Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SntK62UsaujAP6cWtYGAodJT6Nc.roa
File: SntK62UsaujAP6cWtYGAodJT6Nc.roa (raw, json)
Hash identifier: fVr5c9uTP9MaWK3e5Pf6WZr/G8iRkcwMp2VTcUtoPsI=
Subject key identifier: 4A:7B:4A:EB:65:2C:6A:E8:C0:3F:A7:16:B5:81:80:A1:D2:53:E8:D7
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 0189D4F16BCE738DF65F9C35DA1A4FFCE7B1
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SntK62UsaujAP6cWtYGAodJT6Nc.roa
Signing time: Tue 08 Aug 2023 11:38:58 +0000
ROA not before: Tue 08 Aug 2023 11:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204826
IP address blocks: 2a03:5840:fb::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:f1:6b:ce:73:8d:f6:5f:9c:35:da:1a:4f:fc:e7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 8 11:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a7b4aeb652c6ae8c03fa716b58180a1d253e8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:df:33:ff:c1:ca:9c:4c:3c:ff:d4:44:d9:
55:aa:23:cb:3d:1d:fb:8d:38:47:d1:d6:cd:36:52:
01:ef:be:24:25:7c:d2:c0:e4:79:27:ec:c1:21:51:
d0:3a:fe:b1:3b:b7:44:94:7f:40:12:a1:c3:50:d8:
ad:20:a9:0c:46:f1:c8:16:58:db:c5:5f:d2:b6:b0:
95:f0:98:1a:f1:d8:73:61:81:81:a1:ba:3e:a8:37:
65:e3:a1:2b:06:6a:b6:50:61:34:45:9b:6e:51:15:
5c:9b:e9:13:c6:66:c9:fc:7c:2e:9d:32:1e:95:48:
a8:b8:50:b9:63:43:f3:1d:eb:d8:fa:15:c5:60:e5:
47:e3:f8:5c:e0:fd:83:12:5e:5b:5f:d6:b0:39:87:
69:95:66:7f:01:56:e9:20:15:b8:a1:1d:ab:53:59:
f6:54:ec:3b:90:8a:9a:39:69:29:db:f3:cb:95:8a:
d4:0f:6a:3b:07:09:3b:9c:b4:38:ef:d4:af:c0:66:
7c:17:65:2d:f6:ce:57:88:44:57:2c:21:89:ee:18:
05:f4:51:ef:6e:1d:72:d2:0f:91:16:81:3c:15:b5:
19:b8:83:75:6f:31:36:5f:b1:c0:bd:8f:8a:5a:75:
4b:e4:54:a0:bf:f7:ad:ff:da:e3:66:71:a7:a9:c1:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:4A:EB:65:2C:6A:E8:C0:3F:A7:16:B5:81:80:A1:D2:53:E8:D7
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SntK62UsaujAP6cWtYGAodJT6Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:fb::/48
Signature Algorithm: sha256WithRSAEncryption
26:f3:cb:c4:b0:dc:74:b7:46:6b:d8:31:b7:45:ed:12:c0:f6:
e8:3d:91:47:6a:7b:c9:5e:77:e9:77:bf:08:7e:d3:f2:aa:b6:
89:9f:a6:03:36:ab:ab:8b:5b:49:87:bf:43:ce:7d:09:ba:0f:
f6:89:91:68:4d:87:7e:d4:42:47:a9:74:ed:58:5e:04:80:5a:
13:2d:7b:59:00:72:4e:7b:88:4d:43:bf:bc:ad:fa:41:5c:41:
99:0c:73:fa:2d:9b:75:06:48:41:23:12:ec:ec:65:2d:f6:59:
73:42:26:fc:09:fb:66:2f:c3:09:30:a3:ca:fa:07:2a:29:57:
68:52:54:56:af:a6:29:d7:36:17:d5:3e:91:75:1e:c5:12:a1:
4d:bf:a2:f9:75:0b:68:bb:6e:d3:6c:ec:c5:85:57:1b:60:13:
f5:6d:ca:c1:49:af:35:ef:ef:e1:30:89:8f:87:73:30:71:9b:
28:95:20:c1:98:d9:1c:f0:15:72:19:8d:82:65:16:2c:dc:01:
2e:6c:2e:e5:05:ce:3f:68:05:b8:d6:1e:ca:35:f1:a5:37:aa:
6b:70:8b:51:17:29:9f:f0:1f:de:8c:75:43:7c:c3:c1:37:65:
c7:34:48:cc:2b:14:0a:2a:5a:15:ae:3e:9c:68:fb:fe:7b:77:
7a:b1:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org