Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/x6FDGKRI9gxeuknZDHSwbB5MgXE.roa
File: x6FDGKRI9gxeuknZDHSwbB5MgXE.roa (raw, json)
Hash identifier: XOTN1KIwAc/rd4hVWkSZaHgwZsqltIR3W+DQ+rb6yFw=
Subject key identifier: C7:A1:43:18:A4:48:F6:0C:5E:BA:49:D9:0C:74:B0:6C:1E:4C:81:71
Certificate issuer: /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Certificate serial: 01856F1DA0E0353908CBBE5CB576A387820C
Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/x6FDGKRI9gxeuknZDHSwbB5MgXE.roa
Signing time: Sun 01 Jan 2023 20:54:50 +0000
ROA not before: Sun 01 Jan 2023 20:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a02:5320::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:a0:e0:35:39:08:cb:be:5c:b5:76:a3:87:82:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Validity
Not Before: Jan 1 20:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7a14318a448f60c5eba49d90c74b06c1e4c8171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:01:76:43:ea:07:1e:56:4b:b9:85:52:38:
aa:ab:83:66:73:20:b4:27:a1:c6:04:45:d5:3d:bb:
75:f7:61:9e:1d:7c:09:68:21:df:e9:ab:93:34:01:
f6:94:6a:5d:16:c7:cb:a8:4e:66:93:de:65:a1:98:
98:3d:78:53:32:39:bb:8b:34:9f:99:ad:11:2f:e3:
b9:31:2b:32:63:27:77:ef:79:c7:df:81:e4:43:54:
c2:98:05:50:1e:fb:34:4f:10:3c:99:b2:c8:2b:a8:
44:f9:4b:34:a1:f3:93:1d:99:11:6a:1f:96:bf:3f:
77:3b:53:5e:17:ae:62:15:88:7b:cf:04:64:6b:17:
02:02:e5:5f:27:76:21:d0:2b:fb:49:e5:d1:ce:2d:
44:2a:18:2b:d7:36:23:fa:ab:1c:94:25:9c:89:15:
4b:30:5c:69:9c:ad:a7:66:91:f8:b9:f9:16:76:71:
df:43:97:51:6f:24:34:ff:f1:a0:f6:9c:fb:a6:59:
71:37:cf:a7:76:03:4b:66:e2:6a:b7:7f:dc:8e:c4:
55:d2:f1:47:50:d0:09:5b:a3:ea:91:51:16:44:20:
af:30:75:e7:8a:ba:06:c6:8f:5f:f2:f9:a5:f3:b3:
51:06:ea:c9:52:18:e6:13:3a:6d:de:e8:7e:48:da:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:43:18:A4:48:F6:0C:5E:BA:49:D9:0C:74:B0:6C:1E:4C:81:71
X509v3 Authority Key Identifier:
keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/x6FDGKRI9gxeuknZDHSwbB5MgXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5320::/32
Signature Algorithm: sha256WithRSAEncryption
78:51:7c:6e:f5:b6:6d:2e:c9:98:9c:5b:55:f3:73:1f:59:9a:
12:b9:c0:07:3c:5e:6f:0b:f4:05:8f:22:f5:fa:2c:ec:00:65:
71:88:04:78:45:38:c8:87:77:bc:94:be:db:a7:53:07:ce:31:
1e:a1:b4:c7:3b:b8:78:d5:25:eb:56:88:64:53:af:c9:95:4e:
89:6a:ec:cd:b7:c3:9d:3b:a6:4e:ea:d9:8b:c4:5b:c0:9b:ef:
10:7e:95:70:9a:0b:c0:52:7f:e4:84:f5:28:61:b2:10:bd:04:
4e:ee:aa:19:1c:31:dd:9d:29:fd:fd:4e:e4:e4:fb:8e:3e:dd:
e9:73:9a:e1:7a:b7:e4:81:87:16:61:d6:37:e5:23:4a:ee:6e:
65:c2:ef:3e:e8:cf:29:6e:cd:31:ce:78:00:78:4a:d7:71:d5:
88:42:cf:1b:ea:b9:d2:ca:27:24:ba:cb:d3:5d:d2:b6:2c:3a:
d6:05:17:52:d8:ec:12:28:88:39:33:9f:ba:e9:4c:3d:9b:39:
93:c0:ff:8f:79:c5:7d:3f:68:6d:92:9a:a6:bd:28:b3:b2:76:
aa:c0:3d:2c:4b:49:34:c0:34:b7:a1:12:bd:da:ed:06:2f:5f:
4d:7f:81:50:bc:cb:d8:6c:18:40:45:16:60:18:93:e1:56:22:
6f:a3:ed:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:07 2024 by rpki-client on console-fra.rpki-client.org