Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/7J9xbVakkBiw-hV1YuZx_5-OTs0.roa
File: 7J9xbVakkBiw-hV1YuZx_5-OTs0.roa (raw, json)
Hash identifier: iOUFHSRbLEse0Q25j41DvLSdx1fYp6f1R99mXFUWCnE=
Subject key identifier: EC:9F:71:6D:56:A4:90:18:B0:FA:15:75:62:E6:71:FF:9F:8E:4E:CD
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 0189B60A56E81C3D83BA93172E3B779D1122
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/7J9xbVakkBiw-hV1YuZx_5-OTs0.roa
Signing time: Wed 02 Aug 2023 11:37:58 +0000
ROA not before: Wed 02 Aug 2023 11:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197432
IP address blocks: 2a03:5840:fc::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:0a:56:e8:1c:3d:83:ba:93:17:2e:3b:77:9d:11:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 2 11:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec9f716d56a49018b0fa157562e671ff9f8e4ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:57:36:0f:25:f7:d6:ca:67:dc:3a:2f:71:
f2:76:62:4f:44:39:c7:a4:43:a5:51:d8:2e:7c:fc:
cf:9c:23:d5:0f:f2:bb:cb:6c:cb:93:f9:d8:fc:39:
67:86:c6:40:ae:07:20:7c:4f:a7:62:3c:b9:49:fc:
bc:c1:49:09:38:24:51:04:19:2d:2b:ea:72:e2:cd:
97:39:2e:94:fe:57:2f:ac:e8:93:8a:27:65:34:2c:
f5:eb:bd:87:ca:ec:81:25:83:7e:d5:f5:ff:f9:07:
e6:e6:6c:cb:c3:41:03:c8:f2:97:6d:20:12:b2:8d:
c3:0a:91:f5:71:25:cd:da:81:f6:2e:5e:20:35:69:
62:2b:16:fd:28:78:61:3b:f7:22:89:bd:81:75:7d:
71:17:d7:5c:3d:52:6a:86:a9:c8:a1:30:d0:52:00:
52:b2:ee:d4:e5:bc:a3:29:c5:99:0e:f9:bf:e8:34:
64:73:8e:9e:13:9e:bc:6f:a5:2e:3d:18:80:03:fc:
bb:30:4c:71:b2:6d:c5:cd:87:7e:46:66:33:c8:9b:
e1:3a:b3:4a:17:08:90:28:c6:c0:03:de:12:41:09:
65:60:19:2e:b7:b4:50:24:83:87:8f:64:3d:96:30:
e1:f0:e6:1e:50:30:5d:8b:38:d9:cf:f5:22:78:98:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9F:71:6D:56:A4:90:18:B0:FA:15:75:62:E6:71:FF:9F:8E:4E:CD
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/7J9xbVakkBiw-hV1YuZx_5-OTs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:fc::/48
Signature Algorithm: sha256WithRSAEncryption
a6:0c:3f:48:ab:96:c0:87:83:9d:75:36:13:11:1f:12:b5:ae:
3a:5f:af:13:c8:06:19:b3:54:0a:ba:16:35:d5:ba:a4:83:aa:
1b:cf:61:d4:15:96:94:fa:f1:af:3b:d8:f7:09:3e:2e:c8:29:
07:fb:bd:96:66:be:c8:ac:9c:55:fe:c7:07:5f:a5:0a:07:e4:
e1:22:3e:53:07:28:81:25:d7:33:02:74:e0:b7:84:de:fb:13:
83:ef:d3:81:17:a2:b8:de:e2:07:ea:ba:69:ae:4e:67:51:1a:
6d:70:00:4a:82:01:4f:47:20:f7:5b:09:69:d3:6e:7c:7b:83:
a7:cc:c4:f2:83:97:32:7a:59:4f:e7:ea:63:91:5d:8c:c0:d4:
05:3f:2e:49:5c:0e:61:d4:06:05:b8:fb:b5:b7:27:35:b8:af:
14:9e:a2:ce:7b:6d:91:3e:7d:c4:a5:51:a8:3a:e1:ee:4d:96:
60:73:77:95:bb:b0:7d:44:12:35:61:f8:55:79:33:ec:e2:33:
88:e7:69:c7:4a:c4:c7:5a:cb:e9:10:fd:ba:35:b5:7c:9c:20:
09:5f:17:45:14:8c:da:bb:3e:51:85:99:15:37:7e:81:9a:d0:
36:78:93:7f:fb:d6:c1:b6:a3:b7:32:4d:53:65:aa:7c:c7:68:
92:70:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:06 2024 by rpki-client on console-ams.rpki-client.org