Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6MLM7A-07jkzGtWh28Fj6yxX14E.roa
File: 6MLM7A-07jkzGtWh28Fj6yxX14E.roa (raw, json)
Hash identifier: g9cKxGAtUaK7F8tAJI9AXJ06qm3cbRhay5mM5LCTMI4=
Subject key identifier: E8:C2:CC:EC:0F:B4:EE:39:33:1A:D5:A1:DB:C1:63:EB:2C:57:D7:81
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01856DDD7632DF901E2D9C7A761BBEFE699E
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6MLM7A-07jkzGtWh28Fj6yxX14E.roa
Signing time: Sun 01 Jan 2023 15:05:08 +0000
ROA not before: Sun 01 Jan 2023 15:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205414
IP address blocks: 2a03:5840:260::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:76:32:df:90:1e:2d:9c:7a:76:1b:be:fe:69:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 1 15:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8c2ccec0fb4ee39331ad5a1dbc163eb2c57d781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:5e:e5:9e:e5:02:fa:07:e8:4f:d2:35:59:
e2:76:2a:9d:6e:c2:44:95:2f:4e:9e:7d:b2:6e:e5:
2d:fc:e1:08:d5:ea:56:a1:4d:f3:3a:d8:d3:47:5f:
b8:00:d6:19:04:f3:d6:36:7b:36:aa:1b:08:ee:4e:
f4:e6:cc:62:bf:c1:e9:91:cf:d7:ed:64:6b:94:ca:
9a:78:7d:2e:11:59:86:1b:89:0c:1c:44:59:c6:9c:
b2:5e:7a:49:cd:7c:5d:cc:84:cc:a4:3b:a0:2f:1e:
a2:94:3c:64:29:17:50:26:8d:84:2c:81:b9:8a:90:
ff:23:58:c5:1f:c0:9d:00:d7:6a:72:8a:d9:3a:3f:
47:5c:d2:68:d2:89:d4:7f:3b:ad:b0:87:04:fa:04:
f1:02:6a:cc:fa:64:1c:38:f1:e4:8f:50:1e:0d:36:
cf:54:21:80:27:4e:6d:74:e9:fb:e2:58:0a:75:3b:
74:d3:43:27:e3:fa:ce:25:cc:7c:ab:5e:58:f8:1f:
e8:ad:20:65:c3:c3:ab:d7:9c:16:75:4f:ef:b6:0a:
68:fb:db:36:98:a9:f1:13:82:80:f4:86:43:25:d2:
74:5e:9f:29:97:26:7d:9e:56:2a:13:be:e8:23:0d:
dc:be:60:a3:8c:2e:ba:22:71:f0:0f:6c:20:2f:1c:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:CC:EC:0F:B4:EE:39:33:1A:D5:A1:DB:C1:63:EB:2C:57:D7:81
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6MLM7A-07jkzGtWh28Fj6yxX14E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:260::/44
Signature Algorithm: sha256WithRSAEncryption
3a:17:d2:80:f4:9b:51:02:cc:d7:d6:a2:23:b0:c5:e2:3f:8a:
9d:29:0b:cb:cf:1c:b4:e8:a4:0d:3a:29:15:33:5a:6c:02:a4:
e3:2a:a0:fc:cc:ec:dd:ca:76:26:32:31:ad:ca:cc:da:83:40:
87:a4:4f:ec:13:b8:de:1c:98:48:f5:c1:3f:3a:aa:38:b3:39:
eb:fb:d5:03:6d:9b:12:23:f9:bd:1a:88:5e:6b:56:6d:dd:01:
5d:52:f7:6c:be:75:74:45:2c:b1:e1:3c:2f:93:35:aa:d0:7c:
f9:ef:b6:e3:85:06:72:1a:63:4a:bd:2e:f8:c6:5c:63:92:0a:
12:e1:1f:45:9a:ad:63:bc:db:e2:03:0e:c1:fd:ea:00:2f:1d:
30:13:9b:4d:69:93:c8:1c:a4:f5:91:84:1d:b6:bb:2d:b3:11:
72:f2:55:83:09:57:99:65:d5:ff:19:cc:27:c8:3d:35:ce:29:
54:0c:c9:a3:40:98:20:67:fe:e3:67:68:0f:f0:6b:27:fe:ae:
a0:92:52:de:cc:9b:ca:5b:a4:a9:0a:6b:68:0c:84:75:7e:73:
1c:cd:d1:e6:2e:b0:17:6c:be:1d:de:d7:a5:e6:a3:0d:11:2c:
f5:73:c6:77:25:32:7b:c4:81:da:b7:4f:17:a8:f0:46:79:bd:
fe:df:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org