Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/7601-i-sWitvY1OJasCxc96qFZ4.roa
File: 7601-i-sWitvY1OJasCxc96qFZ4.roa (raw, json)
Hash identifier: 6sZzukwGCMs7UbxOx3zp5EqYgr9hNJDjjihzyaQV9qk=
Subject key identifier: EF:AD:35:FA:2F:AC:5A:2B:6F:63:53:89:6A:C0:B1:73:DE:AA:15:9E
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C41591AE01E5130FC69BC59B8B434FA
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/7601-i-sWitvY1OJasCxc96qFZ4.roa
Signing time: Sun 01 Jan 2023 07:34:59 +0000
ROA not before: Sun 01 Jan 2023 07:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17830
IP address blocks: 2a0c:e640::/36 maxlen: 48
2a0c:e640:6000::/36 maxlen: 48
2a0c:e640:1010::/44 maxlen: 48
2a0c:e640:1000::/44 maxlen: 48
2a0c:e640:1020::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:59:1a:e0:1e:51:30:fc:69:bc:59:b8:b4:34:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efad35fa2fac5a2b6f6353896ac0b173deaa159e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:59:d4:7e:32:15:0e:df:1b:68:e7:49:6b:
3c:8e:9f:83:d9:7a:83:af:64:d8:6c:87:1e:48:f3:
b8:15:7a:aa:f7:68:2b:08:cc:c2:70:d6:57:a5:ae:
00:44:0f:ac:25:26:29:c7:a5:ea:85:76:ad:f8:08:
df:2b:23:9a:97:4b:fc:59:94:27:00:78:50:8e:b2:
89:99:af:db:20:65:64:39:8f:42:b5:59:29:af:87:
f5:f1:ce:61:23:73:77:29:df:a6:69:e8:55:83:2a:
0e:50:30:82:76:e0:28:ed:b3:21:a2:88:4d:f2:2c:
1a:1a:ee:a1:71:66:50:9e:0a:65:95:95:7a:ae:aa:
db:20:8b:18:ee:d7:eb:cd:47:aa:10:c0:24:4f:3f:
0c:5b:a6:53:ed:23:99:a1:1b:c6:2e:fa:90:ac:57:
01:d6:25:86:b3:14:5a:61:ff:a3:8a:72:5e:25:be:
7f:f3:ff:16:ee:f7:e9:40:ff:0f:ff:ab:56:38:2c:
f0:f3:46:d9:5e:1d:98:4e:32:36:d4:8e:59:a0:9f:
d7:4d:85:e5:70:00:f5:49:5d:e0:e7:98:05:87:e1:
1a:11:8a:a3:70:ea:c7:b1:89:80:09:67:56:07:b1:
34:bb:c0:1b:30:02:d1:a7:ef:50:db:72:0c:a3:9c:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AD:35:FA:2F:AC:5A:2B:6F:63:53:89:6A:C0:B1:73:DE:AA:15:9E
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/7601-i-sWitvY1OJasCxc96qFZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e640::-2a0c:e640:102f:ffff:ffff:ffff:ffff:ffff
2a0c:e640:6000::/36
Signature Algorithm: sha256WithRSAEncryption
23:f5:ba:eb:2e:e8:ed:3b:38:09:5a:9d:31:2d:18:ef:de:35:
30:11:e8:da:7f:56:ce:80:5a:2a:f5:9d:6b:93:2c:60:6b:eb:
87:9a:f3:90:10:e3:4b:91:84:0a:51:de:74:07:71:8a:dc:a6:
87:7d:31:e4:e5:97:50:dd:5b:2d:9d:30:d2:5f:16:0d:5d:d5:
9a:76:17:ed:c8:44:9e:fe:3b:fc:15:d9:45:ba:d9:7c:95:b1:
04:eb:22:4b:96:2a:e4:15:e2:71:69:21:40:1a:f6:24:d9:a0:
8d:fc:cc:11:3a:60:8b:e2:6f:4e:12:67:75:e4:9f:aa:f3:ad:
97:fc:af:32:ac:55:70:55:5c:a3:f4:fb:cb:f7:bf:06:28:5b:
13:32:ee:c2:89:40:c3:be:bc:56:36:13:f3:fb:61:54:92:05:
12:0f:9f:65:73:9a:70:2d:ff:15:e2:6a:2b:55:e8:08:0f:21:
f8:9c:3b:b4:b0:ae:46:dd:e1:f0:d7:b0:90:ac:1e:20:31:92:
b1:c5:0b:dd:37:df:68:91:f9:6b:33:44:15:35:a1:9c:78:de:
f6:dd:07:ea:9c:f3:15:31:eb:1a:00:89:dd:be:c2:70:44:4a:
0f:d3:57:2a:f1:f1:c4:c4:73:ab:c2:cb:cd:99:1e:5e:5f:ac:
35:b2:e9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:47 2023 by rpki-client on console-ams.rpki-client.org