Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/VvoCzek6abSLm8RNxc8k2EX2oa8.roa
File: VvoCzek6abSLm8RNxc8k2EX2oa8.roa (raw, json)
Hash identifier: qi9a8dhSzGKaeqKvmHzjAm91Wys9wMq2gGUKRrk0C5U=
Subject key identifier: 56:FA:02:CD:E9:3A:69:B4:8B:9B:C4:4D:C5:CF:24:D8:45:F6:A1:AF
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01856DDD7444BBB77C86995634FF27FABFC9
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/VvoCzek6abSLm8RNxc8k2EX2oa8.roa
Signing time: Sun 01 Jan 2023 15:05:07 +0000
ROA not before: Sun 01 Jan 2023 15:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202983
IP address blocks: 2a03:5840:300::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:74:44:bb:b7:7c:86:99:56:34:ff:27:fa:bf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 1 15:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56fa02cde93a69b48b9bc44dc5cf24d845f6a1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:38:5c:4c:30:84:db:6c:76:7d:92:52:72:
72:c4:a4:34:e7:15:12:81:85:d7:23:cc:32:03:a4:
79:43:63:73:2b:de:2e:57:fa:55:3c:c4:44:4f:db:
0e:35:7e:d0:54:48:63:5f:89:f3:3b:23:4a:e9:be:
4e:80:52:ea:9c:3c:be:b2:5c:27:10:ed:24:43:3d:
8a:53:70:08:b8:55:23:f6:fa:89:a8:9a:c1:df:96:
1c:00:c1:11:8e:35:f0:d6:cc:77:4b:87:84:30:44:
f7:f7:14:9c:61:f2:14:b6:d2:24:0b:b9:dc:37:14:
39:04:49:1a:3f:4f:3e:28:ff:c2:33:00:e5:bf:69:
27:bf:fd:41:b2:1e:02:50:69:92:7c:a3:6f:40:4f:
80:db:24:da:a7:39:10:a3:74:28:d5:01:1a:54:40:
85:56:63:e2:f5:34:34:f8:b6:19:fc:4b:e9:89:ef:
cd:12:8b:2f:da:9b:4a:3b:16:62:86:e8:23:f7:61:
da:93:4c:79:d0:e8:15:2a:ce:be:85:64:cd:fc:ea:
c7:6b:58:17:ee:ae:81:27:ad:a8:54:64:eb:fe:40:
ee:ef:e5:6b:f9:35:25:7b:eb:2f:27:0a:6d:53:43:
18:23:7f:b3:5c:42:cf:9c:9f:c5:ce:a3:b3:68:98:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FA:02:CD:E9:3A:69:B4:8B:9B:C4:4D:C5:CF:24:D8:45:F6:A1:AF
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/VvoCzek6abSLm8RNxc8k2EX2oa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:300::/44
Signature Algorithm: sha256WithRSAEncryption
01:96:f6:11:d0:80:c8:23:5c:2f:e3:91:23:c9:17:da:16:a6:
77:ea:5d:4e:e8:cf:34:9b:70:07:7e:ca:5a:f9:77:a9:a0:49:
db:f5:5d:27:6d:92:82:8f:f3:c3:9a:54:72:e6:92:c4:73:2f:
47:e2:77:86:cc:1b:d7:5a:dd:6c:90:c0:33:33:b3:f2:f6:c8:
f5:fd:6c:57:61:dd:36:21:ae:3a:2f:4c:4e:c5:60:ee:ee:ee:
2b:97:b1:39:c7:9c:73:68:36:c5:f9:c3:f2:a6:72:59:ed:01:
a9:d1:0e:7a:aa:06:6a:2d:10:16:ae:18:ab:81:f4:a7:41:92:
dc:e7:a3:7e:7c:d9:a8:d8:57:bb:26:04:66:83:79:d1:ee:c6:
21:be:02:68:a9:1e:e8:2b:f9:e1:ac:b0:49:33:ef:51:4b:06:
ab:ba:78:3a:21:a0:cc:c4:fb:d7:d6:50:e5:c4:eb:9b:2f:aa:
66:a0:ac:8f:a7:e7:4a:e3:17:3f:d0:20:c2:27:a7:ec:a3:52:
a7:ce:c5:6b:80:ec:ca:cf:b0:42:fa:9c:f4:d0:69:ba:d3:e7:
4f:8b:a0:d5:1b:27:dc:00:78:1a:50:2b:01:c7:3e:af:02:bf:
7a:23:58:20:99:a0:3a:90:8c:62:8e:8f:69:9e:6c:b1:a3:3e:
e8:5d:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:06 2024 by rpki-client on console-ams.rpki-client.org