Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/84D6PxKQu-s3glLy0VT5SxXhR5c.roa
File: 84D6PxKQu-s3glLy0VT5SxXhR5c.roa (raw, json)
Hash identifier: zHe9ctuS+alKbM6sRRzDdOBi2rnSyfKTMsMtCQzStOc=
Subject key identifier: F3:80:FA:3F:12:90:BB:EB:37:82:52:F2:D1:54:F9:4B:15:E1:47:97
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 01856BDC7375AFA7D9740C11273BE706AF62
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/84D6PxKQu-s3glLy0VT5SxXhR5c.roa
Signing time: Sun 01 Jan 2023 05:44:47 +0000
ROA not before: Sun 01 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211132
IP address blocks: 2a0f:607:1400::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:73:75:af:a7:d9:74:0c:11:27:3b:e7:06:af:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f380fa3f1290bbeb378252f2d154f94b15e14797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:0a:f2:06:94:da:6c:f2:73:40:72:4a:27:
79:11:5b:0f:fd:24:c0:0b:54:16:c8:7e:82:9c:4b:
b9:7d:dd:7e:97:d3:99:8d:9b:5f:af:ec:e7:3d:92:
7d:4c:be:12:1e:7e:a7:1f:d9:6b:82:7f:f9:da:d5:
aa:9d:6f:8d:a6:24:38:dd:75:f6:f0:89:ce:b5:a8:
99:28:6d:0e:ab:68:20:7b:da:06:32:e3:31:81:8d:
a8:1e:91:9b:d6:f2:8f:d8:2f:49:74:0f:eb:ce:d3:
31:50:ec:c0:ad:a3:45:2d:49:35:ea:4d:7b:18:0c:
b5:5a:cf:00:8e:55:ed:9f:df:16:ce:7d:53:88:71:
ea:02:8e:0e:55:ca:50:41:5a:e7:a9:f7:77:dd:65:
6c:bf:84:33:38:19:5c:3a:d7:d0:90:c0:03:92:bc:
68:22:2b:80:b4:16:24:8c:19:fd:e2:dc:13:df:65:
02:d6:19:94:f7:86:84:92:b4:0f:83:48:78:ca:81:
dc:33:03:cb:60:37:b6:9b:02:01:a1:4b:c1:e0:7c:
8f:a9:02:aa:1e:aa:ab:48:01:e5:56:0b:d3:76:58:
e2:50:ba:31:ef:8c:1b:ae:08:4b:55:50:90:68:dd:
eb:e7:45:58:8c:ff:97:79:e4:38:0d:77:27:7b:bc:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:FA:3F:12:90:BB:EB:37:82:52:F2:D1:54:F9:4B:15:E1:47:97
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/84D6PxKQu-s3glLy0VT5SxXhR5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1400::/44
Signature Algorithm: sha256WithRSAEncryption
7a:83:1d:e6:fb:d3:ab:7d:17:d2:dc:fb:4b:a1:30:3e:b7:6d:
71:ba:be:2e:0a:19:d4:23:cb:a4:ed:c5:56:7c:77:50:71:33:
3d:5c:55:03:ea:0a:07:04:9c:a8:8c:e4:96:8d:f8:27:13:57:
d0:42:05:38:c0:49:15:44:02:03:d0:05:d1:b9:ed:81:d4:ce:
97:a5:aa:4a:d4:40:d2:bc:cd:6f:0a:cc:b2:3a:5e:55:5c:24:
6f:3c:0b:1e:6d:45:17:44:c8:83:41:e5:0a:09:c4:c9:9f:76:
83:7e:25:88:68:e0:26:dd:1b:ca:73:45:77:5a:94:6d:99:9a:
1e:9a:51:99:b6:d5:90:86:85:dc:07:e3:59:82:65:5a:c0:cb:
4a:5a:c5:d8:bd:b9:75:87:78:7a:4f:41:f3:74:fa:97:8b:13:
8b:e9:5d:20:cd:06:9f:a6:14:98:39:c9:c0:61:02:28:97:b2:
49:9d:b1:a2:18:51:b5:03:e5:11:75:46:44:05:d8:79:38:54:
eb:41:ea:c2:36:60:2d:4c:b8:dc:bb:e5:38:66:5a:e8:62:1f:
5e:0c:e7:99:2a:a0:ad:fb:91:59:e6:38:88:c5:ba:75:91:ed:
81:7b:04:f8:5e:e9:38:13:fc:fb:89:7e:57:18:ba:fe:d4:bf:
a6:e0:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:46 2024 by rpki-client on console-fra.rpki-client.org