:38:f3:ba:2f:37:79:67:
4c:04:6a:8e:54:cf:a7:c5:d1:38:9d:98:6c:2e:4e:a5:10:73:
0d:c6:a3:5d:49:75:2d:5f:79:23:01:72:dd:57:9f:7e:ef:ff:
9d:da:d6:0f:e0:ee:da:6e:d0:84:ce:15:6b:13:b2:85:96:ba:
8d:da:5d:36:00:2e:72:23:15:c6:e6:38:a1:81:17:35:fe:93:
12:e4:76:6f:1a:37:46:cd:d6:23:73:3b:54:fc:cb:d6:87:14:
aa:ed:77:76:f4:66:25:b2:6d:26:85:05:84:f2:be:bb:d1:0d:
72:e7:b5:62:01:72:93:d0:56:58:f8:8d:9a:68:3e:58:9d:0d:
f2:96:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:52 2024 by rpki-client on console-fra.rpki-client.org