Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/N0g0ydpuJmGb6CG3D9cdGCcIpdY.roa
File: N0g0ydpuJmGb6CG3D9cdGCcIpdY.roa (raw, json)
Hash identifier: rNoJAU7lIOA8EuvEK+R6/gkCNg3Vsbs3iQZIo+oSrzM=
Subject key identifier: 37:48:34:C9:DA:6E:26:61:9B:E8:21:B7:0F:D7:1D:18:27:08:A5:D6
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 01856BDC75FD6ED067648BB69E1E20B40DA8
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/N0g0ydpuJmGb6CG3D9cdGCcIpdY.roa
Signing time: Sun 01 Jan 2023 05:44:48 +0000
ROA not before: Sun 01 Jan 2023 05:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212360
IP address blocks: 2a0f:607:1054::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:75:fd:6e:d0:67:64:8b:b6:9e:1e:20:b4:0d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 05:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=374834c9da6e26619be821b70fd71d182708a5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:38:78:a4:0c:d8:55:f7:65:3b:0a:87:41:2d:
11:1d:50:b6:55:38:da:49:27:a2:37:c4:d9:bc:12:
cf:88:9f:61:65:e9:a7:4b:30:34:4c:bd:05:4c:37:
db:36:9c:19:c2:18:3a:a0:54:c8:a9:09:e9:b0:d8:
2e:e2:f2:f7:b5:b0:26:bf:dd:89:6b:98:5c:2b:44:
a2:4e:ed:ef:c7:f5:8e:af:38:51:7c:86:16:4f:a9:
43:64:7f:c6:ec:73:cb:ae:f1:5e:95:ac:6e:26:9a:
d7:9d:63:ce:28:a8:5e:3e:8d:c2:31:9b:46:b4:fa:
b2:eb:87:44:16:66:a8:c6:cf:16:2d:aa:b0:f7:d1:
7e:8e:a3:98:43:17:2e:45:9a:37:01:0c:0f:57:68:
32:3d:ed:73:6b:de:3d:6d:63:07:6a:6d:ed:0b:37:
3e:21:9e:05:85:51:4e:40:5b:b6:2b:fe:3f:c8:1b:
8a:7e:41:7b:21:49:3d:6f:95:96:88:dd:ff:80:9d:
6f:3d:82:5d:1a:0f:cf:05:3f:59:47:32:59:0e:09:
5c:ff:80:12:45:ca:9c:7c:23:8f:63:38:b4:b0:4e:
d9:47:e0:78:5e:51:8b:74:64:f6:7f:99:84:cf:d5:
4b:f6:09:11:ff:19:5f:c0:77:65:19:9c:49:35:09:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:34:C9:DA:6E:26:61:9B:E8:21:B7:0F:D7:1D:18:27:08:A5:D6
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/N0g0ydpuJmGb6CG3D9cdGCcIpdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1054::/48
Signature Algorithm: sha256WithRSAEncryption
53:96:fe:40:7b:c6:23:01:49:e9:55:3d:df:53:34:2e:60:0c:
e0:52:c9:cc:58:5f:cc:00:95:67:a5:a4:ca:c4:2c:bd:69:a2:
d2:9c:65:8f:91:0d:51:f6:ed:88:b4:d5:fb:aa:ab:e7:40:3d:
1b:c7:eb:66:44:62:52:94:04:f5:ae:01:b3:16:79:c0:4c:68:
a2:5a:10:96:6e:92:ba:a1:18:c4:99:99:2e:0d:7b:4d:16:22:
cd:5d:06:87:21:90:27:7f:f1:81:94:1c:4e:61:00:3e:77:ea:
c1:78:5e:fe:bb:15:9a:3e:44:60:c5:9d:68:51:38:cb:c2:af:
b0:71:7f:60:e8:f5:d0:ed:48:b3:a3:fb:fb:da:bd:ea:e7:2c:
d2:07:77:1b:e5:ed:9c:47:ee:ac:3e:e5:dd:ee:b9:a3:66:bf:
6b:b1:8c:d3:d3:17:1f:ea:05:12:5b:b0:d1:af:dd:46:8b:dd:
42:f4:68:07:b0:56:5d:cf:43:23:28:ac:3c:68:7c:2f:44:19:
aa:db:8d:81:5d:66:78:24:a7:cb:52:f0:32:eb:e3:9f:3a:86:
0d:59:5c:7a:ec:fc:05:50:f1:8d:26:af:4b:56:cd:48:24:f4:
92:e5:af:84:60:74:79:69:b1:71:40:18:33:2b:a4:48:99:ac:
fa:f9:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:46 2024 by rpki-client on console-fra.rpki-client.org