Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/DGFpKoacLFPDB-mW7wzEgwOAlH8.roa
File: DGFpKoacLFPDB-mW7wzEgwOAlH8.roa (raw, json)
Hash identifier: yxuOoVFbZLOAbWLeKfo8dJBh1Go6R2i2qYVUkZ7JYzE=
Subject key identifier: 0C:61:69:2A:86:9C:2C:53:C3:07:E9:96:EF:0C:C4:83:03:80:94:7F
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018A8690B527D7A604694ACBFF01EFB8D097
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/DGFpKoacLFPDB-mW7wzEgwOAlH8.roa
Signing time: Mon 11 Sep 2023 23:25:44 +0000
ROA not before: Mon 11 Sep 2023 23:25:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216324
IP address blocks: 2a03:5840:ff::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:86:90:b5:27:d7:a6:04:69:4a:cb:ff:01:ef:b8:d0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Sep 11 23:25:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c61692a869c2c53c307e996ef0cc4830380947f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:7e:be:12:bb:56:a7:94:ee:36:bd:38:9c:
16:42:d9:92:1e:47:cb:6e:6a:9f:d1:df:86:ee:e8:
bb:d3:5a:de:df:90:c0:98:4b:44:ff:77:85:25:6b:
db:c9:27:4a:e2:13:c9:f5:cf:b3:41:de:0d:f8:ce:
ae:77:fb:ff:6f:7f:25:e7:f2:9a:70:41:74:a7:ad:
69:de:91:ec:63:47:5f:15:5f:69:65:12:fb:e4:37:
8a:12:42:23:ad:28:f3:82:c3:a3:f9:01:bb:a6:bb:
a3:c3:08:08:ea:7c:c9:f1:51:40:00:59:33:a2:c2:
2e:13:73:79:fc:84:31:c4:58:8c:56:df:12:04:8b:
4d:26:36:e3:e1:30:b8:68:e4:66:42:15:38:fd:4e:
c7:73:20:7f:4f:d3:4d:22:49:e1:85:0f:aa:80:ec:
d9:bf:5d:85:30:ee:d9:ca:ec:28:d1:8c:8d:17:e1:
5c:77:3b:f9:b7:e7:56:77:2d:34:ae:98:da:50:33:
e2:19:4c:f9:e7:bb:59:92:64:a4:e0:79:95:5f:7c:
d1:5c:52:1a:57:14:98:30:9f:a0:19:41:89:a8:47:
20:2d:d2:52:a2:fb:3a:14:b0:f5:6d:dc:99:2d:8e:
13:0b:e9:61:38:b9:bd:40:02:cb:ae:db:5b:4b:d0:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:61:69:2A:86:9C:2C:53:C3:07:E9:96:EF:0C:C4:83:03:80:94:7F
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/DGFpKoacLFPDB-mW7wzEgwOAlH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:ff::/48
Signature Algorithm: sha256WithRSAEncryption
20:d8:0f:44:b5:db:56:df:5c:41:66:15:70:01:73:55:8d:dc:
1d:ee:f0:e9:fc:0b:1d:53:5f:77:22:03:1a:06:19:e9:c0:06:
fa:43:98:a5:aa:9f:25:25:ea:43:61:20:f1:47:4f:a4:7d:3c:
c6:cc:32:85:72:43:37:8d:0b:84:5f:c7:94:aa:43:94:b3:30:
65:e5:1e:21:c8:e5:41:b7:d3:84:01:a5:17:3e:cc:74:0b:b2:
3a:51:a4:2c:11:20:57:45:03:86:d7:84:c9:99:0a:54:01:f7:
d2:7e:70:c3:6f:74:50:53:04:e4:46:46:25:f2:4e:db:f1:ff:
36:63:fc:cd:d5:eb:f3:36:8a:96:ac:18:2d:3a:ac:a9:1a:3d:
05:8b:e9:94:b6:b0:00:b5:8d:75:16:68:6f:36:e2:e6:84:4c:
f6:4c:2d:98:e6:0f:cf:24:46:6d:bb:f1:05:4c:d8:38:77:e1:
da:a6:6f:a4:d1:3e:ba:4f:22:f7:3b:20:fd:48:de:ff:bc:6d:
65:b4:68:f1:60:4c:88:d0:21:d4:31:d8:8b:2d:ef:0f:da:20:
30:83:a2:f7:02:02:ab:01:e1:a8:eb:5b:06:f6:f4:dc:43:54:
3f:2b:b8:54:f4:ea:03:f7:82:9b:0d:6e:b5:32:68:85:bf:9f:
44:87:fe:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org