Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8Xh9uv2upLQneOiYklT14_FH0yk.roa
File: 8Xh9uv2upLQneOiYklT14_FH0yk.roa (raw, json)
Hash identifier: WUrVo53fAwZk1CQqdUlhhFThUx7RbI2HSd9LbAc3MFk=
Subject key identifier: F1:78:7D:BA:FD:AE:A4:B4:27:78:E8:98:92:54:F5:E3:F1:47:D3:29
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C2DFE2F98F9DF3A7A86FAC6261078
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8Xh9uv2upLQneOiYklT14_FH0yk.roa
Signing time: Mon 02 Jan 2023 05:55:01 +0000
ROA not before: Mon 02 Jan 2023 05:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202436
IP address blocks: 2a0e:d601:7220::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:2d:fe:2f:98:f9:df:3a:7a:86:fa:c6:26:10:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1787dbafdaea4b42778e8989254f5e3f147d329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:d7:01:94:55:1d:86:02:3f:84:d1:4c:d9:
9d:c0:2e:e1:82:09:64:2e:e2:4e:67:29:a8:e4:02:
a9:e8:4f:02:3a:29:d1:f2:b3:96:62:76:4f:16:ad:
d9:98:f3:0b:f2:1f:c7:ce:b8:9b:7d:ec:79:ee:8e:
f2:ca:0b:65:51:16:a0:9b:1f:2c:43:7b:1c:79:9a:
df:8e:4c:ec:de:92:3d:09:71:dd:af:bb:35:d0:be:
6f:2f:f2:9d:ea:88:15:11:47:b9:e4:02:c1:d0:c7:
92:0a:3a:de:e1:61:29:f4:a2:2c:be:a1:6e:cc:2e:
a0:fc:9b:b3:34:bd:49:11:6f:81:53:aa:ab:8d:c1:
78:1f:fb:0a:32:d2:47:21:04:61:6e:62:7e:36:54:
55:8b:da:dd:06:6c:77:15:2d:26:61:ef:02:8d:45:
98:00:fe:a6:3b:81:7e:29:fd:a1:07:4e:52:2f:45:
01:e1:10:c6:15:1e:5d:db:15:a7:c3:f9:19:c7:d0:
63:57:1c:1e:3b:26:bc:ee:4c:bf:1b:c7:62:85:f5:
09:3a:28:e4:3e:4e:71:58:b7:eb:98:be:33:a1:e7:
42:76:04:74:34:96:b1:fc:68:5b:fd:85:5b:d2:c0:
5b:42:f6:d0:35:f5:ba:85:94:73:a6:96:5c:5c:40:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:78:7D:BA:FD:AE:A4:B4:27:78:E8:98:92:54:F5:E3:F1:47:D3:29
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8Xh9uv2upLQneOiYklT14_FH0yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d601:7220::/48
Signature Algorithm: sha256WithRSAEncryption
33:96:6d:17:26:f4:e6:c9:68:5d:1f:9e:9c:f6:96:ca:8a:3d:
b7:7c:02:1b:e5:d5:2c:67:31:e9:46:ae:3d:9d:a9:d5:45:34:
97:dd:ea:c0:cf:24:96:ff:22:8e:0f:f8:20:c3:0d:1c:c6:8a:
5a:f4:3e:e8:b8:e5:c6:b3:fe:cd:a2:5a:b9:68:fa:e4:54:23:
6c:20:dd:3e:b5:a3:10:24:f3:3f:5a:3a:0c:20:c4:01:24:c3:
b1:01:3f:a6:70:8f:1c:51:fe:62:29:64:7b:e5:55:83:7c:e1:
26:1a:fe:c1:95:bd:04:b2:ad:80:1b:ca:2c:a4:45:16:19:30:
d1:8d:fb:e0:33:0d:dc:58:2f:89:a3:6a:d9:83:40:0a:03:02:
1c:ad:8f:8d:ea:a5:1e:62:a5:51:77:cf:6a:c2:fe:1d:dd:f8:
13:36:a3:37:4a:9d:f2:52:7b:9a:9d:5a:75:82:2e:df:b2:fc:
89:15:bf:66:1e:50:47:4d:bd:8f:7f:84:be:58:fc:f5:56:b1:
da:76:26:25:dd:6b:7a:ee:c8:5d:43:af:52:23:e0:d1:be:02:
72:fa:ed:ac:9e:de:3c:db:50:73:d9:e2:cb:00:c0:51:81:75:
4b:18:27:f3:c5:0c:2f:a1:29:53:e1:06:18:b9:38:e5:08:6c:
b6:e1:9c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:28 2024 by rpki-client on console-fra.rpki-client.org