Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/5Dspaq8SJ_SRQf-yGXv3o_U_juU.roa
File: 5Dspaq8SJ_SRQf-yGXv3o_U_juU.roa (raw, json)
Hash identifier: Ki3CnbSllwCr2TV3BVOa/kVLhWqXIslUA+1IyZsVHu0=
Subject key identifier: E4:3B:29:6A:AF:12:27:F4:91:41:FF:B2:19:7B:F7:A3:F5:3F:8E:E5
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C3229C39AD07F10F04AA4D1ECD2ECA
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/5Dspaq8SJ_SRQf-yGXv3o_U_juU.roa
Signing time: Mon 02 Jan 2023 09:14:51 +0000
ROA not before: Mon 02 Jan 2023 09:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207748
IP address blocks: 2a06:e881:7100::/46 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:22:9c:39:ad:07:f1:0f:04:aa:4d:1e:cd:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e43b296aaf1227f49141ffb2197bf7a3f53f8ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:a3:bf:44:e5:d2:41:c9:d9:00:ec:e3:43:
c0:a3:22:27:26:46:62:57:05:3a:d3:38:cd:21:7f:
fe:9b:48:3e:5f:ed:22:ff:c0:be:26:77:20:a7:c4:
8c:e7:06:33:e8:d4:56:eb:97:c1:45:2c:68:23:8a:
6b:28:7b:a7:67:e1:01:30:af:02:f0:79:ad:5a:be:
09:41:70:14:76:5a:be:93:31:cc:85:3c:c6:1f:95:
76:c2:6e:57:56:3e:82:3a:84:c6:f9:bd:0a:bc:48:
f5:be:81:4d:f0:1a:31:75:91:09:cf:5b:70:23:60:
b0:91:64:7a:e1:6f:b7:66:16:a6:79:8e:fb:f7:7d:
71:62:c4:4a:3f:8e:b0:11:34:c2:ea:02:88:9f:05:
90:12:a0:39:26:2f:2f:c3:dc:05:97:4e:5d:fc:f2:
47:03:5a:c8:54:cd:30:27:3f:5e:e3:5f:17:f4:16:
0f:5d:bb:3e:f8:a0:ba:01:d7:85:e0:6c:3a:21:ac:
cf:ee:51:55:b3:d5:46:3a:f1:ac:b0:d0:4d:5a:8b:
8b:c8:7d:dd:79:c4:8f:20:32:4b:b8:7c:61:42:e8:
a9:54:92:9a:c5:55:8e:56:e6:6b:27:64:45:98:a7:
22:fd:a1:9f:d2:fe:9a:4b:5d:87:46:6f:4d:6c:41:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:29:6A:AF:12:27:F4:91:41:FF:B2:19:7B:F7:A3:F5:3F:8E:E5
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/5Dspaq8SJ_SRQf-yGXv3o_U_juU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7100::/46
Signature Algorithm: sha256WithRSAEncryption
9a:cd:1b:d5:3a:ec:fc:49:83:9f:fd:c9:a4:1b:c1:aa:76:4a:
20:9f:34:90:99:99:ce:56:20:2f:44:70:d6:63:4c:2b:16:33:
04:f3:3f:64:4f:e1:24:7a:c6:a1:71:62:40:f3:10:69:7e:e1:
48:ae:2c:d0:79:2b:d1:c1:d8:20:e1:27:fd:d8:78:1e:df:89:
45:70:56:21:76:8d:82:e6:90:9d:f3:45:23:b1:fa:c7:83:e7:
24:56:96:ad:c8:67:57:7f:51:d7:92:6d:60:79:6b:5e:8d:10:
8b:47:ae:2b:ad:df:75:57:ca:e4:ed:81:1e:66:e8:27:95:bf:
72:01:48:c3:93:56:ab:06:3f:f8:f8:25:c5:76:79:f6:db:3f:
d7:2d:63:3a:0a:71:59:f3:a6:fc:db:64:66:29:0c:50:9b:bc:
9b:83:8a:9a:99:59:d9:50:fd:52:f8:18:be:6a:77:fb:37:89:
74:a3:b2:46:aa:49:4e:6d:d4:f1:93:f7:cb:de:7c:36:71:64:
b6:e5:4b:08:83:92:87:1e:ec:2e:e6:bc:33:b5:ae:49:18:63:
6e:e6:16:47:89:62:85:5b:89:dc:43:96:31:60:06:d0:d7:b8:
d2:37:e6:c3:e7:85:26:1a:79:a0:f4:bf:e0:8c:32:32:80:71:
2e:78:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:16 2024 by rpki-client on console-fra.rpki-client.org