Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/T7t0qPurFsdnBoheoQbEbMY9UVM.roa
File: T7t0qPurFsdnBoheoQbEbMY9UVM.roa (raw, json)
Hash identifier: LibZK1U0wB+f8jkVNNB+iDPZ8mmtl/rR6HBhj7BrXB4=
Subject key identifier: 4F:BB:74:A8:FB:AB:16:C7:67:06:88:5E:A1:06:C4:6C:C6:3D:51:53
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A6B1F17682BF1CD9F86908EE6EB7C6984
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/T7t0qPurFsdnBoheoQbEbMY9UVM.roa
Signing time: Wed 06 Sep 2023 15:31:54 +0000
ROA not before: Wed 06 Sep 2023 15:31:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a09:96c0::/29 maxlen: 48
2a0b:a0c0::/29 maxlen: 48
2a09:ae80::/29 maxlen: 48
2a06:e5c0::/29 maxlen: 48
2a0d:e000::/29 maxlen: 48
2a13:4bc0::/29 maxlen: 48
2a09:b440::/48 maxlen: 48
2a0a:d040::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:1f:17:68:2b:f1:cd:9f:86:90:8e:e6:eb:7c:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 6 15:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fbb74a8fbab16c76706885ea106c46cc63d5153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:6f:02:a2:0e:4c:ba:81:d0:8c:5b:ba:9a:
f5:c0:46:53:6a:7a:c3:5c:27:e4:0c:5c:9a:71:da:
13:5d:47:8c:11:ef:d3:66:15:56:89:c1:04:7e:68:
b3:de:43:56:4a:dc:b2:ae:98:5b:9a:2e:78:eb:1f:
14:e1:84:7c:4b:0a:66:30:48:84:24:3e:cf:bc:04:
c5:73:e0:83:c3:26:89:0a:13:c0:f2:31:c4:1a:bc:
52:82:9c:6a:d5:bf:a9:18:b7:6f:d8:55:a2:19:bd:
5c:9b:fa:2f:af:5a:79:ad:2e:36:75:10:eb:82:f4:
f2:98:1e:54:08:1c:bd:ba:c8:9a:1a:72:d9:13:8d:
05:1b:22:23:16:04:3d:d5:dd:96:80:72:6c:70:6f:
dd:c9:df:0e:3e:0f:0e:ff:3a:f3:09:05:4c:25:ea:
5f:19:95:ab:44:06:d2:24:9f:ee:eb:b5:ff:80:d7:
8d:a4:8f:c6:26:6b:51:5f:7b:5f:1d:08:57:16:57:
b0:f9:d5:66:cd:30:b7:a0:38:98:7f:c2:c8:c8:7a:
f9:f8:21:1c:1c:3a:c0:ed:f3:5c:d5:c3:e0:e0:fc:
a6:47:81:1b:19:64:52:90:96:e8:1b:2f:10:22:08:
c0:48:41:ec:04:e3:b9:95:61:71:93:90:c7:7c:f4:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BB:74:A8:FB:AB:16:C7:67:06:88:5E:A1:06:C4:6C:C6:3D:51:53
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/T7t0qPurFsdnBoheoQbEbMY9UVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e5c0::/29
2a09:96c0::/29
2a09:ae80::/29
2a09:b440::/48
2a0a:d040::/29
2a0b:a0c0::/29
2a0d:e000::/29
2a13:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
d4:f4:c0:67:7c:cf:42:83:c0:58:0b:4a:c3:0c:eb:2f:11:70:
50:f2:04:c8:77:7e:0d:4f:34:22:85:58:cf:75:dd:4b:25:ea:
9d:80:a8:29:3b:02:15:2a:28:10:a6:e8:32:a3:80:d6:be:67:
fe:57:d8:03:63:82:36:f0:26:8c:43:cc:f7:e9:9f:7d:24:f9:
d5:3a:22:b0:77:3a:dd:34:58:82:1b:cb:3c:84:f6:34:16:ec:
aa:f7:e6:c3:7a:cc:3d:17:59:2d:8d:ff:1c:18:78:5a:c8:31:
41:29:f8:98:93:1b:9d:11:3c:02:9e:2b:da:3c:e4:ad:68:ea:
c6:c6:dd:10:23:e9:89:95:e7:09:bc:0c:90:6a:72:ef:48:3f:
fb:bc:41:3e:70:0c:08:61:8b:ac:03:5a:c9:06:6a:e2:54:db:
b3:2d:41:c1:59:fa:a1:07:66:36:8c:00:ba:39:70:9e:37:bd:
87:59:c6:83:9b:d4:ed:61:7f:cc:a5:c3:b5:4e:8c:62:e4:8f:
c7:eb:f0:0f:37:14:ef:d8:f4:f7:15:de:06:a8:15:26:72:48:
c1:7a:8a:f3:da:db:44:2e:ff:f1:3a:49:66:a4:7a:d5:7a:b0:
ae:3f:6d:b9:07:36:fd:cf:e7:55:bb:f4:8f:8b:79:6e:4b:08:
a4:9c:ca:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 12:40:43 2023 by rpki-client on console-ams.rpki-client.org