Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/SKfK6-HdM-jnGB9rmUZkM8Bq13k.roa
File: SKfK6-HdM-jnGB9rmUZkM8Bq13k.roa (raw, json)
Hash identifier: H52svZe9JWw867E9JdONP8k+aXRX7ICqnFxGtl49kjQ=
Subject key identifier: 48:A7:CA:EB:E1:DD:33:E8:E7:18:1F:6B:99:46:64:33:C0:6A:D7:79
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 01856F1D90FDED1439659CA690E651BC7D69
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/SKfK6-HdM-jnGB9rmUZkM8Bq13k.roa
Signing time: Sun 01 Jan 2023 20:54:46 +0000
ROA not before: Sun 01 Jan 2023 20:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205056
IP address blocks: 2a02:7080:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:90:fd:ed:14:39:65:9c:a6:90:e6:51:bc:7d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 1 20:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48a7caebe1dd33e8e7181f6b99466433c06ad779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:34:5b:1b:db:06:2c:0b:0f:d5:9b:e2:22:
26:91:8c:f2:98:ab:94:43:6f:c1:47:61:8a:8a:cc:
ff:50:09:77:d4:83:37:86:ab:c5:a5:b1:2c:78:1d:
15:7e:42:c8:17:70:c1:d5:53:23:9e:1c:d1:62:fb:
84:cb:e5:b6:c6:a2:24:ef:9b:ed:e6:7c:61:ae:7e:
88:f7:53:d2:8e:80:89:ae:be:e1:c9:44:4c:ba:f1:
aa:8c:14:b0:1d:81:53:4b:1f:a1:04:b2:d2:04:64:
20:f6:5a:93:88:d2:a9:52:ce:1a:a6:8d:ee:b0:1e:
67:76:87:0a:ea:f1:91:a5:e5:e2:ce:ca:58:3c:23:
c8:4b:ea:ea:f2:3f:e0:23:63:82:a3:ad:1e:7e:e6:
08:db:07:15:e0:59:15:f8:1a:46:14:88:41:bb:e6:
1d:86:84:62:17:b9:7f:85:c4:91:2b:ab:3e:a2:5b:
8d:34:8a:97:6a:79:ea:f4:2d:ec:f9:39:50:3c:d1:
0c:55:06:ae:dc:be:f0:41:b1:db:d1:7a:78:40:9e:
fb:fa:62:c5:1d:99:43:ab:f6:c1:e7:81:20:ea:63:
8f:cf:f6:6e:03:e9:4c:c9:29:38:aa:8d:79:97:a0:
a1:a8:b1:b9:81:9a:9c:57:b6:4d:0d:0f:9e:b0:80:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A7:CA:EB:E1:DD:33:E8:E7:18:1F:6B:99:46:64:33:C0:6A:D7:79
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/SKfK6-HdM-jnGB9rmUZkM8Bq13k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7080:2000::/48
Signature Algorithm: sha256WithRSAEncryption
93:dc:07:cd:c5:7f:fe:46:26:b8:65:92:d3:8a:1d:62:08:3b:
fc:70:62:b4:40:8e:28:54:d7:88:11:da:e7:cd:66:db:2e:a5:
43:3f:de:fd:d0:e6:ad:dd:cf:1f:57:fe:c6:54:0f:78:f6:77:
cf:96:7e:a8:1a:2f:81:57:90:85:c3:3e:5a:03:2f:ff:0d:2b:
91:56:e9:13:89:6d:29:5f:2b:0c:1e:34:e4:2c:31:62:ab:cf:
91:35:ea:b2:83:66:21:02:6c:5d:b5:7d:2d:cb:83:dd:4c:dd:
7b:47:cb:a4:f6:91:22:78:99:c4:18:32:25:49:c4:8e:0c:07:
ce:04:34:6f:b5:a1:07:8a:59:51:38:69:78:7f:b7:be:38:ce:
e5:3d:40:9a:f6:a0:af:fe:ba:90:b2:ac:b3:12:5a:9e:8b:0e:
cb:52:16:62:c1:33:d2:e1:1e:12:a1:e2:f2:a9:75:bb:49:c1:
7b:ee:6a:d0:03:db:4f:de:6c:1c:39:1a:7b:ae:22:bf:73:3b:
a4:80:69:41:52:3d:95:2f:22:70:e4:8b:99:1b:6a:1a:a8:aa:
58:87:5f:44:cb:06:13:37:25:35:6e:d4:94:63:38:46:61:d2:
4c:d3:ac:27:1f:89:8d:9a:b1:2c:73:26:3a:45:34:53:ed:04:
a5:d6:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:47 2024 by rpki-client on console-fra.rpki-client.org