Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/6qsBdba_72Y30yXlXu4alxhdWk4.roa
File: 6qsBdba_72Y30yXlXu4alxhdWk4.roa (raw, json)
Hash identifier: xgV2Ky7bshCXbBHWU8TRi1cEMzvUlpdzhqiUEmT7RuY=
Subject key identifier: EA:AB:01:75:B6:BF:EF:66:37:D3:25:E5:5E:EE:1A:97:18:5D:5A:4E
Certificate issuer: /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Certificate serial: 01857142F2D815A428AEA5E8603F5DC9DB9B
Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/6qsBdba_72Y30yXlXu4alxhdWk4.roa
Signing time: Mon 02 Jan 2023 06:54:51 +0000
ROA not before: Mon 02 Jan 2023 06:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54058
IP address blocks: 2a05:2200::/29 maxlen: 29
2a07:4e40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f2:d8:15:a4:28:ae:a5:e8:60:3f:5d:c9:db:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Validity
Not Before: Jan 2 06:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaab0175b6bfef6637d325e55eee1a97185d5a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:27:a4:bc:11:03:8a:86:82:d2:1b:fb:b3:
eb:12:ac:5e:b5:95:c1:55:eb:50:de:ec:8a:78:43:
60:78:82:81:77:3e:0a:92:81:d7:c0:03:6a:50:77:
ba:21:d9:06:16:a9:a1:a0:83:34:6a:0f:11:45:be:
a0:82:12:71:8e:02:6a:be:81:3a:9d:d9:3a:3c:aa:
a5:5d:90:24:aa:02:25:12:a4:6b:f6:a9:59:e0:0a:
a8:2e:1d:80:48:0a:b1:71:59:57:5d:c3:01:44:b7:
4c:9e:d0:b1:80:c3:a8:56:1a:22:e6:93:0c:0a:f3:
9c:09:5f:8d:39:ed:1c:96:f7:f9:e9:d0:e9:1e:8d:
75:78:88:9d:89:b3:b9:2b:2f:8a:8e:f2:db:51:25:
2f:f1:8a:d7:60:40:82:03:fe:0f:cf:e4:c8:06:cf:
2b:f1:b9:36:84:2a:b9:19:09:54:34:89:45:c2:b9:
06:3f:ee:c3:de:37:95:93:0d:87:a4:aa:2f:07:17:
99:af:e7:ba:50:f2:4d:a5:e4:ad:3f:e0:1a:2f:2b:
93:79:d3:b1:0a:b3:c6:4a:4e:7a:4b:50:c8:24:fe:
69:b9:3d:18:dd:f7:e2:92:df:36:bf:60:be:f0:76:
6a:9e:2a:3a:53:23:3c:c3:ed:ef:3b:d9:9d:b7:b7:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:01:75:B6:BF:EF:66:37:D3:25:E5:5E:EE:1A:97:18:5D:5A:4E
X509v3 Authority Key Identifier:
keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/6qsBdba_72Y30yXlXu4alxhdWk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:2200::/29
2a07:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
21:01:f3:fb:63:fe:26:df:66:0d:a8:67:fa:ad:e6:73:19:70:
8d:36:f7:af:d8:5e:a1:2f:0f:ae:c0:ce:2f:ab:6b:5b:ca:d2:
07:cc:60:5a:2b:a2:7a:62:ba:3e:7b:46:35:94:56:3c:c5:a4:
ed:34:81:6d:a6:c4:16:67:21:85:f6:a4:c5:e1:97:3f:59:8a:
18:4f:b2:85:60:74:30:91:9e:fa:43:1e:cc:7a:ef:e7:c7:27:
9b:2f:2e:cf:e2:5c:81:00:b6:9f:b7:f5:29:82:0c:2a:76:62:
2a:8d:9f:91:4d:93:04:90:b6:aa:7f:66:6c:63:82:74:2c:43:
27:79:88:25:a3:77:1e:1d:7c:ab:8f:34:5a:09:ab:e1:30:32:
b1:66:c0:17:9a:0a:03:55:d2:b5:35:03:d5:48:31:06:29:e0:
10:80:18:17:18:e9:cd:23:d8:b1:0d:10:cc:26:57:c8:99:45:
00:89:50:34:e9:6b:15:77:2d:9d:64:e6:3a:04:03:7e:1f:85:
6a:93:d1:60:a3:05:f2:c1:e3:4c:7f:40:e4:52:9a:de:2b:ea:
bc:00:36:d8:ce:36:0a:64:90:54:d6:39:44:4b:64:5b:4e:32:
0b:45:29:56:e0:7f:f3:01:4b:9a:1c:09:3b:f6:7b:ef:0d:3d:
16:96:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:28 2024 by rpki-client on console-ams.rpki-client.org