Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/j3amAyTzVJauq4HYHC6_rGDn8q8.roa
File: j3amAyTzVJauq4HYHC6_rGDn8q8.roa (raw, json)
Hash identifier: EbxWvN1Bt9uMP2ideCHIOBe8gXRTDU4q+tXJp7WJLhg=
Subject key identifier: 8F:76:A6:03:24:F3:54:96:AE:AB:81:D8:1C:2E:BF:AC:60:E7:F2:AF
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018921708A0564AC4005DFA8769C7896362B
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/j3amAyTzVJauq4HYHC6_rGDn8q8.roa
Signing time: Tue 04 Jul 2023 15:06:10 +0000
ROA not before: Tue 04 Jul 2023 15:06:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197924
IP address blocks: 2a03:5840:330::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:70:8a:05:64:ac:40:05:df:a8:76:9c:78:96:36:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jul 4 15:06:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f76a60324f35496aeab81d81c2ebfac60e7f2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:72:fa:7f:6b:28:07:e6:82:3c:6f:f1:7c:
43:6a:3b:f6:a7:b7:e0:39:82:43:1d:69:fd:c7:2d:
30:0b:41:2f:8d:93:52:fb:35:90:02:fc:c7:e1:d8:
96:d5:43:0d:3b:52:a6:17:a4:1e:e6:43:e7:ba:ae:
aa:5e:c4:48:a8:d0:71:0f:21:16:62:0a:ed:fc:4c:
98:35:df:21:70:db:b8:6f:ba:81:c2:86:f5:aa:c0:
d0:94:c9:fc:5d:d7:44:66:fa:48:8d:43:bd:1e:eb:
d8:39:60:ec:89:f9:19:8a:12:8e:7a:84:56:db:ba:
c1:68:28:c9:9a:7e:9e:f9:50:57:64:d5:6a:c5:13:
c4:e1:ce:6e:a9:bd:e3:67:e8:be:71:c9:5b:7a:f9:
58:58:86:9a:1e:73:93:27:33:c0:ba:bb:13:f7:aa:
49:aa:88:da:0c:f5:83:c9:d6:bc:62:4e:13:76:69:
f7:fd:f8:41:b8:65:52:d3:d4:df:3d:0a:12:02:c4:
98:31:4b:b3:7c:4f:1f:89:91:3a:e4:fb:9d:2c:63:
02:89:86:70:94:ce:84:84:bf:6b:13:c9:3d:76:d3:
40:09:66:6f:b0:24:24:59:dd:6e:61:0d:2d:18:3b:
e1:99:5e:4a:a3:f9:92:13:7c:af:f6:cc:a7:c3:be:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:76:A6:03:24:F3:54:96:AE:AB:81:D8:1C:2E:BF:AC:60:E7:F2:AF
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/j3amAyTzVJauq4HYHC6_rGDn8q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:330::/44
Signature Algorithm: sha256WithRSAEncryption
42:e1:a9:66:93:53:37:ec:f7:d8:9c:f6:59:d3:6b:b2:b7:34:
e3:96:25:35:82:e0:1c:55:62:a6:f7:36:91:00:12:78:a8:2d:
d5:f7:23:42:06:30:e8:96:da:8a:d7:a3:39:17:32:c4:fd:dd:
7b:a3:d6:7c:3d:c2:e0:0d:28:35:f1:eb:d5:44:38:78:31:27:
4a:5b:6e:ac:ef:74:b4:ca:89:9e:5d:e4:7f:06:30:62:9f:10:
be:db:7c:ee:21:8c:23:94:1b:af:6e:21:e6:b1:43:1c:91:08:
a0:ec:e6:f5:a7:1e:48:17:a0:4c:dc:2a:60:bf:15:8f:1b:be:
93:41:a4:b5:32:d7:9c:da:3c:d1:45:4b:e9:a4:80:61:51:f7:
64:79:31:89:98:63:43:34:bc:e3:fc:50:49:03:13:21:00:36:
9c:22:bc:73:c9:c2:33:48:fb:57:ea:48:29:c8:16:47:ee:2b:
ed:11:a1:73:62:fc:b5:ea:9d:0c:51:25:2a:72:d5:40:3b:46:
1f:4d:13:26:0e:52:45:b0:47:35:da:dd:36:d2:6b:7b:03:e2:
32:47:8d:d7:a5:d5:77:94:3c:00:5b:55:ae:b7:a4:e0:94:bc:
24:5a:d9:99:ed:e6:2c:06:27:b7:a4:33:2b:f2:7c:7b:09:4a:
de:27:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org