Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/ae9tTQc6nxONkmsyue_oJv1AS2s.roa
File: ae9tTQc6nxONkmsyue_oJv1AS2s.roa (raw, json)
Hash identifier: nDHBYknOAgw1c0nUol6FJS7wN1kHjkq/i3nAhPhQcpY=
Subject key identifier: 69:EF:6D:4D:07:3A:9F:13:8D:92:6B:32:B9:EF:E8:26:FD:40:4B:6B
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 018571C30F5A97C6347918F0E8DF19810764
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/ae9tTQc6nxONkmsyue_oJv1AS2s.roa
Signing time: Mon 02 Jan 2023 09:14:46 +0000
ROA not before: Mon 02 Jan 2023 09:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206699
IP address blocks: 2a0b:6b86:b00::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:0f:5a:97:c6:34:79:18:f0:e8:df:19:81:07:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 2 09:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69ef6d4d073a9f138d926b32b9efe826fd404b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:1f:12:ad:40:c6:d8:22:4c:bc:e4:4b:a9:
7b:33:17:fd:65:34:a1:71:5d:78:d3:80:b0:a9:98:
b6:7e:25:17:ef:27:46:ca:ae:5e:7d:e6:5c:94:70:
cd:2d:3a:8f:11:2c:72:fa:e3:64:70:11:f1:d6:7e:
3b:b5:6f:20:31:0e:01:ea:36:c1:10:aa:ce:ce:b9:
d4:5d:3d:72:cd:12:f5:d3:28:20:3b:27:c0:73:55:
79:06:75:35:6e:8b:2f:86:6c:a0:7e:96:54:84:08:
5e:78:9d:38:b4:be:f1:4c:d0:7f:55:67:c3:94:25:
e1:37:f9:64:1c:8b:25:17:d2:ce:06:4e:34:8e:a9:
4c:c2:96:97:7a:d4:c0:fc:25:1b:e8:bf:6d:20:f8:
90:5d:41:4f:8a:fc:11:cc:19:ae:8d:6e:34:1f:17:
db:e4:f7:4f:b4:ce:bf:78:75:81:ce:2b:30:ed:c2:
52:b5:8e:3f:fb:59:f5:88:10:b0:dc:4e:27:0a:dc:
7d:63:70:9b:4f:62:17:86:f8:d4:15:e7:60:4a:0f:
8f:87:bb:36:80:bc:76:83:b9:4c:1c:39:8e:c1:04:
40:37:cb:aa:3d:fc:89:93:04:22:14:16:fc:80:35:
83:71:ac:57:ad:18:ce:43:ee:92:89:f5:3e:1d:b1:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EF:6D:4D:07:3A:9F:13:8D:92:6B:32:B9:EF:E8:26:FD:40:4B:6B
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/ae9tTQc6nxONkmsyue_oJv1AS2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b86:b00::/40
Signature Algorithm: sha256WithRSAEncryption
1b:a1:46:15:2e:52:68:70:97:55:76:ec:d0:c9:49:d0:2c:5c:
a0:f2:f9:88:d1:eb:47:25:32:b2:a4:8b:8b:cc:2a:47:85:c0:
1e:93:e8:49:dc:12:43:19:c1:56:63:c1:68:ab:58:fa:6e:c2:
d8:66:ae:b9:9c:8d:65:3e:0c:87:da:80:67:53:93:80:02:6e:
89:3c:e3:bc:9a:5a:4b:d0:c7:55:e8:03:9c:db:93:49:4b:c0:
e6:ba:71:2f:f4:3e:70:82:c6:25:7b:73:e0:85:0f:75:08:56:
c3:33:2a:2c:80:cf:a9:d7:6c:b4:e3:11:c0:78:e6:ee:4f:db:
b8:94:b8:e0:b6:bf:6b:37:07:8d:bc:80:5a:fb:af:4c:9e:62:
bf:c2:77:87:6e:af:1f:7b:ed:bc:26:ed:6b:d4:c8:de:74:75:
f1:3b:c8:25:91:a2:0c:5c:4e:4c:d3:c8:7e:2f:15:91:10:f5:
0e:54:20:67:87:0a:08:c8:b9:1d:1c:1e:41:c5:32:25:4c:04:
03:8b:01:7f:5b:11:ef:03:29:4a:6c:27:d0:84:cb:3c:d8:48:
2a:0e:2b:93:f1:6e:6e:0a:4a:08:bc:72:8f:27:16:57:84:f6:
ef:75:a2:04:6c:bd:af:6b:73:6f:91:7e:33:0b:22:4c:57:57:
7e:51:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:08 2024 by rpki-client on console-fra.rpki-client.org