Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/rmNVVlirqr23ymjPOry4-r7xa3o.roa
File: rmNVVlirqr23ymjPOry4-r7xa3o.roa (raw, json)
Hash identifier: 5fSjwQHJ8F3jCdy34g8tKR1JNGx+1kyuouFApAHPOro=
Subject key identifier: AE:63:55:56:58:AB:AA:BD:B7:CA:68:CF:3A:BC:B8:FA:BE:F1:6B:7A
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 0186BBF32011C42206CE1B01B0E01554A9B7
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/rmNVVlirqr23ymjPOry4-r7xa3o.roa
Signing time: Tue 07 Mar 2023 12:01:58 +0000
ROA not before: Tue 07 Mar 2023 12:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209484
IP address blocks: 2a03:5840:f3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:f3:20:11:c4:22:06:ce:1b:01:b0:e0:15:54:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Mar 7 12:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae63555658abaabdb7ca68cf3abcb8fabef16b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:0a:ba:db:98:70:1f:47:56:97:e9:14:39:
3e:95:03:6b:65:73:2e:27:d4:19:ca:ab:ed:21:5e:
df:2a:2e:01:53:a5:56:0b:fb:75:8b:98:3d:53:a3:
7f:8a:39:18:9b:87:2f:93:d5:92:90:96:bd:c9:f3:
52:01:5b:94:8e:24:a1:ef:df:17:38:36:7f:4c:94:
7d:d7:04:28:85:7b:0c:3e:38:4f:6a:2e:98:af:35:
b2:c1:b8:64:48:01:61:3e:d7:96:7d:4d:a7:cf:d3:
3e:5b:5b:42:4e:c8:b5:ff:c0:66:5b:75:a4:7b:3d:
18:05:e8:a7:a2:06:e4:bf:bd:5a:8b:f2:04:00:fb:
ad:8a:7a:2a:f5:99:a9:c5:b2:a0:8c:17:00:d7:ac:
39:4f:17:1c:b4:e3:89:1f:d8:2b:16:76:1f:73:37:
c3:93:c3:b7:ec:fe:51:69:5c:b0:20:8f:8d:86:48:
61:9b:0d:f7:95:7d:70:cb:75:7c:7e:55:99:03:23:
ff:83:e6:ee:60:64:2d:83:96:e4:80:18:e6:13:6e:
85:7b:61:57:6e:f5:bf:99:85:0d:90:49:15:e0:0c:
7e:18:5c:1a:a8:da:67:6c:4a:2c:a2:da:39:b3:aa:
c4:0e:4f:68:d9:2c:d1:5d:09:c0:5d:da:fa:ed:ec:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:55:56:58:AB:AA:BD:B7:CA:68:CF:3A:BC:B8:FA:BE:F1:6B:7A
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/rmNVVlirqr23ymjPOry4-r7xa3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:f3::/48
Signature Algorithm: sha256WithRSAEncryption
38:a0:e1:a8:6b:9e:55:c8:d1:db:3f:00:d7:a5:2f:5a:81:00:
b9:d5:a1:e6:8e:43:23:d7:8e:cc:59:25:ec:15:02:90:76:c1:
da:d1:10:3d:37:a4:ec:45:21:b5:97:f4:39:ee:bf:c6:8b:3b:
42:a1:fe:66:a3:3e:94:a2:9b:c3:b9:d8:5c:d4:89:18:de:59:
80:2b:64:35:fc:d8:41:c7:ff:d8:6f:67:7b:22:66:8c:5f:51:
09:f2:93:bc:7a:89:5c:f7:f7:14:dd:c9:2a:66:97:de:41:4a:
4d:88:ad:8d:4f:04:12:57:78:31:2f:a0:1a:7e:60:d3:08:85:
b5:2c:d7:9b:2d:c8:cf:31:ed:3d:e9:91:b4:5a:b6:e5:be:cb:
cf:3d:d5:a1:40:12:b6:17:fc:17:f7:03:f9:79:56:16:b7:21:
e0:d6:d8:7e:40:ec:9a:b9:d6:01:9a:bd:a3:3f:81:50:53:1a:
50:6e:c6:da:6f:59:6c:45:90:a4:47:73:26:5b:5a:67:f7:bb:
be:2e:83:02:20:a4:73:32:4e:ce:fa:b7:0b:56:4d:d7:59:f1:
3b:39:53:1d:fd:97:97:10:2f:ad:e9:cb:49:cc:3a:b4:42:ae:
71:3a:cd:a0:51:84:f2:00:bb:31:9e:47:44:7d:80:7e:d3:21:
89:13:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org