Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/8evvCtxLe9px-gjzFcYOoy-oW5E.roa
File: 8evvCtxLe9px-gjzFcYOoy-oW5E.roa (raw, json)
Hash identifier: rJBeOiqaslfjt7dTk7/PsOpuiickJM9vrV6LyjcbryQ=
Subject key identifier: F1:EB:EF:0A:DC:4B:7B:DA:71:FA:08:F3:15:C6:0E:A3:2F:A8:5B:91
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01856DDD7840787D8BFA43339AB99B9F8829
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/8evvCtxLe9px-gjzFcYOoy-oW5E.roa
Signing time: Sun 01 Jan 2023 15:05:08 +0000
ROA not before: Sun 01 Jan 2023 15:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213073
IP address blocks: 2a03:5840:100::/48 maxlen: 48
2a03:5840:10a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:78:40:78:7d:8b:fa:43:33:9a:b9:9b:9f:88:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 1 15:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1ebef0adc4b7bda71fa08f315c60ea32fa85b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:e0:98:d1:0e:54:ad:9d:be:be:61:fd:9e:
ad:b3:47:48:b7:f8:0e:28:8c:b8:c1:fc:44:28:c5:
06:3a:52:5e:10:b1:55:f1:71:7a:26:96:ca:aa:52:
1b:d4:b0:aa:0d:e7:74:3e:df:f5:21:38:00:04:21:
60:4e:84:49:a2:15:4a:a3:b4:39:a6:29:4b:86:1a:
42:56:2e:50:df:60:08:23:27:df:0b:40:d5:9b:2b:
14:61:76:99:e5:7f:5c:13:33:15:75:02:cc:bd:af:
1f:d5:05:05:d8:11:29:84:45:ac:fe:03:73:74:13:
81:dd:d8:1c:5f:dc:d2:4d:d1:4d:09:55:85:4a:1e:
f6:ef:19:4f:22:4b:f9:61:a4:49:95:aa:51:c4:b7:
76:33:b8:d2:f9:c1:45:2a:c5:98:01:5e:f0:ec:1e:
4d:7d:df:df:a5:58:5a:65:05:79:a2:a9:c4:f7:c1:
be:f7:8d:02:09:23:3a:35:20:5f:a8:19:16:85:87:
86:f5:4c:0c:fb:a5:3a:e0:15:39:1d:c0:39:83:f6:
80:2d:6f:34:54:a9:b5:a3:6b:8b:83:10:26:5a:c2:
44:02:d5:bb:9b:1b:ed:6f:c0:ee:f9:2e:ff:c3:84:
a5:4a:66:e7:34:43:e8:44:06:da:d5:90:54:d1:dc:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EB:EF:0A:DC:4B:7B:DA:71:FA:08:F3:15:C6:0E:A3:2F:A8:5B:91
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/8evvCtxLe9px-gjzFcYOoy-oW5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:100::/48
2a03:5840:10a::/48
Signature Algorithm: sha256WithRSAEncryption
2f:fe:01:83:24:aa:d3:b9:ef:74:cb:7b:d0:a1:79:a0:fb:6b:
c2:fe:a4:42:79:6f:e9:8a:b7:24:47:4a:7b:ff:ca:f9:64:f2:
b1:b7:bb:8f:7b:48:70:50:ce:fd:06:83:69:fe:66:00:c7:60:
ed:1b:83:ff:ae:c8:59:e3:0a:82:55:10:6c:15:9e:61:d7:0d:
95:a4:40:c1:e2:56:61:8b:98:9e:b7:79:21:4b:92:5b:3f:78:
86:37:cc:5f:36:61:36:34:14:59:ff:cd:e7:6f:89:54:db:03:
d4:05:25:e5:56:4b:b1:4d:e0:f9:4c:d1:37:da:4e:95:77:ac:
c1:2e:d6:3f:1f:4d:e6:77:6a:ca:99:54:94:72:26:52:3c:da:
6e:08:4d:e9:ca:31:fd:b9:4e:cf:f1:2d:cc:aa:f5:7a:40:ce:
c3:0c:33:57:1f:73:8b:1d:00:0b:f3:46:58:d1:61:c8:40:0b:
3e:46:b0:39:58:f2:32:3e:6b:3b:61:0b:eb:50:57:93:9c:63:
69:91:1d:5f:f1:a8:11:33:ef:81:f6:60:58:18:21:2b:02:5b:
82:20:17:25:65:c4:fe:c3:57:cc:ca:81:5d:6b:2d:bd:ec:d4:
ff:10:8d:a2:c7:28:04:fb:46:87:61:1c:5a:d5:a6:27:6c:30:
87:66:f6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org