Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/v0uBVvWk2Cyzb9Jr5ZX50kxG6eY.roa
File: v0uBVvWk2Cyzb9Jr5ZX50kxG6eY.roa (raw, json)
Hash identifier: L1wr9lkcvOiCA0XRFngCFQduJ/QrBJHADy4R1DkoQBU=
Subject key identifier: BF:4B:81:56:F5:A4:D8:2C:B3:6F:D2:6B:E5:95:F9:D2:4C:46:E9:E6
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018723186FA6BC0F6AD789DE2385C6F50E11
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/v0uBVvWk2Cyzb9Jr5ZX50kxG6eY.roa
Signing time: Mon 27 Mar 2023 12:43:36 +0000
ROA not before: Mon 27 Mar 2023 12:43:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199158
IP address blocks: 2a03:5840:f7::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:18:6f:a6:bc:0f:6a:d7:89:de:23:85:c6:f5:0e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Mar 27 12:43:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf4b8156f5a4d82cb36fd26be595f9d24c46e9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:4c:76:4e:96:b1:38:50:58:4e:ac:29:bf:
e9:28:04:0c:e6:c8:4b:b6:f3:0d:3a:0d:7f:a9:46:
0d:7b:cc:21:9f:c6:93:48:86:e0:87:1a:ec:aa:2d:
52:ff:8d:73:d1:0b:53:d4:00:17:a4:f9:8c:90:4d:
d1:19:3a:72:cf:4d:74:3d:3d:01:aa:aa:81:87:4f:
80:41:86:97:9e:83:6d:5f:ca:93:3a:bd:c9:ee:ee:
70:11:53:89:75:3a:41:3c:92:5d:df:e6:3b:10:48:
94:5d:0c:a7:3e:69:50:73:90:42:5d:2c:23:0a:92:
70:ac:35:ae:c4:82:25:50:d5:fb:14:8e:60:dc:14:
3a:54:dd:de:bb:46:92:17:cd:39:e2:bc:36:fd:af:
ef:c1:9f:16:e4:62:b8:1d:04:90:95:4f:77:c0:31:
eb:44:5f:67:87:2c:51:2f:3a:2d:f5:c3:c4:68:e1:
2d:ca:b6:cf:ca:a8:19:79:9c:90:69:67:1e:84:88:
dc:10:7b:dc:fd:24:4e:72:67:2e:ca:da:d9:21:c6:
d3:08:f3:70:e5:f2:d9:56:72:e1:02:f5:b8:d9:c2:
0f:63:34:25:49:9c:fb:23:59:0e:69:61:45:1f:c1:
95:3e:4c:c2:e9:66:b4:8e:ce:95:66:b1:ed:77:4c:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4B:81:56:F5:A4:D8:2C:B3:6F:D2:6B:E5:95:F9:D2:4C:46:E9:E6
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/v0uBVvWk2Cyzb9Jr5ZX50kxG6eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:f7::/48
Signature Algorithm: sha256WithRSAEncryption
6a:fc:a1:82:55:24:ca:a0:55:4c:d3:7c:00:8e:3e:e2:a6:4c:
f3:34:4c:d4:cd:d6:c2:51:d4:3d:ca:3d:27:ee:be:39:5b:2c:
81:8b:b2:72:30:fe:08:43:9f:25:ff:82:a7:4f:b8:16:f8:18:
80:b8:8f:53:e7:f1:94:d2:42:a7:87:6b:8b:cd:03:d8:9c:31:
46:70:a8:77:61:0a:1f:ae:88:09:ee:4c:08:d0:17:bb:80:4e:
a3:4a:81:b4:be:05:9e:e0:7d:9d:12:a6:af:70:5a:70:81:4f:
c1:3a:93:f3:07:da:be:b4:35:fa:0c:c7:96:9d:5a:1e:3d:47:
cf:f8:96:50:f8:3f:e2:6a:17:b6:32:20:cb:f1:b6:e6:33:f1:
85:66:62:5b:df:01:32:e1:1b:42:50:db:02:ed:87:08:d4:42:
99:ef:e8:f5:cd:6b:95:e8:5e:7a:6d:97:cb:0a:fe:78:88:27:
41:56:39:f9:d8:f3:16:5a:09:25:22:a7:88:f8:fb:40:f9:92:
45:64:b8:50:45:32:58:b7:59:5b:8e:2d:42:cf:8f:96:f2:e7:
5e:c6:21:38:f2:3f:b5:85:1d:70:c6:31:93:20:ae:ac:c6:4b:
09:d3:81:fd:af:ac:4d:93:e4:cf:ed:80:d2:1c:b7:4f:0b:bf:
53:e3:9f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:23 2024 by rpki-client on console-fra.rpki-client.org