Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/pj2YY1VT2_Xjq7JgZbnkQujr9Ic.roa
File: pj2YY1VT2_Xjq7JgZbnkQujr9Ic.roa (raw, json)
Hash identifier: kOSp8hH0KYL16tu8PwNLCNX+35TswTrCpSY1GJC8/mI=
Subject key identifier: A6:3D:98:63:55:53:DB:F5:E3:AB:B2:60:65:B9:E4:42:E8:EB:F4:87
Certificate issuer: /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial: 01856CC1709495BD5F2C21FF7DEC96D50B88
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/pj2YY1VT2_Xjq7JgZbnkQujr9Ic.roa
Signing time: Sun 01 Jan 2023 09:54:54 +0000
ROA not before: Sun 01 Jan 2023 09:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12360
IP address blocks: 2001:678:78c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:70:94:95:bd:5f:2c:21:ff:7d:ec:96:d5:0b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Validity
Not Before: Jan 1 09:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a63d98635553dbf5e3abb26065b9e442e8ebf487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:07:79:0e:d2:0e:72:e0:6a:10:d1:c6:ea:e5:
5d:44:5f:81:51:6c:b3:dc:a7:ca:91:44:ad:fa:62:
08:30:0e:f5:33:f6:ab:12:36:e7:0d:64:e3:fb:e3:
9f:25:95:20:db:2b:b4:0a:e0:ef:61:db:02:87:c6:
da:4a:6f:46:68:6e:17:16:a3:16:49:18:3b:3c:c8:
3e:da:34:57:4b:b4:fe:4c:9f:99:41:19:61:e2:a6:
3c:6b:10:99:5d:5e:52:fc:de:b6:82:26:9a:86:e8:
f9:43:47:9e:c6:7a:1e:52:3b:50:20:4e:67:d7:d8:
74:2a:e9:3f:9b:eb:e3:97:a0:71:6c:2f:ae:53:a5:
f0:92:03:5a:2c:12:e7:8f:ab:e2:b9:18:12:f1:25:
c5:38:45:09:92:2c:4d:41:1a:23:e0:b1:e3:7f:8b:
a7:34:95:b0:c1:98:b1:ca:d3:c0:59:41:7a:21:9f:
10:36:eb:54:6a:5b:f3:5b:8f:3d:f4:20:69:a3:66:
42:57:ee:c9:2d:b5:73:d1:cf:8f:d8:de:1d:23:0e:
6a:3a:69:54:94:fc:53:09:23:ec:21:36:49:bb:7c:
1b:d7:f3:79:47:cd:5b:f8:01:bd:2a:44:5a:68:80:
0a:3a:61:1b:cc:fb:3e:59:b1:d6:df:a7:04:99:c9:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:98:63:55:53:DB:F5:E3:AB:B2:60:65:B9:E4:42:E8:EB:F4:87
X509v3 Authority Key Identifier:
keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/pj2YY1VT2_Xjq7JgZbnkQujr9Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:78c::/48
Signature Algorithm: sha256WithRSAEncryption
63:80:45:02:33:a7:fe:be:0b:6b:84:18:9b:3f:98:0f:bc:00:
87:a8:40:a9:be:3f:98:dc:83:c1:11:11:c5:ec:e0:2f:76:f5:
a7:a1:44:49:c0:7c:c3:1e:0b:08:7c:56:2a:12:c1:e4:46:3e:
b3:1a:c6:36:c0:dc:34:e4:c3:af:63:b9:09:9d:af:0b:63:b6:
42:47:e3:d7:0b:03:c9:c8:6f:6a:24:55:40:f4:4b:f9:0b:5e:
f1:25:58:88:e7:96:94:c0:67:4c:0d:8f:27:33:6f:9a:86:9d:
4a:84:fd:62:1a:06:5b:6c:a7:a2:d3:83:36:7a:ba:4a:cb:eb:
a0:f5:2b:1b:62:0b:8b:d2:eb:40:d9:79:8a:94:fc:fc:73:bd:
ba:b0:e0:b3:e7:09:e3:ec:71:41:4b:7b:f7:b2:c0:26:2f:6c:
22:d3:bc:92:df:e3:da:3b:16:57:63:13:36:cf:7c:22:00:f9:
05:f7:20:8c:13:c1:14:f5:0d:54:5d:cd:58:88:52:5e:37:c9:
00:c5:7d:99:ce:f3:b2:ec:c5:9a:63:19:87:29:21:c0:20:2b:
48:d0:e0:fc:20:f6:07:22:25:d1:fc:ef:d4:a1:33:90:15:2f:
53:78:5c:61:2e:7f:1c:4a:6a:a3:3a:86:80:21:cb:59:48:73:
25:6b:40:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:24 2024 by rpki-client on console-fra.rpki-client.org