Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/m6fhoe7Uh1ga91gZ_4bplKYKsbY.roa
File: m6fhoe7Uh1ga91gZ_4bplKYKsbY.roa (raw, json)
Hash identifier: tW5nVfKHJ2hqYlkwsTnj85xbczaGMk5pP/u43XHI/P0=
Subject key identifier: 9B:A7:E1:A1:EE:D4:87:58:1A:F7:58:19:FF:86:E9:94:A6:0A:B1:B6
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01856C784CBDAF6633ACBA516C17DCA12B94
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/m6fhoe7Uh1ga91gZ_4bplKYKsbY.roa
Signing time: Sun 01 Jan 2023 08:35:01 +0000
ROA not before: Sun 01 Jan 2023 08:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 2a0e:1b43::/32 maxlen: 32
2a0e:1b41::/32 maxlen: 32
2a0e:1b45::/32 maxlen: 32
2a0e:1b47::/32 maxlen: 32
2a0e:1b44::/32 maxlen: 32
2a0e:1b42::/32 maxlen: 32
2a0e:1b40::/32 maxlen: 32
2a0e:1b46::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:4c:bd:af:66:33:ac:ba:51:6c:17:dc:a1:2b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 1 08:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba7e1a1eed487581af75819ff86e994a60ab1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f8:4e:f2:b9:27:96:aa:f5:be:59:5d:6f:68:
30:36:75:ef:9b:25:6c:10:1a:86:24:e2:cc:0f:15:
4e:c9:3d:25:cb:51:68:b8:c8:9e:ec:5c:fc:cb:76:
7b:6c:8e:88:33:c5:d4:4c:76:7e:51:55:bf:32:03:
3b:5d:b6:02:50:0d:47:43:af:00:15:69:83:b3:0b:
6f:5f:c3:8d:02:5e:59:d7:64:be:77:24:31:65:45:
dc:a3:d3:5b:b4:ea:b7:02:86:7d:d4:69:d6:88:56:
a0:c3:87:fe:78:d0:53:6f:ce:b1:fd:c2:eb:ea:ba:
31:e3:fe:b4:50:2c:5e:e3:f8:3e:f0:9c:83:3e:9c:
33:69:e3:bc:ee:ed:5f:d7:d0:31:e5:d4:70:8a:6b:
3b:ce:ca:f1:9b:98:8f:0d:85:95:9a:19:eb:9f:d1:
a7:8f:d5:d3:45:df:72:26:0a:72:9b:e4:72:f2:a1:
89:d2:ef:fb:d5:60:a4:23:e3:a0:f4:e9:8b:8a:48:
ca:b6:da:a6:20:98:b3:92:62:78:c0:6c:18:34:58:
34:eb:19:90:ff:49:bb:53:ab:d5:9f:f4:ea:e0:26:
9b:d2:42:86:09:34:37:42:19:38:ec:f4:11:c7:85:
8f:7e:59:d3:9f:27:c7:69:98:be:f5:c2:10:e1:ac:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A7:E1:A1:EE:D4:87:58:1A:F7:58:19:FF:86:E9:94:A6:0A:B1:B6
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/m6fhoe7Uh1ga91gZ_4bplKYKsbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1b40::/29
Signature Algorithm: sha256WithRSAEncryption
19:7b:b8:86:3d:a6:89:3c:84:e9:80:1b:5d:a5:57:64:ef:e7:
68:49:0e:d8:91:b5:de:14:e6:bc:e3:aa:6a:94:46:7d:65:ae:
76:d8:f8:40:ae:7d:79:7e:48:06:3b:66:ce:fd:61:54:ae:43:
92:7f:b9:a8:96:44:85:bf:90:90:58:e4:b6:cf:9d:29:ed:3a:
a7:5d:68:4a:63:37:09:e1:db:a4:08:fa:bf:5d:f6:eb:0a:18:
9f:44:76:05:f1:49:14:91:6a:1e:40:29:96:da:51:18:3e:fe:
2f:72:cc:50:83:44:7f:9f:55:19:1b:14:55:c8:03:c9:2b:68:
bb:74:16:11:c4:1a:bb:1f:23:77:1a:f5:35:f8:33:cf:87:1e:
76:2e:55:c0:b4:10:77:fd:9c:1d:8b:c2:6a:76:5e:ab:16:9b:
f6:e9:f2:e1:09:b5:60:ac:7e:e0:df:6b:e2:0a:1f:a6:d4:a9:
6e:77:0a:5a:b6:4f:29:88:d6:14:7e:33:81:ad:6c:df:ca:e5:
80:34:82:75:c2:cc:99:2f:1d:a6:2d:fa:7c:a2:b7:b3:8e:f6:
aa:0f:91:12:3b:1a:cb:59:97:59:ac:ff:b6:bc:26:38:ee:19:
c7:2d:f5:45:b1:5c:51:5f:ba:b9:d8:2e:26:cb:04:e1:d9:41:
82:1a:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:58 2024 by rpki-client on console-fra.rpki-client.org