Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/m1wvBPi6E_VPIjoR8b8qPdplCWs.roa
File: m1wvBPi6E_VPIjoR8b8qPdplCWs.roa (raw, json)
Hash identifier: PbiCOOZk3PKaO73/KEWwt7QWX1BE81r3DP/gwSfPz9A=
Subject key identifier: 9B:5C:2F:04:F8:BA:13:F5:4F:22:3A:11:F1:BF:2A:3D:DA:65:09:6B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0185BD23DAC8C6B60A6BD58B4AA5F9FAAF0D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/m1wvBPi6E_VPIjoR8b8qPdplCWs.roa
Signing time: Tue 17 Jan 2023 00:32:01 +0000
ROA not before: Tue 17 Jan 2023 00:32:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7d00:1::/48 maxlen: 48
2a0e:15c1::/32 maxlen: 32
2a12:d6c1::/32 maxlen: 32
2a12:d6c0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a09:17c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bd:23:da:c8:c6:b6:0a:6b:d5:8b:4a:a5:f9:fa:af:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 17 00:32:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b5c2f04f8ba13f54f223a11f1bf2a3dda65096b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:07:ba:2b:cf:4b:3b:70:b4:ea:d2:b5:94:
63:e4:42:62:bc:8a:15:70:ce:d9:3f:a4:40:2e:cf:
52:d8:80:39:a7:8f:da:aa:ab:1e:23:b0:c5:fe:92:
98:57:cb:ac:9c:86:e9:49:02:e0:a3:59:bf:57:e4:
e8:bd:23:e3:aa:c9:74:09:51:3b:aa:40:64:dd:a5:
a1:64:36:49:7f:c2:dc:77:35:de:cc:8b:e1:6f:4a:
5f:c4:7f:6d:32:06:94:83:a5:44:fd:1f:71:b1:f1:
44:9b:99:f4:cd:b0:8a:d5:de:53:4f:3e:14:40:f9:
98:f6:60:15:83:d7:89:5a:55:b8:76:2a:05:31:67:
b0:c3:b5:e6:0e:6b:11:48:ad:4f:9e:7f:f7:4e:82:
26:86:56:e8:87:1a:a0:9b:ed:d4:7a:e0:56:21:2c:
0d:2a:89:33:05:25:eb:28:82:9c:57:6b:78:06:ec:
8f:da:54:2a:c5:6e:97:4d:a4:e3:d7:5c:b9:a9:f6:
12:f0:3a:53:1f:6e:8d:9f:56:24:13:99:6c:ee:fb:
ca:87:23:72:93:8f:31:d2:2c:e8:87:45:1d:b7:d3:
0f:a3:e9:47:be:73:84:0f:6a:f7:30:93:3f:e0:b8:
ee:2f:eb:b9:83:7e:2c:5e:50:3e:e5:bb:3b:b0:7d:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:2F:04:F8:BA:13:F5:4F:22:3A:11:F1:BF:2A:3D:DA:65:09:6B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/m1wvBPi6E_VPIjoR8b8qPdplCWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0e:15c1::/32
2a0f:7d00:1::/48
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:31:c5:ff:f6:a8:dc:95:6a:62:9d:d4:a1:12:bb:24:75:3f:
36:70:23:64:40:aa:82:41:4c:a7:07:ed:c4:48:5f:14:7e:e7:
61:1e:17:56:bf:7e:6d:ae:79:2d:4d:dd:f8:bb:12:6c:ac:5e:
b6:92:92:e7:9d:c4:c0:a8:88:74:fb:27:6a:de:36:09:63:c2:
4f:09:02:ac:7c:db:46:39:7a:c9:5a:cc:a5:d6:2b:6a:63:b2:
49:7a:9c:8c:06:0d:93:3e:8e:cf:42:77:d3:97:8f:e0:b7:b0:
5f:24:af:81:c8:9c:cf:72:e2:c6:3f:35:2b:b4:33:68:d4:d0:
4c:a7:0a:17:cf:ad:ea:72:63:44:e5:32:e9:5e:0a:f8:f0:ba:
16:4c:85:b9:43:96:5b:08:a3:42:cf:1a:f9:9e:20:73:eb:bb:
e8:d4:6a:c6:24:06:07:c6:ed:67:0d:79:e2:89:f8:6b:ef:e0:
5c:62:6f:a3:24:9e:42:30:32:e7:c5:a1:0d:43:45:96:de:e0:
cc:13:d3:79:e6:d8:b5:85:72:84:1d:f7:cb:3a:e2:aa:38:4f:
55:48:c6:36:79:a9:cd:cb:09:c5:e9:57:17:20:9b:b8:17:fc:
2c:23:4e:0f:cb:db:ae:58:bc:2d:ac:e5:5d:7d:b1:b6:57:f8:
f8:73:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:20 2023 by rpki-client on console-fra.rpki-client.org