Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/f_LDaJxuKmiQXDghHTGymY6Aee0.roa
File: f_LDaJxuKmiQXDghHTGymY6Aee0.roa (raw, json)
Hash identifier: BIk3h5/M+aMRYJfvnn0G/JVjxCVhAMy3prWD4L3OIgo=
Subject key identifier: 7F:F2:C3:68:9C:6E:2A:68:90:5C:38:21:1D:31:B2:99:8E:80:79:ED
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E355F4589C0DD98D08E4557956C6D
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/f_LDaJxuKmiQXDghHTGymY6Aee0.roa
Signing time: Mon 02 Jan 2023 06:14:43 +0000
ROA not before: Mon 02 Jan 2023 06:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13830
IP address blocks: 2a0c:b642:1a02::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:35:5f:45:89:c0:dd:98:d0:8e:45:57:95:6c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff2c3689c6e2a68905c38211d31b2998e8079ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:5d:1d:18:8d:9e:af:95:1c:21:95:31:71:
df:f4:f3:12:51:1e:a8:75:b7:80:ff:44:40:8e:97:
84:c4:0a:fe:e3:ba:4f:e9:c2:e3:6d:59:29:50:0e:
07:f3:3b:30:91:f4:c8:46:6e:8e:9c:8b:6e:6c:6f:
d9:ad:40:c8:fc:b1:fd:1d:88:09:ba:a4:b2:f1:26:
11:03:2c:18:6f:91:28:19:11:a4:bc:19:5c:b7:53:
ae:35:be:fd:2c:65:b8:93:61:48:08:13:a5:3a:ab:
ab:e8:a8:45:2d:a8:38:d0:a7:67:a6:b1:21:d4:4f:
98:65:11:ae:dd:da:74:30:2e:24:ba:f2:f5:f6:6b:
8e:71:b4:e5:91:42:67:60:ec:58:15:8f:4a:4d:4d:
7c:1d:dc:4f:ea:15:12:ee:9b:5a:e4:9d:00:70:c6:
79:1d:fd:47:d3:26:dd:9b:c4:98:06:a3:42:9a:aa:
14:8a:80:38:c4:01:85:5d:fe:ac:75:26:db:a0:79:
63:46:60:e0:2b:e9:81:1a:49:6c:59:ff:e0:b5:79:
08:87:6f:9f:b7:7b:69:92:ce:f1:de:68:f6:2d:51:
d9:5b:0e:e4:8a:3d:09:13:84:60:49:09:e9:9c:52:
c6:99:07:f8:6e:95:69:9c:12:01:fa:07:1d:bb:ab:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:C3:68:9C:6E:2A:68:90:5C:38:21:1D:31:B2:99:8E:80:79:ED
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/f_LDaJxuKmiQXDghHTGymY6Aee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a02::/48
Signature Algorithm: sha256WithRSAEncryption
24:7b:57:d0:48:27:19:7e:4c:4b:ed:70:55:84:f0:f8:a9:4b:
b8:30:72:f3:5e:fe:52:29:07:98:7b:c8:bf:03:d2:60:6b:a6:
04:e5:0d:ff:a3:80:b8:ae:ee:63:db:ff:fa:c1:c6:db:93:44:
0d:aa:78:5c:c0:0d:e4:05:bf:99:1d:83:3b:13:06:1e:d4:cc:
6d:a8:7c:8e:f9:d5:36:ce:89:0c:24:2b:14:aa:a3:65:83:77:
32:aa:a7:4a:a8:8a:19:04:62:ff:7a:bd:7c:65:43:0d:65:93:
f9:cb:8d:59:6a:2e:ff:3a:3d:9c:78:18:39:e5:03:ba:b7:3b:
f0:3c:a5:0e:4b:03:6b:b6:8b:fd:cc:6a:67:f6:f4:b3:e2:49:
18:76:37:34:8d:d0:b1:52:1a:b5:38:1c:eb:df:a2:a1:67:93:
2d:d4:9e:b8:35:13:8c:94:99:9f:3d:bb:d8:f9:a7:05:3a:b5:
26:06:5b:03:89:6f:08:f7:1f:95:54:0c:ac:2f:93:9d:29:4c:
3c:32:a7:9f:c0:79:b5:da:85:15:94:db:33:98:8e:53:88:c2:
d4:00:54:83:47:20:0e:81:17:76:2a:87:98:81:db:13:22:79:
ee:99:80:7c:6f:68:19:3f:eb:03:ac:20:e2:e1:23:8d:a6:0b:
53:a4:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:01 2024 by rpki-client on console-ams.rpki-client.org