Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_0dszXUEeey8BWNY89dOPXhJWtk.roa
File: _0dszXUEeey8BWNY89dOPXhJWtk.roa (raw, json)
Hash identifier: ooI3pDpQ5LpQ2//iLaLLk+AeMx09yzSSVDZm8tQO1+U=
Subject key identifier: FF:47:6C:CD:75:04:79:EC:BC:05:63:58:F3:D7:4E:3D:78:49:5A:D9
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01857315F7345913F7DC02F0BFC277A59CF2
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_0dszXUEeey8BWNY89dOPXhJWtk.roa
Signing time: Mon 02 Jan 2023 15:24:57 +0000
ROA not before: Mon 02 Jan 2023 15:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60998
IP address blocks: 2a0f:4440:aaaa::/48 maxlen: 48
2a0f:4440:abcd::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f7:34:59:13:f7:dc:02:f0:bf:c2:77:a5:9c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 2 15:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff476ccd750479ecbc056358f3d74e3d78495ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:a2:7c:eb:8f:31:47:37:c8:c8:13:fd:bb:
a6:a8:7b:4c:da:7d:cf:65:f7:44:e8:98:1c:07:a3:
5d:12:e0:8a:91:af:fc:aa:cb:31:4c:a7:dd:f4:74:
32:50:64:33:1e:7e:a7:78:c4:ac:ce:09:4c:6b:0c:
6d:bf:5b:1a:23:a5:a0:b5:2d:af:2a:44:e6:5f:66:
fb:c5:f5:aa:83:c5:d1:47:ca:64:db:b3:72:17:70:
b9:3a:49:db:e7:06:0c:17:bb:42:34:73:41:df:9f:
8a:9f:4d:4d:db:24:6d:fb:79:35:fe:53:37:29:b8:
2a:f3:a0:77:3f:02:f9:29:12:00:11:41:e6:de:9a:
d6:78:b9:56:27:26:52:ac:c8:13:36:e6:5e:89:bd:
c9:1c:42:c3:f3:25:66:5a:5e:33:2b:2e:d6:6f:3e:
eb:f4:51:6b:30:3c:7a:7f:c2:96:7d:7b:9b:bf:43:
3c:d9:5f:eb:51:96:9f:12:31:34:36:3c:23:76:2a:
71:47:82:ee:f9:74:87:8e:f4:36:1f:84:4b:a8:39:
8d:62:fa:35:cd:3c:d0:3a:95:36:32:f6:d3:54:20:
67:4a:2e:b1:70:00:29:d3:b8:96:71:7a:f8:29:1c:
4d:43:50:1a:1f:23:78:7b:cf:07:74:b2:a8:c9:7e:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:6C:CD:75:04:79:EC:BC:05:63:58:F3:D7:4E:3D:78:49:5A:D9
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_0dszXUEeey8BWNY89dOPXhJWtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4440:aaaa::/48
2a0f:4440:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
63:bd:a5:f0:fc:25:6a:63:56:ce:85:7c:3f:b8:92:41:bd:11:
20:4f:13:b5:57:52:53:f3:48:27:d0:fa:4f:bc:0f:ee:37:7f:
e7:a0:40:47:af:e1:21:f8:76:0c:6c:79:ef:0b:f4:71:31:01:
e9:4e:34:57:18:22:32:50:c0:a4:b3:e3:22:95:5e:2f:ad:e0:
ef:1d:60:fd:62:9f:79:0c:fe:63:d5:80:34:f9:fa:79:f0:f3:
26:e2:3b:4b:4e:8c:84:18:00:01:72:0f:50:ec:1e:77:b1:ed:
4b:b2:ad:6a:da:b8:e1:9d:23:ee:87:4e:d2:c9:9b:bd:2d:2e:
37:bd:73:d5:29:01:30:24:44:bd:42:b6:1c:02:e6:82:4d:a6:
02:fe:15:a0:de:77:27:c1:3b:c2:8a:40:38:0c:91:fc:67:92:
45:27:d3:ad:51:42:17:cc:e3:57:7f:83:94:42:d0:0f:66:b2:
9a:db:69:0f:15:a4:56:1a:cc:ce:4c:f2:f5:47:33:e1:13:f1:
d5:47:32:35:bd:92:ef:1d:ee:f9:84:47:db:dd:ac:c2:53:6c:
df:e9:8f:be:da:06:37:6f:a8:7e:5f:a6:48:87:96:56:0e:48:
88:2e:5e:b6:1e:cd:78:a3:74:8f:c9:ac:44:28:c7:d2:a0:94:
03:d2:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:16 2024 by rpki-client on console-fra.rpki-client.org