Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/z--DxBYkJHEehGIHj5Y3GdjXOsE.roa
File: z--DxBYkJHEehGIHj5Y3GdjXOsE.roa (raw, json)
Hash identifier: RTRmbO/4D/KTAIsBJsUReGm4V47pdPmhecNCJD0aM3Q=
Subject key identifier: CF:EF:83:C4:16:24:24:71:1E:84:62:07:8F:96:37:19:D8:D7:3A:C1
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 0187B37ABA4832945A81A8F156EFF7FB6013
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/z--DxBYkJHEehGIHj5Y3GdjXOsE.roa
Signing time: Mon 24 Apr 2023 13:36:17 +0000
ROA not before: Mon 24 Apr 2023 13:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137922
IP address blocks: 2a03:b8c0:11::/48 maxlen: 48
2a03:b8c0:27::/48 maxlen: 48
2a03:b8c0:17::/48 maxlen: 48
2a03:b8c0:18::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:7a:ba:48:32:94:5a:81:a8:f1:56:ef:f7:fb:60:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: Apr 24 13:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfef83c4162424711e8462078f963719d8d73ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:5b:b6:f7:4e:bb:64:8e:dd:7e:e8:59:00:
16:86:6f:89:0d:91:c8:67:31:d4:c6:72:bc:a8:b8:
7b:87:c5:31:47:1c:ff:52:dd:a7:0d:ab:8f:99:01:
4f:05:c4:62:36:25:ec:a6:ce:92:ec:f9:bd:90:93:
33:ed:e8:cc:1a:ad:36:6d:18:4e:c5:3c:80:b3:ca:
b6:bd:c7:17:8b:d2:a1:86:cf:d5:d2:79:bb:60:82:
51:58:87:92:ed:2f:07:b5:4f:e2:bd:47:1a:ea:87:
ae:5f:59:47:4a:fa:48:f1:95:1c:7f:fe:6e:12:a9:
47:24:11:24:ad:16:4a:c5:a8:55:35:05:f1:c0:41:
e0:05:72:97:61:8e:37:7d:79:96:00:54:c6:a9:38:
8d:04:ef:8c:2b:d0:aa:02:27:d8:09:89:8a:bc:0e:
b9:f6:c4:fa:e3:e8:80:3a:cc:05:cc:ae:1a:9b:9c:
fa:f6:67:6e:04:c7:34:78:d0:99:2c:31:4a:dd:b9:
44:33:42:ab:1f:e5:05:25:41:78:0b:eb:c1:6e:5f:
13:89:7a:0d:31:04:4c:99:0c:a4:6c:f2:e9:10:a3:
6a:e1:0e:11:9f:5c:d0:04:05:bb:33:ac:13:41:c8:
18:f2:77:2f:ed:21:a8:ca:42:1a:83:80:27:56:1b:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:83:C4:16:24:24:71:1E:84:62:07:8F:96:37:19:D8:D7:3A:C1
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/z--DxBYkJHEehGIHj5Y3GdjXOsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b8c0:11::/48
2a03:b8c0:17::-2a03:b8c0:18:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:27::/48
Signature Algorithm: sha256WithRSAEncryption
4e:35:df:20:05:15:04:87:01:b8:5f:cf:1b:59:d3:0e:95:65:
8e:91:8a:db:14:fd:5f:31:66:de:f5:77:c7:19:0f:7b:23:f2:
5d:e4:12:55:56:a4:8a:f5:1b:4a:ff:36:df:a6:47:51:6d:32:
af:e1:ae:78:6c:38:4f:93:ec:73:b4:d8:97:db:ce:da:15:55:
a7:86:7d:0f:f1:2f:1d:5a:8f:8b:b0:08:ce:ba:e5:33:84:26:
f2:cd:47:10:ed:e6:9d:1b:5b:12:bf:a4:2a:b3:7b:da:95:67:
e8:99:57:b7:eb:d2:8f:88:91:1a:65:48:f6:23:12:7b:e4:3f:
83:d0:6e:e8:2c:d3:50:5d:81:59:46:a1:dc:ed:28:56:20:b8:
26:ac:72:35:4f:52:cc:4e:3f:01:1c:b7:13:1b:41:c3:6b:c0:
b9:89:e4:d9:97:04:74:30:3a:80:0c:e2:c1:ed:27:45:d4:4f:
bc:8e:60:5e:e7:12:57:3a:4e:dc:7f:99:55:e4:69:d5:0d:47:
72:3a:5e:b9:3d:7e:ae:51:e1:ee:18:a4:72:37:fa:d8:36:af:
1d:09:53:7e:6e:fc:41:d2:ac:53:a4:ad:83:e1:b5:1a:da:14:
23:6b:77:13:15:d6:e2:66:b5:bc:5e:c2:8d:db:88:84:87:ef:
bd:3a:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:38 2024 by rpki-client on console-ams.rpki-client.org