Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/oJxFGaSN1QRCk-Z9fRixCW2MP2M.roa
File: oJxFGaSN1QRCk-Z9fRixCW2MP2M.roa (raw, json)
Hash identifier: 6LSfpwkSxE929CYLL4qyXQhApxbZNdrwmqE07yXmL3w=
Subject key identifier: A0:9C:45:19:A4:8D:D5:04:42:93:E6:7D:7D:18:B1:09:6D:8C:3F:63
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 01856CA5CE058E5A22696A58E94E752C74F7
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/oJxFGaSN1QRCk-Z9fRixCW2MP2M.roa
Signing time: Sun 01 Jan 2023 09:24:43 +0000
ROA not before: Sun 01 Jan 2023 09:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48329
IP address blocks: 2a10:9640::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:a5:ce:05:8e:5a:22:69:6a:58:e9:4e:75:2c:74:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Jan 1 09:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a09c4519a48dd5044293e67d7d18b1096d8c3f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:09:8d:cf:8a:e3:3f:7f:6a:e2:b6:6b:71:
64:3a:26:07:1a:ac:66:dc:4a:c1:5e:0a:fa:ca:9c:
05:b0:f5:06:15:df:8e:e7:0b:d0:31:ac:14:48:00:
b1:a3:24:f9:82:d0:bc:64:26:5e:89:b1:5e:60:66:
6a:4a:e6:0b:b4:23:39:57:4f:72:b7:e7:a7:99:3d:
df:19:77:68:d9:3c:30:48:15:c2:3f:2d:1f:76:a7:
eb:35:3f:98:a3:ee:76:d3:bb:06:83:8f:8d:40:ae:
4b:3f:cb:f8:b4:7e:49:9f:4d:30:9e:27:70:e0:34:
e2:69:c2:ca:a5:b5:79:6b:e9:2a:32:07:32:e4:36:
ac:ba:5e:0f:74:a8:da:ed:63:fb:b4:66:d6:e8:e0:
72:3c:a5:c5:38:dd:5b:eb:b4:3a:36:55:7e:e4:38:
61:35:44:32:c2:52:f5:9d:c0:8d:f5:c5:54:65:a6:
21:c3:40:d4:92:1d:01:84:7e:d1:d3:29:37:10:b8:
25:e1:5e:c6:79:45:ce:ef:a1:fc:dd:aa:b4:c5:91:
16:1b:30:2c:c3:e3:79:97:0c:a8:e8:8b:46:15:bc:
78:a7:3f:b3:61:b1:b0:60:bc:af:78:ee:ca:bc:30:
a2:ba:38:9e:e5:99:47:ad:c8:6d:96:24:76:61:4a:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9C:45:19:A4:8D:D5:04:42:93:E6:7D:7D:18:B1:09:6D:8C:3F:63
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/oJxFGaSN1QRCk-Z9fRixCW2MP2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9640::/29
Signature Algorithm: sha256WithRSAEncryption
1b:e1:3a:94:46:6d:6f:b1:e4:17:c5:d8:f6:e6:8b:15:43:77:
a3:0c:c8:8f:6d:db:b1:33:e8:87:67:0b:c3:fa:15:c4:ef:01:
36:90:4b:5a:8e:dd:fe:8f:21:e6:5c:08:0d:ef:61:79:44:93:
f7:0c:a7:6f:49:5a:2e:b8:37:de:54:13:53:be:a9:66:c8:59:
e5:97:60:78:b6:d5:28:66:65:88:4f:59:63:3c:65:58:6d:67:
50:24:1b:93:a7:a0:6a:df:e1:9b:a3:8d:fa:c0:f8:90:e8:96:
fb:71:83:26:e6:09:dc:6e:01:c5:8c:b1:de:db:20:78:7c:e4:
fd:3f:08:77:17:af:d4:60:70:b5:d5:ed:97:16:4d:11:df:5b:
64:49:00:9a:2d:25:26:cb:24:42:97:39:ef:0c:4a:24:90:1c:
fb:46:dc:40:26:e3:f2:8a:cd:2a:ad:40:ab:c6:e9:ae:e3:e2:
68:d9:a4:a7:2c:bc:5b:80:2f:e8:13:ce:2f:0d:ea:7a:40:d9:
b7:84:f4:61:79:c5:c0:b6:26:d4:a3:ca:0f:31:59:15:31:95:
a5:3f:51:95:0b:09:f1:9e:01:54:e3:e8:05:4a:ed:74:5c:69:
11:ce:e7:18:46:7c:df:3d:8f:d4:4f:49:03:ae:c6:b7:4e:28:
5b:15:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:38 2024 by rpki-client on console-fra.rpki-client.org