Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/ctbWrP9TVgKvNqSvfpAbTeocq9A.roa
File: ctbWrP9TVgKvNqSvfpAbTeocq9A.roa (raw, json)
Hash identifier: y9cFMRFzN49GkbQDUDT+FWdjaUiMYiVgd58J4SpDszQ=
Subject key identifier: 72:D6:D6:AC:FF:53:56:02:AF:36:A4:AF:7E:90:1B:4D:EA:1C:AB:D0
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 01856BDC657DF83E3268A3554530E66C76F6
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/ctbWrP9TVgKvNqSvfpAbTeocq9A.roa
Signing time: Sun 01 Jan 2023 05:44:44 +0000
ROA not before: Sun 01 Jan 2023 05:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a0f:607:1070::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:65:7d:f8:3e:32:68:a3:55:45:30:e6:6c:76:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 05:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72d6d6acff535602af36a4af7e901b4dea1cabd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:7d:8b:f7:b3:f8:59:9d:13:00:a5:c0:58:
a2:08:fc:2d:08:fc:79:3a:b9:18:a5:66:b1:e0:37:
19:8f:3e:04:e9:1d:97:9f:68:c0:78:21:9f:99:35:
8f:4f:a7:3e:f8:37:c4:d5:14:53:d6:15:66:34:2b:
49:18:76:20:ae:00:52:2b:d4:d4:b5:25:a5:75:c8:
a4:8f:e0:74:18:0f:8c:3c:42:81:65:dd:9e:09:1c:
bb:99:dc:1b:32:ed:28:f2:8a:34:60:30:17:44:40:
77:eb:96:ba:9d:5b:a7:52:9e:5f:41:ed:8a:c8:79:
f1:fc:ad:b8:61:c1:31:c9:52:dc:49:61:4e:7c:1a:
5b:eb:51:b4:46:31:bf:03:db:b6:3f:65:de:75:d7:
60:11:31:0d:27:07:07:de:9d:b6:3f:20:85:92:99:
77:99:93:6a:e1:6d:dc:74:da:9c:f2:2b:8b:78:46:
48:b8:6f:c8:9d:de:ac:e1:c7:b3:30:6b:2a:74:67:
51:6c:7a:17:0f:44:fd:83:22:e9:e2:54:b0:56:4c:
e0:a2:e3:42:e4:f2:ef:f7:85:04:8a:93:c7:9b:93:
c5:fc:5d:19:90:4e:ba:3f:af:78:a4:98:4c:78:6c:
0a:75:c8:c0:37:97:6c:3b:7a:74:31:a4:43:69:56:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D6:D6:AC:FF:53:56:02:AF:36:A4:AF:7E:90:1B:4D:EA:1C:AB:D0
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/ctbWrP9TVgKvNqSvfpAbTeocq9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1070::/48
Signature Algorithm: sha256WithRSAEncryption
ad:89:f1:18:7a:d9:e7:2d:2e:83:a1:26:04:d8:f3:6b:43:8a:
b6:a2:48:2b:b2:e0:ee:e2:c7:a0:5c:9e:21:52:01:f0:85:77:
34:eb:44:cc:79:58:db:67:b5:a3:39:41:5e:4c:0f:93:a0:b2:
ae:d3:18:c0:6b:43:0c:bf:fc:14:09:6d:31:a5:8e:fd:07:79:
d0:7e:6a:b6:8b:01:0b:18:e5:7b:45:89:04:d0:79:06:9d:49:
d3:af:4e:78:fd:f9:48:39:b6:ff:ce:07:1b:12:fe:2d:fd:d2:
aa:90:c2:4d:64:b4:db:ed:de:b6:99:24:a0:4a:6b:cf:35:81:
a2:82:3c:98:4a:62:07:a2:3f:1a:41:69:c5:83:f4:d1:3e:cf:
0b:66:b5:a0:4e:3a:25:15:90:12:e8:41:1a:3f:56:14:85:1d:
cb:6f:9d:73:33:0f:a4:18:60:ef:6e:1e:6b:81:0d:be:7b:15:
da:f1:01:e4:68:fc:20:b1:3f:0c:b9:3f:7f:6f:4e:d9:35:dd:
4f:fb:f0:6f:ab:fa:7c:16:13:9b:6b:e7:f0:63:a6:8c:68:db:
3f:aa:af:5d:ad:c8:d6:84:44:54:67:45:b8:f1:22:53:30:a5:
71:79:ef:3b:29:07:fc:d8:10:a8:fa:d2:fd:76:be:0f:6e:93:
47:d7:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:46 2024 by rpki-client on console-fra.rpki-client.org