Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/7zk2apBXdbInvXZKGQ6r_xjs4W4.roa
File: 7zk2apBXdbInvXZKGQ6r_xjs4W4.roa (raw, json)
Hash identifier: a+/Wnz4tC+SqK5+dv0PIzYF5Q1E4gyWCArcW8rF3vnw=
Subject key identifier: EF:39:36:6A:90:57:75:B2:27:BD:76:4A:19:0E:AB:FF:18:EC:E1:6E
Certificate issuer: /CN=df22a4abb9339f65e81f871fc454995f5bf2a016
Certificate serial: 0185711E8173EB6F9FB03A36D69F7309375D
Authority key identifier: DF:22:A4:AB:B9:33:9F:65:E8:1F:87:1F:C4:54:99:5F:5B:F2:A0:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3yKkq7kzn2XoH4cfxFSZX1vyoBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/7zk2apBXdbInvXZKGQ6r_xjs4W4.roa
Signing time: Mon 02 Jan 2023 06:15:02 +0000
ROA not before: Mon 02 Jan 2023 06:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.6.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:81:73:eb:6f:9f:b0:3a:36:d6:9f:73:09:37:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df22a4abb9339f65e81f871fc454995f5bf2a016
Validity
Not Before: Jan 2 06:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef39366a905775b227bd764a190eabff18ece16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:c0:d5:d7:9f:cf:27:9d:36:c0:5f:f1:ac:
ed:08:14:a7:cf:d5:a6:b0:cf:50:1a:bd:77:6a:70:
fb:4d:83:34:48:14:e7:12:78:06:93:7a:10:6d:c1:
c3:b4:b9:b9:62:00:d5:8f:d6:ee:d4:e2:cf:3d:79:
e9:7f:a4:86:a5:1c:87:76:44:d7:73:a1:f4:e8:2b:
e8:70:7a:41:c3:b4:65:40:b2:9c:9a:8f:c7:d5:7e:
c9:63:61:ab:f3:22:7e:bf:5d:0e:5a:b2:11:f4:99:
cd:ec:76:70:c2:34:62:7d:e2:b7:8d:06:6b:59:66:
07:e6:00:b5:d6:39:ee:e7:30:b1:a6:65:47:5c:b2:
7a:54:9e:e4:ca:11:f7:4d:6e:2f:3c:7b:99:a3:cb:
52:76:2d:20:62:4c:e3:6d:b2:b2:10:5b:9d:90:9a:
c8:66:d5:58:f1:ab:47:ea:f3:e6:de:37:84:41:91:
98:ba:6c:06:8c:7f:29:c0:7e:9e:65:24:6d:38:4f:
f3:0b:cd:0d:0a:db:31:2d:ab:29:75:1d:9d:51:a9:
5c:07:db:b1:f2:22:1d:fb:f7:e4:03:36:4d:eb:36:
3c:32:86:f9:6f:92:b9:bf:a9:45:30:f9:89:77:f9:
48:fc:8a:96:ce:27:42:83:cb:22:d3:f8:81:05:b8:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:39:36:6A:90:57:75:B2:27:BD:76:4A:19:0E:AB:FF:18:EC:E1:6E
X509v3 Authority Key Identifier:
keyid:DF:22:A4:AB:B9:33:9F:65:E8:1F:87:1F:C4:54:99:5F:5B:F2:A0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3yKkq7kzn2XoH4cfxFSZX1vyoBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/7zk2apBXdbInvXZKGQ6r_xjs4W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3363c0-63cc-4588-a03b-fdd081e779de/1/3yKkq7kzn2XoH4cfxFSZX1vyoBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.63.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bd:fb:d1:26:85:f8:96:88:96:58:35:8d:4a:5a:a7:d6:cb:
6a:1f:08:ef:9a:89:b0:69:fa:64:eb:c1:1e:69:a8:ba:86:6b:
b2:ff:c1:d3:25:5d:b9:78:99:0f:c9:9f:28:e3:3a:3a:b6:20:
2b:c0:28:87:8c:91:3c:99:bc:8d:7c:73:0b:49:eb:8d:28:80:
5d:84:6b:3b:aa:61:69:c9:7f:6a:8c:e3:e2:b2:20:35:58:68:
2a:96:3c:d5:b2:72:c8:4a:3c:9d:37:65:8d:ea:fc:7d:12:a2:
7f:cd:ed:31:ef:81:ce:71:8c:53:04:73:a2:bd:b4:3c:32:cd:
6b:43:3a:5c:b3:be:94:b5:7e:39:e0:a6:5e:85:50:82:71:1b:
ce:05:4b:7f:fc:61:a8:52:33:50:72:9b:3c:a5:1a:38:0f:ed:
60:60:67:aa:04:ae:1f:15:03:5a:d0:3a:a5:ae:70:92:f1:9d:
f6:54:7d:8f:ac:cd:9f:38:ed:8f:bf:84:d3:05:5d:5b:36:91:
bc:04:72:8a:1b:3e:46:e5:9a:ec:bd:ef:e0:9f:82:cd:af:4e:
81:94:29:c3:f5:db:2a:13:64:eb:d7:cb:b5:23:25:df:e7:75:
93:6e:d9:03:a5:ee:67:32:a9:74:40:bc:ef:82:9c:b5:a8:e8:
6d:9b:6a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-ams.rpki-client.org