Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/xmYLPyhMnBLln1594V8zkBsfx-k.roa
File: xmYLPyhMnBLln1594V8zkBsfx-k.roa (raw, json)
Hash identifier: RZjvXMzu12J4JV8iWTa7d14Vang77vQNyUYLDrTEpnM=
Subject key identifier: C6:66:0B:3F:28:4C:9C:12:E5:9F:5E:7D:E1:5F:33:90:1B:1F:C7:E9
Certificate issuer: /CN=0095a4f8f4d41888e4394c5f564979295d2f13aa
Certificate serial: 01856C8A585AB3AB9868E2D0A884FC6E94BD
Authority key identifier: 00:95:A4:F8:F4:D4:18:88:E4:39:4C:5F:56:49:79:29:5D:2F:13:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJWk-PTUGIjkOUxfVkl5KV0vE6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/xmYLPyhMnBLln1594V8zkBsfx-k.roa
Signing time: Sun 01 Jan 2023 08:54:43 +0000
ROA not before: Sun 01 Jan 2023 08:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209531
IP address blocks: 147.78.168.0/22 maxlen: 22
2a09:27c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:8a:58:5a:b3:ab:98:68:e2:d0:a8:84:fc:6e:94:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0095a4f8f4d41888e4394c5f564979295d2f13aa
Validity
Not Before: Jan 1 08:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6660b3f284c9c12e59f5e7de15f33901b1fc7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:e3:3f:95:4f:92:36:c4:85:4c:d0:15:2d:
55:5f:5b:5d:9e:00:8c:99:75:ca:97:d5:84:d5:b7:
be:c3:c8:24:80:89:88:e9:46:d0:0f:15:e5:3e:e0:
af:2b:2f:3f:9c:93:3b:88:19:2c:39:ff:97:97:5f:
0e:1b:a1:0d:4a:a6:84:2c:cf:a4:4a:39:7c:b3:81:
95:d2:46:39:cf:f1:f5:91:62:c2:ee:02:2f:c4:40:
c2:0e:66:7a:56:50:89:1c:cb:96:9e:d5:64:33:2c:
2e:df:9e:25:98:84:19:7a:c6:97:d4:08:35:7f:2c:
55:01:7a:33:27:e7:23:a1:7c:81:4b:69:da:c3:4a:
9d:d2:9d:f2:26:3a:71:2e:1b:8f:b2:69:1e:21:16:
3f:63:13:f0:56:62:80:77:94:36:7d:57:45:b2:ce:
1e:a8:8d:91:da:d4:e6:be:cb:ea:7b:ed:fd:9d:c2:
2a:86:e4:9c:f1:b0:a0:8e:59:8c:ab:06:f3:7c:a0:
26:98:1b:93:3f:12:6e:a0:a6:8d:c7:d7:1f:ef:e8:
3e:01:6f:ca:9a:09:ce:db:de:9a:2b:e9:bd:3c:91:
86:23:4a:fb:1a:12:b7:12:6f:9b:eb:95:77:10:23:
84:77:ab:96:94:99:53:67:23:39:73:40:89:ba:97:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:0B:3F:28:4C:9C:12:E5:9F:5E:7D:E1:5F:33:90:1B:1F:C7:E9
X509v3 Authority Key Identifier:
keyid:00:95:A4:F8:F4:D4:18:88:E4:39:4C:5F:56:49:79:29:5D:2F:13:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJWk-PTUGIjkOUxfVkl5KV0vE6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/xmYLPyhMnBLln1594V8zkBsfx-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33758-4c60-4cb3-a208-c0697306f9a5/1/AJWk-PTUGIjkOUxfVkl5KV0vE6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.168.0/22
IPv6:
2a09:27c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:37:8d:61:30:c3:a5:31:f4:b2:31:c8:68:eb:b3:69:94:b7:
9f:35:8e:df:4c:8f:8a:11:6e:40:11:84:4c:c1:4e:b5:8a:9b:
0b:79:ca:c1:62:cc:05:d5:3c:d1:6e:af:6f:4b:e6:5d:44:f5:
70:56:04:a2:ee:27:bd:a4:11:36:c1:66:4c:51:4e:0f:93:d5:
21:f4:94:33:16:34:79:28:e2:78:28:e1:78:91:00:e2:7a:21:
9c:11:38:06:30:a0:ab:eb:be:fd:04:c3:72:41:9e:90:06:a2:
40:49:a9:99:4a:c0:55:43:54:91:3d:6b:c8:f0:20:d8:7a:cd:
dd:b3:43:cf:47:35:ba:f9:2c:17:a5:c3:e9:ea:57:ce:ea:4b:
37:84:b5:51:9a:d3:5f:4f:a6:fa:d8:61:26:12:ba:e1:9f:8b:
82:74:ac:fd:fb:4c:0b:0e:9d:e7:17:c9:c9:54:3b:8e:bb:e8:
a3:e1:05:24:8e:fc:43:49:af:d0:41:ee:ce:cb:78:27:5c:ac:
a6:c8:85:4a:16:35:c2:76:69:c4:9d:82:e2:eb:f9:2a:1f:c7:
1a:9a:f8:57:28:78:af:52:64:b4:18:69:50:99:15:08:dc:24:
37:6b:c8:7a:bc:e9:f8:91:d9:27:e1:9d:3e:95:64:6e:17:ea:
5d:06:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:46 2024 by rpki-client on console-fra.rpki-client.org