Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/eTq977PiW1yom8YWwOuEj0ufsC4.roa
File: eTq977PiW1yom8YWwOuEj0ufsC4.roa (raw, json)
Hash identifier: y5gn8rJ23CzqljD+IqMIeMqVgFTyKWWmeLosuSWi6TI=
Subject key identifier: 79:3A:BD:EF:B3:E2:5B:5C:A8:9B:C6:16:C0:EB:84:8F:4B:9F:B0:2E
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 01856F1D821F709A1EAE19D008D9B4414C1D
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/eTq977PiW1yom8YWwOuEj0ufsC4.roa
Signing time: Sun 01 Jan 2023 20:54:42 +0000
ROA not before: Sun 01 Jan 2023 20:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 2a0a:a200:18d::/48 maxlen: 48
2a0a:a201:21c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:82:1f:70:9a:1e:ae:19:d0:08:d9:b4:41:4c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 1 20:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=793abdefb3e25b5ca89bc616c0eb848f4b9fb02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:fe:e7:72:a8:39:4a:1e:23:a0:d1:1c:c4:
fb:bb:6e:a2:45:a0:2f:a5:d0:2a:5b:e3:49:b5:e5:
f4:69:c1:3f:8d:3b:8c:ea:24:20:a7:97:55:6e:53:
7e:ab:d8:f4:73:8a:85:9d:57:45:62:da:3f:48:bf:
d8:cf:54:00:59:c3:59:28:d5:83:e6:39:84:58:7b:
20:5a:85:e0:21:57:1a:1e:a2:b1:a1:ef:ca:3a:05:
80:d5:10:40:0d:60:34:64:10:7b:93:15:b5:fd:a5:
9b:60:2a:50:fe:a7:44:c7:00:89:c5:99:56:62:e4:
88:19:d4:69:20:21:62:13:b7:fa:00:87:6a:69:91:
53:06:35:e2:83:e1:90:e2:e4:38:a4:6d:18:dd:44:
47:a8:b3:c9:49:cb:8f:ce:29:0a:26:23:46:64:7b:
01:b9:75:d7:4d:12:7b:ee:03:e2:14:ef:a1:30:46:
62:b0:d5:0d:a6:58:a9:64:67:32:82:a7:93:5d:b1:
5c:a4:12:3e:e1:c6:0a:b9:32:aa:63:70:06:10:03:
7e:ae:9c:82:de:6f:82:66:bf:9a:62:a1:c9:ac:26:
20:7b:f6:ee:a6:2a:7c:67:88:ae:aa:a7:88:6f:03:
56:5a:da:a1:10:91:04:ac:3f:48:20:32:5a:3c:f6:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3A:BD:EF:B3:E2:5B:5C:A8:9B:C6:16:C0:EB:84:8F:4B:9F:B0:2E
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/eTq977PiW1yom8YWwOuEj0ufsC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:a200:18d::/48
2a0a:a201:21c::/48
Signature Algorithm: sha256WithRSAEncryption
a2:e6:22:c2:f6:c1:5c:a2:aa:4f:51:c4:4c:1f:1d:10:c0:cf:
7b:3f:0a:f2:b9:00:5a:05:7c:ee:99:fc:98:7c:9b:59:0c:a5:
99:1f:8c:7a:dc:bb:37:71:91:57:b6:d5:b8:58:58:8e:a7:fa:
cc:04:15:1c:c6:2a:f3:e5:32:db:e8:35:e1:c1:71:06:8d:c2:
24:c7:15:a2:d6:42:cc:5b:10:b1:37:bb:f1:f6:d9:cc:a3:eb:
de:0f:eb:75:d9:0c:6e:d5:44:c5:8f:22:a1:23:5e:24:02:df:
f1:50:2c:cc:2b:f5:84:e9:80:df:a6:b2:cc:58:57:95:67:0a:
64:9a:be:54:01:81:68:ab:04:ea:07:aa:4a:58:7a:bf:ec:a7:
91:a7:d9:6b:46:96:aa:48:fe:bc:05:bf:67:4d:aa:90:2f:a7:
4d:32:ae:63:b6:cf:c7:73:a8:b0:3b:80:59:64:1c:9f:dd:aa:
38:ea:0b:dc:d8:11:40:1d:58:bf:97:75:24:40:60:b8:6e:5b:
57:f4:44:bb:4d:cf:53:a1:22:76:12:32:4f:0a:33:68:90:85:
f3:23:56:08:44:69:8a:f3:90:fe:ae:be:c1:8e:2a:44:be:cc:
9e:e8:7a:af:81:e5:0e:5a:cb:14:ff:44:67:cd:01:46:bc:59:
2b:16:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org