Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/if1yOxIzdomq_9Plg5xeoo8Livo.roa
File: if1yOxIzdomq_9Plg5xeoo8Livo.roa (raw, json)
Hash identifier: 9DW92LvSeImHhDijOYO0L8/KH+W1rlCmrvG4jDGbRIc=
Subject key identifier: 89:FD:72:3B:12:33:76:89:AA:FF:D3:E5:83:9C:5E:A2:8F:0B:8A:FA
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 0185F36A9B9258A3E58E2DF183721C118EEE
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/if1yOxIzdomq_9Plg5xeoo8Livo.roa
Signing time: Fri 27 Jan 2023 13:28:48 +0000
ROA not before: Fri 27 Jan 2023 13:28:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2001:2098::/29 maxlen: 29
2001:2094::/30 maxlen: 30
2001:20c0::/26 maxlen: 26
2001:2800::/21 maxlen: 21
2001:2200::/23 maxlen: 23
2001:2093::/32 maxlen: 32
2001:2080::/28 maxlen: 28
2001:20a0::/27 maxlen: 27
2001:2100::/24 maxlen: 24
2001:2400::/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:6a:9b:92:58:a3:e5:8e:2d:f1:83:72:1c:11:8e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 27 13:28:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89fd723b12337689aaffd3e5839c5ea28f0b8afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:49:9a:4f:0f:95:20:7d:2d:dd:6b:20:f9:
d1:78:09:1b:1f:05:c8:95:93:77:fd:d8:e3:1e:88:
52:a4:7f:ac:d9:dd:fc:33:af:30:3c:a0:9b:aa:c9:
b5:2a:1b:01:7e:e2:da:7f:e2:6f:99:38:25:98:0b:
23:ae:2b:0d:da:1c:6e:3e:b9:ff:8a:15:c0:19:5c:
9c:9b:cf:da:ab:08:65:b9:d1:98:bb:c9:b8:82:39:
5f:e9:7d:31:c6:4a:b7:a5:e0:0d:93:b9:fa:b7:d0:
dd:fb:79:48:51:01:01:88:0f:ba:3b:67:df:f8:7b:
e6:d2:78:28:63:e6:35:2c:da:59:f0:48:f9:55:22:
8e:99:d0:aa:bb:ef:b2:cd:d4:3d:46:c5:e1:c8:bb:
ab:f3:2e:ed:ac:05:e6:9e:3f:aa:09:ac:e5:4b:1c:
85:04:70:6f:a6:0e:a3:4c:51:70:9f:ee:35:08:26:
de:fc:90:85:68:b8:b9:70:65:3b:18:9f:aa:3a:55:
a9:16:b3:b9:7c:f7:ca:e1:2a:2a:cd:73:c1:da:66:
1f:9d:1b:1e:a2:0d:5a:29:e0:11:1e:d3:9c:13:29:
0e:25:89:99:c8:34:f6:06:3e:d0:c4:5e:c3:18:1d:
4c:80:f6:ad:d1:cd:1a:7f:7f:15:89:0c:7a:06:b7:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FD:72:3B:12:33:76:89:AA:FF:D3:E5:83:9C:5E:A2:8F:0B:8A:FA
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/if1yOxIzdomq_9Plg5xeoo8Livo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:2080::/28
2001:2093::-2001:2fff:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
70:8f:07:ad:ed:85:02:76:c9:dc:59:f8:01:61:f0:b1:9a:02:
49:a7:a1:4e:da:d0:5f:93:34:49:6d:0d:d0:cd:f8:9f:d3:17:
6f:7e:b2:24:2a:39:6c:66:85:83:34:d7:78:69:54:70:d4:38:
da:26:46:a9:5c:6d:ac:fa:95:9f:64:f2:ac:b1:43:7f:e3:51:
53:6c:d0:a8:32:d3:ca:9f:ac:f9:e3:af:3e:52:f6:5e:49:bd:
1d:cc:bf:9d:4a:f5:fe:c9:d3:d5:33:c0:ff:6c:b6:82:f0:a1:
4b:db:20:f5:ee:38:48:fb:a7:21:e8:4d:88:37:ee:83:e1:c5:
24:b6:69:a6:7d:32:b4:a6:10:29:1d:3c:0d:7c:2b:97:70:b0:
53:f3:c2:3b:7e:93:7e:c6:87:54:88:40:da:b4:c5:8a:78:3e:
31:41:be:e3:1d:72:2c:4f:c9:06:e0:44:6c:26:66:73:37:00:
3f:43:0f:45:de:f4:a5:84:ee:5a:bc:c9:2a:b8:eb:1d:7a:0e:
78:93:70:1a:b8:c8:67:fd:07:11:84:b5:da:d2:e3:71:54:0c:
7f:ac:9d:4b:15:a7:6e:b6:d7:b2:98:de:05:ba:7a:c5:38:57:
c7:16:f9:72:df:6d:85:26:87:20:a3:d4:96:9a:92:10:49:4c:
88:da:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:35 2024 by rpki-client on console-fra.rpki-client.org