Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/8P7HxraWq2oEnyHF0ll8LVrMqxU.roa
File: 8P7HxraWq2oEnyHF0ll8LVrMqxU.roa (raw, json)
Hash identifier: RJT8MIdTWDE4wKJnJnJPuukG6aOZzaUNG5rnsxTOtZI=
Subject key identifier: F0:FE:C7:C6:B6:96:AB:6A:04:9F:21:C5:D2:59:7C:2D:5A:CC:AB:15
Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984
Certificate serial: 01856E141A197EB63B4D479832195B1DA683
Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/8P7HxraWq2oEnyHF0ll8LVrMqxU.roa
Signing time: Sun 01 Jan 2023 16:04:49 +0000
ROA not before: Sun 01 Jan 2023 16:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a00:8860::/29 maxlen: 29
2a00:8861::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:1a:19:7e:b6:3b:4d:47:98:32:19:5b:1d:a6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984
Validity
Not Before: Jan 1 16:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0fec7c6b696ab6a049f21c5d2597c2d5accab15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:a0:d3:fa:84:3f:13:5d:f0:3e:66:d2:7c:
c1:41:ff:5b:1b:50:cc:0a:3a:03:70:95:40:ec:e8:
6e:78:0b:50:31:9b:84:39:2a:ed:ec:45:77:a4:92:
d8:33:bb:5d:30:fb:c9:4f:e1:0c:31:d7:86:b4:9e:
0b:ed:94:ca:21:10:e7:1a:7f:99:88:03:00:cf:0f:
03:7d:7e:d3:d2:93:a5:6c:15:11:41:4d:98:4f:aa:
b6:0e:cd:d2:3b:8d:48:b2:8b:2a:8e:c9:2f:79:b9:
cf:02:c1:e6:91:31:0a:e5:f1:cc:02:e1:55:34:1c:
6b:24:60:b0:b9:dc:9d:01:2b:97:ef:83:96:cb:e9:
75:29:da:ea:a8:6f:a2:9e:ed:cd:88:b7:a8:4d:f7:
9e:e0:f6:4c:6e:c6:0a:05:dd:3a:ae:21:2a:a6:da:
8d:6d:08:38:10:ab:bc:c5:5b:88:0b:28:47:a4:47:
80:81:77:ac:03:42:4c:d4:a6:c0:46:f7:98:4e:5c:
99:af:03:66:05:75:93:cf:f9:7b:e1:f7:6f:50:75:
15:83:15:7c:61:68:f3:bb:30:6b:7d:4d:f5:97:62:
f0:80:77:fd:49:4d:3a:38:11:19:f1:52:a3:b3:52:
8e:75:78:e5:3c:e0:26:fe:1d:ca:60:eb:f8:70:3a:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FE:C7:C6:B6:96:AB:6A:04:9F:21:C5:D2:59:7C:2D:5A:CC:AB:15
X509v3 Authority Key Identifier:
keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/8P7HxraWq2oEnyHF0ll8LVrMqxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8860::/29
Signature Algorithm: sha256WithRSAEncryption
41:ab:bf:df:18:17:84:53:15:7b:43:67:ba:22:df:ea:f3:b4:
ed:ef:96:02:89:3f:7d:8f:b6:9a:cb:bc:18:4e:62:86:55:dd:
53:fb:bf:d3:c4:26:d4:ff:a0:86:01:be:c8:7e:bf:67:11:3a:
6f:0c:24:d4:ba:4f:39:b0:56:35:46:13:5b:67:17:b2:bb:36:
07:87:82:66:9b:59:89:30:e4:10:3f:3f:37:51:22:aa:54:a5:
e6:7e:7a:3f:85:5b:5d:0c:02:89:c2:55:90:7c:b3:76:70:f2:
61:a9:21:16:b6:bb:a3:38:2b:91:83:2f:41:d7:40:2b:d8:de:
f0:cc:d3:7b:d1:0e:05:5c:7f:ac:16:92:04:04:e2:7b:b3:6e:
b4:c4:5c:b8:f6:54:3e:d8:9b:60:1c:a5:dd:e2:c6:2a:83:ec:
4b:a9:d1:11:95:dc:c8:42:d3:87:03:05:cc:e0:8f:c7:c4:27:
60:07:f5:cb:80:e8:f1:c9:97:80:47:14:3b:0f:3c:1f:47:a1:
24:c1:1c:e5:0c:d8:07:c7:cc:0b:fa:1b:dc:a0:e4:f4:2a:2a:
9b:9f:c3:95:4d:4e:13:d0:67:06:76:7f:5b:b6:ef:4a:32:3b:
53:3b:a9:6d:80:b2:d7:ab:5e:f0:ab:3b:b6:b8:6e:81:52:a4:
80:2a:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:34 2024 by rpki-client on console-fra.rpki-client.org