Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/hJ190gT3fq2hmJC3k5-_LuM2wts.roa
File: hJ190gT3fq2hmJC3k5-_LuM2wts.roa (raw, json)
Hash identifier: zsPbZA2aHD4738z7iMccyWZ749w67C1KT02/80Fazck=
Subject key identifier: 84:9D:7D:D2:04:F7:7E:AD:A1:98:90:B7:93:9F:BF:2E:E3:36:C2:DB
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 018ABCAF43AE6975E282BF17188D4B19A0F6
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/hJ190gT3fq2hmJC3k5-_LuM2wts.roa
Signing time: Fri 22 Sep 2023 11:38:37 +0000
ROA not before: Fri 22 Sep 2023 11:38:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a03:1e84:1900::/56 maxlen: 56
2a03:1e80:303:200::/56 maxlen: 56
2a03:1e84:9261::/48 maxlen: 48
2a03:1e84:9260::/48 maxlen: 48
2a03:1e84:1900:200::/56 maxlen: 56
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:af:43:ae:69:75:e2:82:bf:17:18:8d:4b:19:a0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Sep 22 11:38:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849d7dd204f77eada19890b7939fbf2ee336c2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:bd:f0:05:0b:be:82:5f:f1:c8:ae:63:5f:
0b:06:2d:d3:40:54:85:3f:b5:5a:a1:b3:68:9e:e9:
b3:4f:45:1f:4e:99:b4:74:0b:df:e1:fe:d4:f2:87:
3c:e3:86:fb:8d:fc:a0:2d:5b:ea:de:d2:60:80:80:
b2:5a:ab:25:bb:24:76:91:2b:8a:a3:82:07:3c:6a:
81:46:71:bd:b2:48:c7:6a:39:3c:ef:66:89:34:4b:
9a:7b:7f:8f:ff:49:1c:85:8a:8e:d3:b8:eb:f3:77:
5b:b6:b6:88:87:4e:45:ab:1a:86:2a:1a:92:e5:6a:
6f:8a:71:be:39:dc:74:15:01:7c:02:b4:2b:58:e6:
eb:df:b2:44:33:d7:92:5c:75:87:a7:e8:3f:b1:f7:
b7:f9:7b:37:08:41:5c:04:8f:0a:3e:65:4b:41:77:
18:82:4c:a2:98:42:7b:47:a8:05:4b:53:7e:10:b0:
c4:41:c3:fc:18:5f:d6:5e:46:67:23:33:dc:cf:1d:
7d:ed:ba:a6:b4:aa:a9:df:2d:7f:0a:27:88:2b:b3:
35:0c:c9:e4:ee:a8:7a:c5:40:aa:06:7b:2e:86:44:
d9:f4:b8:c6:c3:f6:c2:16:49:6b:e0:46:f9:dc:ce:
8d:5b:5c:0d:1a:79:89:05:ba:18:1d:15:57:6c:09:
db:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9D:7D:D2:04:F7:7E:AD:A1:98:90:B7:93:9F:BF:2E:E3:36:C2:DB
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/hJ190gT3fq2hmJC3k5-_LuM2wts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1e80:303:200::/56
2a03:1e84:1900::/56
2a03:1e84:1900:200::/56
2a03:1e84:9260::/47
Signature Algorithm: sha256WithRSAEncryption
8a:40:ce:83:eb:c7:6d:83:58:43:69:7f:45:bd:4f:42:da:98:
50:be:0d:b2:3a:4f:c7:37:70:83:92:f4:1c:4f:97:db:d8:1c:
15:99:59:3f:2f:ac:49:4f:55:79:6d:8b:d8:83:b1:d8:bf:02:
74:a0:b9:7c:21:16:88:11:80:d7:ca:8e:ee:7e:c9:ce:0c:29:
a5:d5:fd:2d:cf:9a:7b:98:cc:d4:8f:52:68:77:1a:e9:cc:62:
4c:55:6c:71:7d:84:9f:e9:a7:ee:39:61:41:3d:46:f9:e3:97:
c5:ee:e5:7c:6d:56:3d:0b:a3:bc:65:4d:b4:b8:c4:3f:2e:5e:
3a:18:1b:07:bc:a6:ed:30:9b:2b:f8:77:cb:f6:2e:35:e6:b0:
27:a1:2f:99:f7:af:69:78:bc:e4:39:16:d6:80:10:06:57:f2:
8e:e1:4b:0b:7a:d5:cc:3f:70:af:ad:33:a5:c7:9c:b5:b9:6b:
68:57:57:66:60:d5:95:32:0e:fc:98:20:1f:be:aa:52:e1:fe:
a3:80:d7:1f:58:d9:e9:0d:d0:18:ee:a2:dd:69:8b:5c:42:8c:
34:5d:ab:ec:89:d6:4a:e0:44:96:f2:98:28:81:4c:08:2e:3b:
db:b6:4e:11:03:2d:f5:e1:10:7b:6a:bc:53:39:0b:8b:18:fa:
a3:b4:67:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:50 2024 by rpki-client on console-fra.rpki-client.org