Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/p_v5sN-EJLBTn9dr_EfREJc6C5s.roa
File: p_v5sN-EJLBTn9dr_EfREJc6C5s.roa (raw, json)
Hash identifier: eaJeQAntW8PC/PwPQwGrR1TciuwOoamiC2PX3fxmFFg=
Subject key identifier: A7:FB:F9:B0:DF:84:24:B0:53:9F:D7:6B:FC:47:D1:10:97:3A:0B:9B
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 01856CEF1F55B85FD01380D57DDF288D6B28
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/p_v5sN-EJLBTn9dr_EfREJc6C5s.roa
Signing time: Sun 01 Jan 2023 10:44:48 +0000
ROA not before: Sun 01 Jan 2023 10:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57602
IP address blocks: 2001:67c:240c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:1f:55:b8:5f:d0:13:80:d5:7d:df:28:8d:6b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Jan 1 10:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7fbf9b0df8424b0539fd76bfc47d110973a0b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3b:17:19:95:5f:7f:e3:82:3d:5c:81:7a:1b:
9f:9e:32:39:64:97:bf:ce:47:52:8e:a3:6a:79:fa:
f6:52:24:ec:a5:2a:fd:9b:b3:eb:ae:95:9b:a2:94:
6f:3a:c8:e0:b9:de:a7:01:d5:0e:d4:f2:26:d2:43:
ab:df:88:7f:3c:df:26:32:63:d8:a5:01:91:69:6a:
82:ee:f8:74:e8:7c:60:c8:e8:f1:61:aa:6a:d8:b9:
8d:6f:bd:b3:c2:c5:2b:fc:98:9a:0f:fb:18:58:64:
2e:2b:75:a1:15:32:2c:c4:d7:a2:53:cd:98:f5:70:
de:45:e3:e6:40:41:65:a1:1b:09:f6:e9:85:16:ab:
de:49:e8:a4:ab:16:bc:e3:20:7d:4e:eb:86:e3:da:
f8:75:42:19:da:a6:48:05:02:8f:16:6e:87:33:eb:
05:34:ad:8e:62:67:87:ba:74:f2:18:8d:a3:4f:76:
12:3a:0d:83:29:e3:6c:37:b5:47:4e:d4:e2:2c:02:
dd:ad:52:2b:8e:e0:8a:e7:97:01:5b:52:23:1b:ba:
ae:d1:78:e8:ea:e1:d2:77:59:85:ab:aa:f5:4e:7d:
33:e0:da:69:4d:92:e5:44:07:55:d7:fe:14:47:4e:
11:32:3e:6e:8b:d2:d6:fc:2f:b2:50:d9:67:b4:57:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FB:F9:B0:DF:84:24:B0:53:9F:D7:6B:FC:47:D1:10:97:3A:0B:9B
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/p_v5sN-EJLBTn9dr_EfREJc6C5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:240c::/48
Signature Algorithm: sha256WithRSAEncryption
2b:c7:24:1f:15:85:85:96:49:85:e3:8c:9c:b1:ce:34:20:57:
53:c6:cd:08:74:c9:0b:9b:27:b5:b5:a6:06:a1:45:05:8a:24:
75:bc:7b:71:fc:09:7b:3a:9b:25:cb:3a:05:15:38:af:42:d1:
24:36:17:61:f5:37:9d:42:f8:b4:f4:e0:b6:94:31:51:84:79:
01:a3:4c:1a:14:cb:7b:d4:22:9d:a6:7e:0b:4c:d5:d7:90:ca:
7b:6f:fb:57:d6:6c:c8:d0:3c:e4:53:91:4b:4e:0c:01:1f:ff:
a7:b2:cb:9b:12:91:ea:5e:e8:fc:3e:6a:b9:b6:b3:99:d4:ae:
c2:d1:fc:6d:4f:1e:fc:cb:5d:e1:a4:c1:3a:a6:8d:92:5d:a8:
3b:ad:2b:63:22:74:3d:98:c4:f8:34:1b:10:27:4d:a3:d3:65:
ff:05:cf:d6:8e:74:26:3e:af:e2:a5:c7:f6:34:20:df:fd:ad:
c8:49:09:f3:8e:22:ba:bc:dd:80:53:a6:ff:e4:a0:75:72:2a:
40:af:76:e9:2c:29:06:b6:c2:5e:d4:83:bf:b9:29:7b:08:c1:
5c:eb:2b:62:ac:04:1d:8f:ff:b7:2b:c2:22:0a:13:a3:1c:c4:
14:2f:d7:13:a5:56:a3:62:7c:6f:76:3f:dd:2a:ac:23:5d:f8:
fd:58:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:04 2024 by rpki-client on console-ams.rpki-client.org