Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/VoA7tW1PW8qWLTh8xsSQO3yuxIE.roa
File: VoA7tW1PW8qWLTh8xsSQO3yuxIE.roa (raw, json)
Hash identifier: G7D8faRoW4kPF4tAqSB6ZTQUa7EJO0tnrUUYByBKPJ0=
Subject key identifier: 56:80:3B:B5:6D:4F:5B:CA:96:2D:38:7C:C6:C4:90:3B:7C:AE:C4:81
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C31D94D97EBB375B1EFF3509B5174D
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/VoA7tW1PW8qWLTh8xsSQO3yuxIE.roa
Signing time: Mon 02 Jan 2023 09:14:50 +0000
ROA not before: Mon 02 Jan 2023 09:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205212
IP address blocks: 2a06:e881:3200::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:1d:94:d9:7e:bb:37:5b:1e:ff:35:09:b5:17:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56803bb56d4f5bca962d387cc6c4903b7caec481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:97:f4:d9:90:e2:cd:ee:8a:71:4a:f4:0f:
10:85:63:e8:1d:5b:07:b7:b9:d4:01:93:cd:39:4b:
21:9e:68:a0:47:9a:d9:ee:71:ea:ec:f5:19:69:13:
0f:23:84:ca:62:29:dd:f3:be:25:96:7b:6f:39:6f:
4e:6c:e8:a4:3f:78:37:96:95:67:85:46:2c:bb:73:
86:99:bd:9c:cc:3f:78:d2:37:9e:9c:79:97:3a:da:
be:51:86:a0:b5:f4:d3:6d:c9:d9:a5:d8:d3:fb:ec:
79:b7:e1:6f:b6:97:d4:e6:22:a2:f6:4f:71:78:03:
78:36:ae:bb:90:70:a3:09:20:f6:f4:55:41:1e:a2:
b7:36:cc:6f:d6:63:c7:1e:09:f2:3a:be:96:61:47:
68:b2:67:15:2b:62:c2:1d:50:77:96:4b:d8:08:d0:
54:4f:03:83:b8:41:e7:09:c4:8e:24:5e:6e:a7:f1:
f4:49:74:bf:f4:0c:2d:54:66:ac:e2:b4:49:63:39:
29:8e:b4:50:08:03:6a:cc:52:f6:aa:3f:d8:65:12:
75:73:dd:e7:1a:85:05:0f:0e:f7:c0:38:ce:49:d5:
de:f8:d4:21:41:63:d1:8c:6f:01:9d:55:e5:c0:34:
72:e6:66:df:aa:43:c5:74:31:57:f0:50:7c:f5:61:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:80:3B:B5:6D:4F:5B:CA:96:2D:38:7C:C6:C4:90:3B:7C:AE:C4:81
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/VoA7tW1PW8qWLTh8xsSQO3yuxIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:3200::/44
Signature Algorithm: sha256WithRSAEncryption
a0:88:39:a1:ad:e3:35:3a:d5:57:eb:9a:0f:3e:38:73:c7:3d:
e4:b3:4a:a4:ae:fd:8c:a3:80:aa:85:2f:ec:d2:eb:0d:e1:52:
a7:26:d3:40:ec:42:13:4b:2d:4f:3f:2d:f0:28:0a:57:a1:44:
1c:53:80:3b:61:7f:9b:12:b8:f4:cb:9d:ce:27:b8:d1:78:75:
de:f9:17:32:c1:b6:f7:bd:96:c0:5d:20:18:03:92:93:94:13:
bc:4c:68:61:99:0c:f6:03:95:bb:d9:ac:11:d1:2e:fe:45:d0:
ee:49:36:32:64:39:f1:47:2f:54:28:f6:42:ed:67:4b:85:c3:
69:60:2e:d6:13:af:b4:a3:fe:4a:5c:d1:65:0f:bc:2c:0a:9d:
28:72:b5:e2:b7:fc:e0:ec:b0:8f:66:9b:a6:06:f5:82:c7:20:
17:f9:43:fb:22:fd:16:67:d5:b6:7c:b8:8e:4d:df:b3:29:85:
15:c7:a6:35:88:ff:85:5f:81:cb:9f:08:f9:18:a9:74:67:8e:
52:56:2b:a2:d4:d5:ac:1c:d1:f5:e6:00:73:d3:f4:cf:6a:1d:
9d:5c:56:cd:27:80:8d:22:4f:06:43:73:99:80:df:04:52:ce:
56:7a:69:d4:40:0e:de:97:5d:5e:56:90:ae:60:21:8f:67:89:
86:d6:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:16 2024 by rpki-client on console-fra.rpki-client.org