Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rt3J3x76GBqzAUkeJ3z53AxIw5E.roa
File: rt3J3x76GBqzAUkeJ3z53AxIw5E.roa (raw, json)
Hash identifier: ae8Dcu/P9+Q1Nsdus6IAzfkf6MFXXsxvWsHQahk8+xE=
Subject key identifier: AE:DD:C9:DF:1E:FA:18:1A:B3:01:49:1E:27:7C:F9:DC:0C:48:C3:91
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0186C548E22582B5D169DE6C65C353B5A669
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rt3J3x76GBqzAUkeJ3z53AxIw5E.roa
Signing time: Thu 09 Mar 2023 07:32:13 +0000
ROA not before: Thu 09 Mar 2023 07:32:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211860
IP address blocks: 2a0e:8f02:2220::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:48:e2:25:82:b5:d1:69:de:6c:65:c3:53:b5:a6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Mar 9 07:32:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeddc9df1efa181ab301491e277cf9dc0c48c391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:d9:cd:2e:0c:e8:d2:b9:ab:c0:7e:49:e0:
a3:ff:a7:5a:c2:93:98:07:e3:ae:87:99:e4:c1:87:
7d:71:e6:d4:e5:e1:71:5e:71:eb:79:d0:f7:78:ed:
bb:d1:3b:72:e2:f1:a6:5c:7e:70:de:90:c8:56:58:
05:47:f6:19:26:98:a9:29:f4:63:fb:17:22:d2:d0:
8c:b2:9f:d4:94:12:d7:3b:79:25:bc:2a:76:6e:74:
48:17:c6:0c:7a:8a:c4:c4:2a:bf:bf:5b:4c:73:30:
32:34:28:74:51:71:ab:fe:d6:52:42:c2:9e:5d:13:
ff:46:2e:c4:98:43:8d:0c:23:94:f7:a6:cc:fe:1f:
ec:3f:cc:2e:56:a5:d5:ed:d0:da:63:a0:4a:97:9c:
91:f1:a8:3d:eb:c7:a8:94:91:22:da:9c:f7:bc:9a:
9e:1a:49:ed:94:99:d0:e3:1e:07:c1:a4:82:d6:16:
40:0f:8a:18:00:95:72:2b:3f:83:9a:fd:35:1b:c7:
50:ab:25:80:8a:f9:09:20:53:a9:59:34:25:d8:9a:
59:8f:1f:cd:45:62:aa:bb:ad:3c:fa:6c:45:42:f3:
46:f4:f0:1c:f8:11:9a:f7:44:36:46:d2:1b:91:32:
c1:bd:52:b9:5c:e5:08:c9:c7:f2:71:5b:5f:15:ba:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DD:C9:DF:1E:FA:18:1A:B3:01:49:1E:27:7C:F9:DC:0C:48:C3:91
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rt3J3x76GBqzAUkeJ3z53AxIw5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2220::/44
Signature Algorithm: sha256WithRSAEncryption
62:1d:cd:f4:d8:5b:79:79:7e:0e:e5:ac:7f:ed:ae:91:85:fb:
17:41:f8:68:de:43:0a:29:50:b0:1c:79:81:f7:98:40:ca:24:
99:ba:d0:46:72:2b:44:89:8e:e5:e0:a0:40:f5:c6:77:4d:1e:
1c:4b:94:8f:70:42:8d:76:be:b2:08:35:69:26:6e:48:03:9a:
61:7b:16:26:e0:c8:df:34:1a:8f:5c:63:29:d7:2c:34:f0:67:
91:d3:95:0a:54:3e:0e:ce:6a:da:82:46:8f:a1:8f:38:98:97:
7f:7c:e5:e4:8b:e1:9d:96:ea:f4:7f:03:ce:36:7b:1c:a6:11:
00:63:fd:d0:76:6f:f6:8b:96:f1:7f:95:6d:58:d1:ce:bb:8b:
bc:32:3b:ce:0f:c4:4d:8b:b2:7f:db:21:86:53:5f:65:05:e4:
4b:c7:19:e4:06:b4:06:9a:79:e3:8a:0b:b8:4c:8a:6c:d9:24:
c8:e9:f7:54:6b:d1:96:ba:b9:8c:ca:31:66:77:4f:43:56:cf:
05:bb:a4:4d:79:39:28:a7:9f:d0:57:a6:d1:cd:c3:e1:08:27:
aa:82:b5:17:b9:b2:5e:f5:36:b5:8a:63:2b:54:73:46:a0:3d:
1e:58:d8:06:5b:93:6e:d8:bd:52:68:5c:b3:b0:28:cc:f6:1d:
f6:c8:1d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:52 2024 by rpki-client on console-fra.rpki-client.org