Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/98XPa0Qk9lBy6acaCqEO63eU31I.roa
File: 98XPa0Qk9lBy6acaCqEO63eU31I.roa (raw, json)
Hash identifier: G6o/s0vVeEbYh6Hsel2K1BNmrpzqGzyvo2BH52kLClA=
Subject key identifier: F7:C5:CF:6B:44:24:F6:50:72:E9:A7:1A:0A:A1:0E:EB:77:94:DF:52
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 01856EAFEA5F56365CCF9AB4B4F8CF0F7AEB
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/98XPa0Qk9lBy6acaCqEO63eU31I.roa
Signing time: Sun 01 Jan 2023 18:55:00 +0000
ROA not before: Sun 01 Jan 2023 18:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212998
IP address blocks: 2001:678:dd4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:ea:5f:56:36:5c:cf:9a:b4:b4:f8:cf:0f:7a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Jan 1 18:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7c5cf6b4424f65072e9a71a0aa10eeb7794df52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0f:88:e9:ba:2e:75:d0:b5:f1:99:e8:f2:60:
03:08:88:0c:35:b9:51:59:9b:e5:4e:de:84:55:5c:
4c:dc:73:f2:12:b3:f4:28:ac:75:ed:44:ad:9f:91:
0e:fd:d7:4b:04:0a:ca:20:10:20:48:44:17:c0:75:
4d:c1:80:b6:5e:66:ad:6d:2d:08:27:66:f0:15:4e:
0a:34:73:c8:68:cf:be:46:5c:06:c0:dd:be:ab:f8:
87:b4:b0:d8:1a:3b:c2:a9:96:16:0d:a6:15:ee:22:
f8:d4:65:e1:bb:a0:0d:0a:2d:cc:f8:c9:20:c2:d6:
19:1b:2c:f1:d7:fd:c9:5f:04:1b:3f:c3:1a:b2:43:
62:3f:27:c9:bb:89:14:c2:a1:e0:37:db:4c:7c:f5:
eb:0d:7f:5a:36:24:e7:db:3f:13:98:27:85:2b:fb:
55:a6:03:23:95:c9:2d:e4:05:e3:34:12:a2:4a:b1:
7b:df:6b:ab:66:a6:0e:be:e9:5a:70:bc:33:a2:d9:
b7:ea:d9:22:13:65:b9:d3:83:a8:31:ff:b3:f2:56:
9a:92:ff:67:f1:16:a4:20:12:0f:0e:b1:f7:99:87:
17:76:a2:21:67:6f:37:c5:71:49:d5:35:07:6c:ed:
b1:64:8e:63:e1:9e:50:ea:2a:10:9d:7d:30:dd:9c:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C5:CF:6B:44:24:F6:50:72:E9:A7:1A:0A:A1:0E:EB:77:94:DF:52
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/98XPa0Qk9lBy6acaCqEO63eU31I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dd4::/48
Signature Algorithm: sha256WithRSAEncryption
4e:c6:d0:5d:16:bf:79:1a:db:7f:56:c0:92:16:64:1f:87:02:
09:13:ac:2b:87:ab:53:78:d2:4e:85:b5:3a:76:ba:36:dc:f9:
5e:38:b5:15:63:fd:47:e9:75:8a:43:0b:31:12:6d:7b:21:ce:
25:1e:75:72:74:90:d1:f9:25:3f:45:bf:6d:9d:73:03:b4:33:
8a:26:2d:1e:b9:6d:44:ee:d6:7a:45:3c:a3:ae:73:bc:a0:90:
a2:7c:98:2a:12:2d:38:81:58:d5:c8:60:5a:bd:b4:1c:e8:97:
45:9a:39:49:8d:24:08:52:47:15:d1:1d:f1:b6:e9:77:20:32:
97:6d:b0:45:49:b0:c5:b0:b4:e1:dd:d2:25:a3:9d:3d:b8:b7:
79:0e:b5:f2:67:f0:b0:23:bf:1e:8e:f0:85:54:ff:9b:8d:de:
72:d8:50:4b:0e:cd:8b:0f:fa:1a:66:9e:f9:b6:4b:10:77:8d:
bd:41:37:a8:97:ec:32:6e:b9:a2:c7:8a:85:db:ff:25:58:7b:
fb:99:35:d3:64:34:6a:e3:9c:6c:64:fa:60:f2:c7:d2:f9:7f:
14:67:7c:93:aa:05:ed:58:89:02:9a:5e:f7:99:8a:e7:e3:5c:
32:4b:f1:05:9c:7e:9d:a4:e3:52:3d:1f:8c:94:64:ae:d4:ad:
2f:c8:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:16 2024 by rpki-client on console-ams.rpki-client.org