Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/dv-5B0OWxjLDjbP2v5TZ2u5d72o.roa
File: dv-5B0OWxjLDjbP2v5TZ2u5d72o.roa (raw, json)
Hash identifier: gimcHf5mx01R6JCdZpXTUdFSOHHKjxsUptGbNv5zWCU=
Subject key identifier: 76:FF:B9:07:43:96:C6:32:C3:8D:B3:F6:BF:94:D9:DA:EE:5D:EF:6A
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01888727CB581C1542314B60BCCEEB623DE2
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/dv-5B0OWxjLDjbP2v5TZ2u5d72o.roa
Signing time: Sun 04 Jun 2023 16:05:12 +0000
ROA not before: Sun 04 Jun 2023 16:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212085
IP address blocks: 2a0f:ca81:1330::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:87:27:cb:58:1c:15:42:31:4b:60:bc:ce:eb:62:3d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jun 4 16:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ffb9074396c632c38db3f6bf94d9daee5def6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:6c:8a:35:fc:9e:f1:9b:53:5c:ce:bd:2c:
31:95:f4:fd:95:e0:d5:20:33:b3:93:6f:ad:76:0a:
68:22:7c:9d:b1:a8:43:fe:a7:a9:5e:90:6f:4d:8b:
f6:b6:f9:15:f0:7a:4d:48:c0:4a:cb:6e:b4:d6:d2:
af:8f:8e:15:6b:58:38:24:6d:bb:51:b0:9f:16:8f:
0d:a6:d0:5b:c7:e6:d0:5f:53:3b:ef:1d:20:84:55:
f4:72:10:57:62:1f:31:6b:79:b5:1b:70:b9:3d:52:
93:3d:07:2e:03:06:1d:96:f2:20:54:c6:10:e1:0a:
ff:db:a8:d6:c2:51:06:8a:be:65:e8:e0:9c:99:15:
58:69:ff:bd:43:2e:9b:8a:b1:9e:9b:fe:db:79:bd:
48:3a:36:fa:eb:0f:6b:05:91:85:e5:5f:b9:2a:5b:
e3:b4:e0:b4:46:ea:49:29:d7:4d:d6:12:e4:18:4b:
bd:39:e9:0d:14:8a:83:cb:7d:ee:39:af:50:ce:c9:
1b:71:6a:ca:84:e9:f3:85:83:8a:1c:6d:c2:4c:d6:
03:aa:95:bd:e1:5e:7d:bf:08:e3:ce:00:24:3f:3f:
d2:c3:2b:49:dc:f5:99:1d:46:d9:77:dc:2a:9d:4e:
ab:bf:c4:21:04:a3:3a:8a:21:6a:3f:cc:02:6f:16:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:B9:07:43:96:C6:32:C3:8D:B3:F6:BF:94:D9:DA:EE:5D:EF:6A
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/dv-5B0OWxjLDjbP2v5TZ2u5d72o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca81:1330::/44
Signature Algorithm: sha256WithRSAEncryption
7b:65:5d:d6:0a:14:1f:e1:b7:05:5d:e9:18:50:bd:82:4d:8c:
c2:80:a4:3f:1c:67:3c:89:8e:1f:41:54:ce:7d:c9:fc:46:67:
46:c5:c6:11:1d:46:0f:d4:95:aa:93:6d:4d:a8:d1:0f:ed:1a:
13:b7:be:11:72:a7:9c:8f:c5:a4:64:c6:99:ce:59:c4:c5:77:
5c:7c:5c:24:3e:4f:d9:b8:9e:33:bf:b2:2b:83:cc:0d:d1:f7:
ec:2b:f4:db:a8:b0:fe:57:11:39:3b:de:88:a0:80:d6:5a:49:
9c:96:f5:9b:a1:3a:f2:54:80:1a:7b:47:32:ff:37:89:8c:d7:
25:53:76:e5:32:58:11:a1:c5:64:cb:c1:84:36:0b:35:f2:69:
52:d8:84:c0:4c:2d:f1:8b:31:d8:f8:6c:67:8b:7e:46:4e:b2:
4e:1a:90:56:64:73:52:c5:ac:9e:c6:da:65:dc:c4:ff:69:7a:
6e:64:5a:a0:7e:80:d4:2d:92:6b:67:b2:b8:e3:67:21:ec:ec:
bc:54:60:b4:72:c5:94:d3:68:51:c8:bb:ca:a7:27:ab:b4:6c:
c1:d6:0d:a2:81:d7:0f:ed:89:6a:32:02:f8:f4:a2:64:d0:f6:
59:9c:83:e2:1d:eb:cd:ac:5e:ea:1d:c9:6c:8a:8f:e3:d8:3f:
a9:be:df:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:55 2024 by rpki-client on console-ams.rpki-client.org