Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/oB7aqRUzRu8Asqy-A7K-AqvbtVU.roa
File: oB7aqRUzRu8Asqy-A7K-AqvbtVU.roa (raw, json)
Hash identifier: 5DC/mcDmEx1B6SDZHOW+efmzZ/1ue1AyuAt9uWxZ/+0=
Subject key identifier: A0:1E:DA:A9:15:33:46:EF:00:B2:AC:BE:03:B2:BE:02:AB:DB:B5:55
Certificate issuer: /CN=7981ea4d507fb0ae07159f6f88def958430fd070
Certificate serial: 018BBE280D200F958960AA37AD2E3E128F94
Authority key identifier: 79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/oB7aqRUzRu8Asqy-A7K-AqvbtVU.roa
Signing time: Sat 11 Nov 2023 11:32:57 +0000
ROA not before: Sat 11 Nov 2023 11:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47285
IP address blocks: 2a12:eb80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:28:0d:20:0f:95:89:60:aa:37:ad:2e:3e:12:8f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7981ea4d507fb0ae07159f6f88def958430fd070
Validity
Not Before: Nov 11 11:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a01edaa9153346ef00b2acbe03b2be02abdbb555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:fd:54:71:31:6d:b1:9f:40:bf:20:da:16:
d7:a7:9b:82:d6:a1:3e:4a:ac:4b:ee:b1:1a:ab:6f:
bb:07:41:73:cb:c0:54:08:b8:f2:95:94:dd:4d:fe:
ba:28:a4:0a:12:0d:d4:55:dd:68:f6:f7:86:f1:e8:
05:91:83:7c:cb:b6:d6:86:2d:33:5d:2c:72:33:20:
22:04:09:d7:02:85:c1:1b:f5:f7:3f:eb:76:09:54:
aa:7f:bb:cb:88:96:19:ba:ca:0e:8d:89:4d:b1:41:
3c:58:f1:ef:6b:f8:37:2c:e9:0a:c1:33:41:90:13:
e6:9a:00:59:d6:7b:80:61:b9:00:40:9d:8d:18:27:
b5:3c:d0:e7:16:65:cc:96:be:c7:67:28:1f:57:47:
cf:12:c8:09:c8:b6:eb:a2:ea:3f:59:4a:78:0f:f7:
c1:2d:ce:4e:69:ea:09:89:0d:aa:cb:5f:fe:23:41:
41:8f:cd:7c:f5:39:9a:ee:30:69:c8:3d:ff:05:71:
fb:88:44:4a:35:ba:53:2e:ee:f2:57:68:e0:68:5f:
cf:55:9f:e2:59:81:55:c6:ed:8d:8b:e0:b3:58:cb:
85:f3:a6:75:21:a7:4a:8f:08:b3:7c:91:58:19:31:
9c:47:bd:dd:b2:3f:3e:05:54:e2:5b:38:23:89:2a:
0d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1E:DA:A9:15:33:46:EF:00:B2:AC:BE:03:B2:BE:02:AB:DB:B5:55
X509v3 Authority Key Identifier:
keyid:79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/oB7aqRUzRu8Asqy-A7K-AqvbtVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/eYHqTVB_sK4HFZ9viN75WEMP0HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:eb80::/48
Signature Algorithm: sha256WithRSAEncryption
b6:9a:94:95:9a:fe:a2:75:9c:b1:a9:16:c9:ac:93:7e:86:71:
95:88:6d:b5:59:ed:40:f7:a8:dc:f8:a8:60:f0:8e:93:c4:78:
63:d1:d1:4a:e1:f0:cd:42:65:c5:a7:6d:9c:1b:e1:e8:9c:22:
bf:15:db:da:e2:86:19:91:f0:17:d1:de:9b:d9:af:ce:f5:d6:
be:38:fe:12:2b:1a:22:86:f5:34:65:78:5d:7e:cc:6c:69:21:
f4:19:03:fd:b7:c2:ef:bc:15:c0:54:78:51:29:55:db:66:41:
f0:b2:dd:5a:f6:8f:f8:38:41:3f:43:2d:1a:48:6e:15:a9:25:
2a:96:b8:dc:40:e8:ab:64:d4:6f:0b:2f:06:7b:f0:a1:2e:7b:
c1:bd:96:e0:10:7f:ad:d3:7b:8a:f3:f7:e8:a1:82:4b:f2:3c:
30:70:d6:27:4c:66:ac:bd:30:26:79:dc:58:a0:5c:b4:dd:9a:
3c:9b:e7:01:c6:a8:37:7e:f7:29:29:18:51:11:54:da:49:bb:
f5:8f:41:56:08:d5:bf:74:e8:69:15:8f:67:5b:9d:2c:6d:51:
ed:d8:eb:cd:0f:10:95:6b:04:e2:91:a0:1b:90:6d:0b:b3:a9:
3f:c3:92:77:a0:d0:96:4e:21:d2:3b:5d:b3:a8:12:61:c1:07:
90:89:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:10 2024 by rpki-client on console-ams.rpki-client.org