Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/x2zu9yxFbcCj5Z1EqdsVe5w35l0.roa
File: x2zu9yxFbcCj5Z1EqdsVe5w35l0.roa (raw, json)
Hash identifier: jQ9TeqgExY9zk+922lKsqUsi0ef8Qrc23vVdiyv4pLU=
Subject key identifier: C7:6C:EE:F7:2C:45:6D:C0:A3:E5:9D:44:A9:DB:15:7B:9C:37:E6:5D
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018A0594FC8C85EB544B3343F8C55AC61CE6
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/x2zu9yxFbcCj5Z1EqdsVe5w35l0.roa
Signing time: Thu 17 Aug 2023 22:19:24 +0000
ROA not before: Thu 17 Aug 2023 22:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49334
IP address blocks: 2a02:26b0:8003::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:05:94:fc:8c:85:eb:54:4b:33:43:f8:c5:5a:c6:1c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Aug 17 22:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c76ceef72c456dc0a3e59d44a9db157b9c37e65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:a8:20:b3:0b:d7:60:fb:15:d2:b6:e1:30:
bc:66:3a:c6:c0:d4:8b:95:53:d0:9a:16:fd:77:81:
1c:d9:e6:49:89:f0:c2:35:29:ed:ee:74:f0:58:c9:
b3:65:de:43:85:32:5a:f0:36:65:c3:ba:3a:1f:65:
fe:2f:50:b4:fb:38:31:cd:b3:ab:46:94:36:c5:13:
f2:c3:3b:88:43:4a:83:87:f3:48:35:3a:f7:66:2a:
02:ef:19:35:3c:ba:92:35:43:44:ca:d9:a9:6c:25:
08:55:92:52:a4:fd:46:f1:57:88:12:3b:ee:6d:01:
be:66:0e:f3:d6:6c:fd:90:3c:11:30:14:ac:00:a1:
44:8a:f6:c1:65:a7:eb:eb:28:2f:5d:31:74:97:1e:
8b:d3:9d:3c:6c:73:cd:8e:ef:06:fd:68:db:14:71:
1a:90:3b:32:0f:36:b6:c2:ec:15:99:55:01:14:21:
eb:7f:37:6f:da:55:92:6b:0c:5f:c6:2c:dd:61:a7:
b3:18:60:66:a4:55:a9:99:49:53:77:ce:84:3f:df:
7b:78:76:f2:56:72:12:25:fc:3d:02:5b:21:66:34:
bd:24:a6:9e:30:9f:da:bb:96:6f:c3:e4:87:a9:91:
dd:c9:02:98:38:8a:39:90:06:a0:8e:76:1f:4a:37:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6C:EE:F7:2C:45:6D:C0:A3:E5:9D:44:A9:DB:15:7B:9C:37:E6:5D
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/x2zu9yxFbcCj5Z1EqdsVe5w35l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:26b0:8003::/48
Signature Algorithm: sha256WithRSAEncryption
3e:5a:86:d7:21:33:de:34:eb:2c:6a:47:8b:d5:92:ca:69:18:
79:66:bf:f8:ed:d4:a3:c8:55:24:e8:c0:09:ac:ad:e8:c4:66:
69:f8:bf:61:91:49:98:9b:ec:b5:6d:61:b3:d2:fd:be:70:90:
2e:fb:1f:04:95:73:73:bb:e7:a6:b9:f4:66:2e:10:70:ac:a8:
f5:8a:47:ac:5c:42:42:2e:0c:23:3e:5a:22:da:d6:21:ff:da:
89:a1:44:74:0a:22:b5:94:82:e4:55:0b:43:95:10:d2:96:95:
56:d2:49:6a:2c:8b:d3:2c:6b:90:03:15:f0:db:77:72:83:7c:
06:4f:70:dd:c5:03:c6:8d:4d:b8:d6:94:88:8d:ea:03:de:6b:
f0:56:21:1e:54:d3:b6:2e:06:f5:f6:e6:f0:16:aa:51:ed:56:
da:c6:bb:08:2f:f8:05:83:94:90:c6:6b:66:0f:76:1b:ec:b2:
0f:dc:79:01:7b:07:c2:e8:dc:af:11:27:63:84:87:46:c5:99:
40:91:e5:64:80:1a:bd:f1:a2:7a:e5:b8:56:7f:46:44:92:ca:
96:5e:92:f3:c4:7f:df:ac:bf:27:cb:a4:15:9e:79:8d:0c:f2:
9b:f1:e3:8b:46:e2:cb:33:f4:79:11:1f:c6:6a:7f:6a:9f:99:
fc:ff:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:15 2024 by rpki-client on console-fra.rpki-client.org