Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/sAF5NHmmUnVq4XIs2xD46EFUOYg.roa
File: sAF5NHmmUnVq4XIs2xD46EFUOYg.roa (raw, json)
Hash identifier: qL1IER2Bax8a9KX9Uo73U4FHysMnyYeu7o3iK6gPgFI=
Subject key identifier: B0:01:79:34:79:A6:52:75:6A:E1:72:2C:DB:10:F8:E8:41:54:39:88
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 018570FBB8CC57410473C19C367519BA03C6
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/sAF5NHmmUnVq4XIs2xD46EFUOYg.roa
Signing time: Mon 02 Jan 2023 05:37:03 +0000
ROA not before: Mon 02 Jan 2023 05:37:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51801
IP address blocks: 2a13:4880::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:b8:cc:57:41:04:73:c1:9c:36:75:19:ba:03:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jan 2 05:37:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b001793479a652756ae1722cdb10f8e841543988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:41:e7:2f:3d:67:c1:cf:09:f7:ff:6b:1f:
da:c1:b5:d0:fc:ca:82:fa:b6:c0:38:ad:c2:f5:7d:
16:c3:2c:c3:a4:15:5d:e3:0b:c7:f0:72:8c:92:c7:
75:49:a7:30:4a:72:f6:c4:19:0d:89:19:f6:f7:fb:
fd:cb:d8:4d:c2:0b:d3:9b:28:df:8e:b6:d2:1c:5f:
81:fb:a7:04:92:aa:78:57:3c:09:a9:61:8e:c5:88:
01:f3:ff:af:3e:0b:ab:4e:89:81:3d:6e:15:3a:e0:
17:e5:d1:87:d6:e3:05:de:63:6e:f1:0e:c2:5f:e9:
2d:b8:50:69:c4:a5:7c:92:4f:12:79:a2:89:05:82:
44:68:3d:4f:4d:7e:6a:20:c9:5d:2c:0f:aa:ff:c7:
99:1e:4f:b3:88:8d:9c:0f:26:1b:72:2a:38:46:23:
7b:24:81:16:89:31:4f:ec:53:34:c4:20:05:68:96:
64:7d:7d:9f:b5:1f:98:cc:b7:22:37:30:ac:70:84:
a5:01:60:7f:3f:ad:01:a2:8d:67:cb:ca:74:de:94:
79:7b:9b:3b:30:f8:7d:58:ee:78:53:f8:23:69:4b:
44:06:e2:dc:ed:a3:cf:92:e8:30:3b:88:3d:f0:af:
70:55:eb:87:9b:10:32:03:7f:db:1d:62:5d:81:f9:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:79:34:79:A6:52:75:6A:E1:72:2C:DB:10:F8:E8:41:54:39:88
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/sAF5NHmmUnVq4XIs2xD46EFUOYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4880::/29
Signature Algorithm: sha256WithRSAEncryption
13:6e:36:ea:0b:82:ed:c3:3c:bd:dc:d9:13:62:7f:a5:f7:9f:
9f:f9:3c:1e:a2:3d:5d:d6:25:b4:45:83:b2:32:27:0f:b5:98:
9d:b4:3b:a4:61:73:6e:57:24:25:d6:45:3f:b9:77:fd:10:ba:
7d:df:b3:b0:96:be:0c:24:49:06:10:99:f2:49:01:55:8e:70:
4b:f6:78:2a:6a:90:71:fc:75:9b:8b:76:b0:33:ed:70:80:3b:
ab:46:74:22:b4:3e:ac:c6:26:f4:a6:a6:99:28:ff:25:b4:2d:
ee:f9:c5:1a:5c:41:7c:01:39:14:e2:c2:85:7a:27:60:86:57:
7f:82:3f:b5:2a:a5:b5:ef:0c:44:b0:e2:75:2a:09:bc:cd:a2:
d5:89:fd:4b:62:ed:0d:e0:45:d9:fa:a8:bd:4f:ff:52:81:a3:
81:ea:5e:75:82:83:ee:70:fc:1c:37:f7:15:68:0f:6e:0f:3b:
d2:b6:ab:c5:64:dd:71:8c:a8:66:d4:f8:61:47:86:93:b6:34:
2f:7e:4a:22:df:eb:1f:47:39:a8:79:c9:10:f5:4b:d2:ae:60:
09:00:4b:e1:4f:de:dd:88:d0:7e:03:4f:6f:1f:9d:b0:82:84:
65:d3:49:1e:2a:8c:bd:a2:12:e4:a3:65:9f:0d:bd:b4:26:ed:
32:f8:59:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:55 2024 by rpki-client on console-fra.rpki-client.org