Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/1m6ZCqJhPTTrO6qjfMdSX4QSp24.roa
File: 1m6ZCqJhPTTrO6qjfMdSX4QSp24.roa (raw, json)
Hash identifier: Er2dWFWbo4gVJPaG4W0sI+bN2gKDEwPmsnj/UZEh3/U=
Subject key identifier: D6:6E:99:0A:A2:61:3D:34:EB:3B:AA:A3:7C:C7:52:5F:84:12:A7:6E
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 01894867D85C0C4165433B280457AB53E5EC
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/1m6ZCqJhPTTrO6qjfMdSX4QSp24.roa
Signing time: Wed 12 Jul 2023 04:41:52 +0000
ROA not before: Wed 12 Jul 2023 04:41:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58251
IP address blocks: 2a13:8b40:2::/48 maxlen: 48
2a13:8b40:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:67:d8:5c:0c:41:65:43:3b:28:04:57:ab:53:e5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Jul 12 04:41:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d66e990aa2613d34eb3baaa37cc7525f8412a76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:ad:be:c0:6a:30:38:4c:d2:b9:70:2e:19:
45:63:50:23:fa:9a:44:0f:51:b7:91:64:81:19:a6:
13:a4:ae:2b:09:5e:78:73:07:fb:6c:08:8a:c8:7a:
1c:0c:46:97:b9:e0:66:d4:42:1b:0f:d5:4b:ed:96:
1b:33:0f:e9:e8:07:73:f1:20:e1:c1:7d:c1:ec:9c:
1b:17:35:61:ae:fe:a1:c0:6b:6c:c5:71:ef:ab:0f:
da:55:56:2f:eb:61:f3:a5:66:c2:03:33:9d:38:2e:
b4:a1:75:d2:45:b4:cb:3a:57:b8:13:14:ad:10:5d:
13:fd:5a:4d:bf:8f:5a:0c:38:d4:6b:4d:67:85:79:
11:1f:7d:68:11:e6:9d:4c:55:98:f0:ef:9e:ef:1c:
73:76:e0:7e:3c:93:21:01:e6:17:14:8d:01:15:06:
94:fa:91:e3:b3:9a:cf:06:ea:63:87:3c:7f:29:ea:
7b:90:86:1d:b3:ea:08:b7:8f:c9:47:aa:1b:37:59:
2e:82:ef:e1:4c:77:54:f5:9b:50:f9:90:d1:d5:c3:
35:eb:a5:ac:45:5c:31:a1:2c:f6:98:60:06:a5:1c:
ed:7f:f5:a4:51:d1:46:78:c6:e6:bc:f6:6e:43:20:
f1:c3:78:af:08:16:ae:3c:db:8c:50:f5:40:94:98:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:99:0A:A2:61:3D:34:EB:3B:AA:A3:7C:C7:52:5F:84:12:A7:6E
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/1m6ZCqJhPTTrO6qjfMdSX4QSp24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8b40:1::-2a13:8b40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:24:d5:71:d5:44:ac:c6:9b:0c:29:c3:c0:46:6b:b5:3c:88:
6b:fb:6d:5b:67:59:39:08:f2:27:73:15:e0:2d:bc:5c:58:9a:
1e:c8:86:eb:9b:e9:5e:f3:37:5e:a4:a8:71:e9:6c:12:3e:c9:
c2:77:de:af:fa:6f:fc:6a:59:c2:a9:fc:05:c1:18:70:10:7e:
55:36:18:fd:a5:69:04:25:02:09:46:49:e5:1f:23:35:ee:49:
7b:7b:46:fd:44:9e:a7:d3:71:f4:f1:4b:de:12:ff:e0:ab:7d:
33:1e:fa:90:20:e3:4c:b5:d6:fe:1b:55:6e:63:99:00:66:31:
12:4c:07:34:95:9b:40:06:b2:2a:91:fe:a1:6d:35:0f:05:08:
15:89:e7:72:d4:e7:e7:fa:42:ad:ba:bd:d9:2a:13:86:2e:5a:
93:3a:03:5b:45:99:7a:3e:92:83:1c:3e:a8:24:53:f1:98:04:
72:ea:dd:c3:67:2e:bb:f7:19:d4:fe:9e:79:bd:3b:c0:20:09:
f6:94:e1:56:ca:68:64:0a:2d:2a:43:c4:da:1f:17:b6:3c:20:
a0:bf:1e:ad:0e:6b:65:4b:e9:4a:0e:52:bb:97:35:5e:5d:2c:
4c:e9:ed:a4:a1:c2:45:68:d0:3c:af:be:e5:2c:9d:0e:09:5a:
42:85:51:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:26 2024 by rpki-client on console-fra.rpki-client.org