Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/_9O3YhpgG0Hq1MTGkyefiPFpbHo.roa
File: _9O3YhpgG0Hq1MTGkyefiPFpbHo.roa (raw, json)
Hash identifier: tF9eER/QJeQLJOYOUSK+IQa+p/CPbqrzTywnNq0+D6k=
Subject key identifier: FF:D3:B7:62:1A:60:1B:41:EA:D4:C4:C6:93:27:9F:88:F1:69:6C:7A
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C31EC186D88119612E495C27D5C69E
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/_9O3YhpgG0Hq1MTGkyefiPFpbHo.roa
Signing time: Mon 02 Jan 2023 09:14:50 +0000
ROA not before: Mon 02 Jan 2023 09:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205816
IP address blocks: 2a06:e881:113::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:1e:c1:86:d8:81:19:61:2e:49:5c:27:d5:c6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffd3b7621a601b41ead4c4c693279f88f1696c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:ea:31:44:f2:3e:f2:ea:15:c3:7b:23:f8:
24:26:66:60:bd:36:e2:7e:d7:07:9d:1f:e8:f4:71:
e2:6f:ce:4f:6c:43:5e:51:ed:38:20:8a:f2:d8:8a:
a4:9d:4c:96:a8:69:45:ac:f6:82:b2:aa:e7:cb:52:
0e:12:9b:77:7a:fc:f3:4a:6f:cd:ff:3b:07:b4:88:
86:e8:36:08:18:be:1a:e4:ba:b6:d0:9c:b5:13:9d:
69:fc:89:46:3a:6e:b8:39:f4:60:3f:41:f8:28:08:
86:93:e8:46:d7:74:05:6e:e7:f3:30:a7:61:6e:ac:
9f:e1:c2:f9:3a:45:d1:4d:f8:2a:6f:c5:67:bd:0d:
cd:78:c5:6d:bf:eb:e7:1e:00:11:61:40:8f:3c:cf:
48:0f:13:c1:f9:36:29:c9:76:f3:3b:58:36:e7:3e:
95:3b:c3:77:6e:86:cc:f7:be:e6:5f:35:b7:39:af:
f0:a1:ba:ab:25:a9:d1:84:19:a3:88:70:e0:16:54:
50:82:c4:07:08:35:da:93:31:12:d3:4a:3c:c0:0d:
24:e9:4e:0e:1e:39:8c:19:43:45:37:92:ca:87:ae:
10:f9:89:ea:ab:dc:cd:11:97:e1:7a:68:a0:c9:3d:
5a:55:2f:87:06:35:3c:10:af:56:42:0f:20:0c:63:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D3:B7:62:1A:60:1B:41:EA:D4:C4:C6:93:27:9F:88:F1:69:6C:7A
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/_9O3YhpgG0Hq1MTGkyefiPFpbHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:113::/48
Signature Algorithm: sha256WithRSAEncryption
0f:c6:5a:1f:db:e2:90:e2:ce:df:f7:21:7a:1a:15:ce:cb:87:
d1:8f:b1:2e:51:df:2e:7d:f7:e8:5e:2e:1c:df:55:87:8b:45:
0e:2e:91:13:d9:60:e6:84:ee:1d:f2:06:8a:e9:4e:a2:0e:db:
cc:62:6c:92:40:93:cd:ff:26:45:31:b4:04:44:ba:d2:32:7c:
5a:3f:09:3a:14:ae:6a:30:be:91:cd:5c:88:c1:45:bd:cb:a2:
99:89:6f:2f:72:ce:38:ff:ce:fe:72:5b:46:38:44:51:6d:63:
d0:5a:ad:3e:95:df:e4:f3:a2:0d:13:7a:13:b8:b0:6f:5a:2d:
68:67:03:b3:f8:81:61:4e:eb:51:dc:e5:5f:78:f9:ba:47:f0:
0a:13:9b:03:fc:2b:fe:57:a6:ae:c6:67:22:36:ce:0a:89:ac:
58:5d:a0:0c:ba:6a:da:3c:b3:e2:3b:a2:15:55:a4:cd:1a:90:
78:98:82:49:08:3c:25:7c:9d:8e:4f:11:3c:40:ef:ea:58:9c:
9b:92:8f:de:d9:2b:2b:39:02:43:7c:f5:a2:3b:e7:03:7f:ef:
2a:66:79:b3:e8:7f:42:86:71:5e:03:84:a1:cb:ff:db:6b:69:
31:60:8d:8b:64:f5:e1:5f:a7:50:b8:c4:1f:65:29:d0:e4:60:
04:72:23:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:16 2024 by rpki-client on console-fra.rpki-client.org