Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ezgXOeVoT5spXyXU-GKADLOBCzs.roa
File: ezgXOeVoT5spXyXU-GKADLOBCzs.roa (raw, json)
Hash identifier: Dv4L23mclzeAoKVaZOqpJvc8G87gDW77jPH8piVsibA=
Subject key identifier: 7B:38:17:39:E5:68:4F:9B:29:5F:25:D4:F8:62:80:0C:B3:81:0B:3B
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 0186A80A6C2A7B25FDB695AE15FBF8CC5D96
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ezgXOeVoT5spXyXU-GKADLOBCzs.roa
Signing time: Fri 03 Mar 2023 15:15:00 +0000
ROA not before: Fri 03 Mar 2023 15:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199580
IP address blocks: 2a03:5840:f4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:0a:6c:2a:7b:25:fd:b6:95:ae:15:fb:f8:cc:5d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Mar 3 15:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b381739e5684f9b295f25d4f862800cb3810b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:a8:7a:75:37:85:50:9f:9a:18:ea:10:70:
59:c8:eb:45:01:6f:ed:ec:c2:ae:92:3e:73:f6:7a:
02:0a:39:15:1c:f2:7d:cf:8f:f6:47:ea:57:67:87:
82:bd:8c:ef:98:e1:dd:e5:d5:42:62:5a:7f:e0:9b:
4b:b6:e5:db:88:b4:f7:ab:6b:24:df:b9:78:61:1f:
b1:eb:e1:e3:3c:e6:59:82:d1:4d:dd:6c:e6:7b:96:
4c:87:ec:43:3e:2b:e3:aa:86:40:b0:d5:d2:fb:ed:
5c:b3:33:72:c7:20:b6:70:45:ef:a9:29:a9:37:8a:
64:19:e7:0a:d9:ae:c7:16:44:5d:36:95:8b:e6:47:
e9:a4:72:fc:a2:cb:06:50:f9:2d:60:d6:2b:0d:a2:
3d:44:a3:a2:c8:b6:43:4b:47:59:14:b3:0f:4e:6d:
d8:3b:c9:b3:15:b8:ae:e1:ba:85:e4:6f:0f:58:b3:
16:fc:55:84:72:02:6d:8f:b8:a5:51:fa:f1:c8:55:
c1:44:b4:c3:77:43:f9:0f:b4:ee:da:7f:c7:cd:1d:
b6:93:a4:5d:fd:49:a2:1a:ca:32:0f:6d:a9:ea:3c:
09:90:3b:50:c4:31:3a:98:20:0e:da:b7:21:7f:e5:
90:cd:40:24:00:df:e3:0d:b2:e3:05:60:30:2b:9b:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:17:39:E5:68:4F:9B:29:5F:25:D4:F8:62:80:0C:B3:81:0B:3B
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ezgXOeVoT5spXyXU-GKADLOBCzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:f4::/48
Signature Algorithm: sha256WithRSAEncryption
48:49:9b:ee:f9:eb:3d:be:02:a0:04:be:1d:9c:51:68:26:27:
f1:fc:b3:64:d8:bd:5d:42:0e:80:6e:7d:3a:60:f0:71:c1:44:
ca:f7:59:4a:00:ae:72:05:2a:e8:ad:d7:62:46:c6:0d:77:9f:
d2:17:fc:47:2b:f7:5c:84:80:bf:d4:37:79:ab:be:40:80:78:
22:0d:9e:51:25:e5:15:3d:78:be:8f:21:1e:fb:98:53:bd:e5:
c7:7f:8b:b1:c1:93:cb:ed:8e:7c:6b:7e:d4:63:d2:6f:48:48:
a6:e3:3f:d3:bd:86:d1:f8:5a:de:60:17:4c:a0:bd:86:6c:d9:
01:92:93:5a:f6:82:7a:eb:eb:9e:ae:bb:77:11:c7:f9:d8:ec:
87:fb:a6:f3:69:5d:e9:84:8f:8d:bb:e5:8b:69:86:09:7b:68:
53:cf:7c:b4:1a:90:52:4e:4b:cf:4e:2d:18:ba:99:99:8e:8f:
ea:8f:07:f3:d5:39:b5:77:62:0c:e0:01:8c:08:98:54:78:d1:
90:c1:36:9c:04:17:5c:48:2b:7a:40:4c:42:88:ce:6a:38:dc:
b8:58:02:00:eb:cf:5b:12:86:5b:61:be:19:72:0d:f1:8e:ad:
32:da:ab:18:58:b6:cd:fa:f7:a5:ad:50:83:db:81:38:5b:89:
5f:51:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org