Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/D5V4Ik1LvTg9gpWh-VLzg5yXqoU.roa
File: D5V4Ik1LvTg9gpWh-VLzg5yXqoU.roa (raw, json)
Hash identifier: ofm/tT/WgYdh+9Dia3+GGd8fRdMG4nM5zvYoO/y8iLw=
Subject key identifier: 0F:95:78:22:4D:4B:BD:38:3D:82:95:A1:F9:52:F3:83:9C:97:AA:85
Certificate issuer: /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial: 018570D50A92D135CD087CE3609AB79A039B
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/D5V4Ik1LvTg9gpWh-VLzg5yXqoU.roa
Signing time: Mon 02 Jan 2023 04:54:48 +0000
ROA not before: Mon 02 Jan 2023 04:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211194
IP address blocks: 2001:67c:b28::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:0a:92:d1:35:cd:08:7c:e3:60:9a:b7:9a:03:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Validity
Not Before: Jan 2 04:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f9578224d4bbd383d8295a1f952f3839c97aa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:ff:c7:f3:b9:f1:f2:8e:87:69:1f:19:61:
80:09:3e:76:ac:7b:90:93:a6:be:61:eb:3d:62:21:
54:f5:56:13:2f:42:56:ac:fc:1a:97:06:65:1c:fc:
f5:33:ea:04:87:4b:f8:a5:a4:b8:6c:a5:3d:72:a7:
fa:b1:a1:53:eb:4c:c6:dd:5f:b4:2f:d7:0f:a4:03:
49:97:b3:c1:06:a5:4b:f1:db:a0:ee:5b:0d:ce:92:
da:c4:a1:4e:47:1a:2b:56:43:ac:94:c3:df:41:8c:
34:8a:cd:66:23:0c:7e:b5:62:c6:8d:6d:98:04:c7:
24:df:c5:29:bd:f2:c1:02:34:f4:cf:75:76:0a:af:
8f:ce:17:e9:a2:50:cd:87:e9:83:5b:31:73:5a:e7:
1f:55:af:9e:0f:98:6b:1b:6e:96:e6:8f:f7:36:71:
48:a5:87:5a:19:45:9d:14:bc:c3:73:54:03:21:0b:
0f:0c:43:79:41:03:a2:67:05:a0:d0:54:9b:e3:52:
ab:38:2d:31:73:75:b3:fc:35:6f:2c:2c:c6:1d:1a:
ee:90:06:92:32:b0:0a:8f:a0:7f:ce:b6:b8:e7:4d:
02:21:da:54:d1:43:a1:a3:3b:45:47:87:54:b6:2a:
0c:e4:10:f0:2c:27:a0:c1:a3:50:17:a3:62:5f:52:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:95:78:22:4D:4B:BD:38:3D:82:95:A1:F9:52:F3:83:9C:97:AA:85
X509v3 Authority Key Identifier:
keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/D5V4Ik1LvTg9gpWh-VLzg5yXqoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b28::/48
Signature Algorithm: sha256WithRSAEncryption
7c:38:b0:8b:39:4d:67:c3:ca:0e:76:0d:f3:cf:ed:66:6b:43:
51:b2:3c:80:2e:23:c4:90:65:30:6b:f8:f1:5b:ab:42:c5:cd:
0b:ce:cf:09:9b:66:9c:b4:86:15:6c:c6:74:30:a4:c1:cc:8f:
d4:b1:8b:f3:19:3e:0c:04:04:52:59:32:17:41:6a:08:26:46:
e1:e3:96:e9:7a:fd:0e:12:45:53:a6:9d:81:f7:88:98:e0:5b:
bd:80:89:5b:4b:73:0d:56:38:9d:7e:e0:32:4e:d6:6e:96:d6:
ba:37:c8:a4:28:89:f3:2d:3a:de:58:e6:f5:eb:bc:30:93:8c:
c3:f2:fb:f8:a1:7a:42:c5:be:20:b6:4e:0e:76:05:7a:7e:dc:
df:98:fb:8d:99:a7:52:eb:43:d8:0f:d5:33:be:9a:da:24:07:
14:d3:63:0c:4a:8a:9d:3f:d6:bc:1f:48:1a:bd:38:c4:ca:5d:
2c:1d:f0:a6:a7:99:d8:8e:19:b3:f9:3c:45:64:fa:56:76:77:
54:da:0c:c6:20:cc:d4:30:0b:c0:7c:ef:cf:f6:80:ca:45:4c:
ed:49:90:30:c8:cd:28:b2:55:5c:65:b4:57:0a:83:70:32:e3:
da:3b:92:0c:20:00:7d:8d:dc:00:18:58:43:9e:8e:9f:41:86:
3e:f7:33:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:44 2024 by rpki-client on console-fra.rpki-client.org