Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/KNy0S0JmcrxOLMNmLZ8MtP_fzhc.roa
File: KNy0S0JmcrxOLMNmLZ8MtP_fzhc.roa (raw, json)
Hash identifier: iQxv8PrZaXKmYZuK3aLyikglNoPdskknhwpVCvDe/uE=
Subject key identifier: 28:DC:B4:4B:42:66:72:BC:4E:2C:C3:66:2D:9F:0C:B4:FF:DF:CE:17
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01856D418ACDC073D775CA63FEAF5C240BAE
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/KNy0S0JmcrxOLMNmLZ8MtP_fzhc.roa
Signing time: Sun 01 Jan 2023 12:14:49 +0000
ROA not before: Sun 01 Jan 2023 12:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28771
IP address blocks: 2a01:190:167b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:8a:cd:c0:73:d7:75:ca:63:fe:af:5c:24:0b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 12:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28dcb44b426672bc4e2cc3662d9f0cb4ffdfce17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:ca:18:f0:09:7c:69:94:cc:20:8f:cc:65:
09:e0:6f:1b:c7:a4:52:fe:f7:0b:fd:40:51:6b:7b:
6c:91:24:4d:fb:42:ac:37:23:d7:15:fa:b2:a8:12:
f7:21:25:72:ab:5c:c2:91:76:e1:e2:9b:6d:48:eb:
27:f4:f7:de:ca:ce:b7:71:6d:85:7c:cb:29:3c:c9:
3c:68:92:7a:0e:d0:37:d5:bf:ff:92:f5:a1:03:32:
93:bc:0a:6d:0d:6a:19:ac:61:d2:7a:90:49:51:a3:
e5:49:ae:eb:24:e6:88:b1:a7:a1:8f:bf:e4:ee:bc:
16:bd:64:b0:3d:f9:b9:f6:23:a2:cd:1c:10:70:17:
23:e7:50:42:7f:84:f9:bd:05:f8:11:bc:be:91:8c:
5c:b2:60:31:29:aa:99:ed:27:84:81:7d:e5:43:78:
7d:a8:ff:33:91:e3:46:0c:42:af:e1:23:3e:48:64:
a5:50:e5:dd:25:bd:d8:b0:4f:00:e1:92:86:a5:72:
be:88:c6:fd:b8:ff:3c:39:de:13:74:d2:3e:3f:2a:
97:b4:f4:d2:09:b4:14:bd:2d:6a:ed:c4:85:75:ae:
3f:30:21:f7:51:26:77:3f:18:03:48:41:ee:72:87:
72:f8:a8:4e:fb:b8:18:98:42:d4:04:ab:2a:8b:56:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DC:B4:4B:42:66:72:BC:4E:2C:C3:66:2D:9F:0C:B4:FF:DF:CE:17
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/KNy0S0JmcrxOLMNmLZ8MtP_fzhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:167b::/48
Signature Algorithm: sha256WithRSAEncryption
99:02:83:d9:ef:d2:ec:1a:e5:83:3b:6f:a5:29:b6:d7:13:46:
55:ec:3f:c9:37:2c:6b:91:5a:5c:62:8f:1f:2c:2f:8b:23:cf:
c2:48:1a:d7:2a:72:43:17:7f:a5:20:62:a8:b5:a2:b7:fc:ac:
33:e6:f3:9b:38:87:b2:f0:8b:0a:89:ed:68:31:2e:49:bb:dc:
9f:85:ef:1e:26:71:5b:f3:29:31:2e:40:ef:2a:f5:0c:b8:a2:
04:5a:cd:a2:2c:26:30:95:bc:1a:28:07:e2:90:fb:8a:de:3d:
f0:b1:2b:a1:23:cd:cf:d4:04:57:f6:16:48:45:55:99:a1:10:
c1:39:29:0d:f8:ac:ab:02:d9:8c:2c:6c:b1:85:e0:de:80:c5:
50:63:b1:98:52:b6:8b:ba:b2:1a:32:5a:74:93:1a:61:65:7b:
82:0a:36:17:2f:de:7d:08:63:ed:f2:be:b7:59:83:92:d3:dd:
1b:c2:0c:d1:1e:2b:3d:36:92:47:de:7f:05:55:07:48:58:eb:
8e:53:ed:60:0c:5a:c3:3f:81:26:18:ab:fd:99:d6:e9:05:f2:
73:ac:4d:13:ed:02:32:aa:ae:66:fb:04:0f:3d:a0:1b:b5:ff:
d0:9d:bd:04:d3:be:a6:78:fd:a6:ab:0a:a4:cb:73:60:5e:92:
18:33:98:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:26 2024 by rpki-client on console-ams.rpki-client.org