Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/1-hxxP4oBi8SsEYctpBgfHQdf2JU.roa
File: 1-hxxP4oBi8SsEYctpBgfHQdf2JU.roa (raw, json)
Hash identifier: 1Sr85N+7wtVPa1smdlYIBhs6vBAFwaaKHg0b8zwkRYw=
Subject key identifier: FA:1C:71:3F:8A:01:8B:C4:AC:11:87:2D:A4:18:1F:1D:07:5F:D8:95
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0185719553D811206BA00EF26ABF4187A5AE
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/1-hxxP4oBi8SsEYctpBgfHQdf2JU.roa
Signing time: Mon 02 Jan 2023 08:24:49 +0000
ROA not before: Mon 02 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 2a10:9f80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:53:d8:11:20:6b:a0:0e:f2:6a:bf:41:87:a5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jan 2 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa1c713f8a018bc4ac11872da4181f1d075fd895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e4:7e:27:6e:9a:ea:c9:80:42:c0:1a:c5:e6:
0b:db:2a:4d:5f:97:b8:54:20:8d:c2:83:e4:bd:21:
39:d7:63:e7:78:c2:47:1f:9d:ac:37:61:38:7b:12:
be:bf:ff:fe:78:4c:33:d5:45:1f:e2:87:46:9a:40:
75:cb:c1:eb:23:6d:64:2f:cf:87:7e:85:fc:ca:fc:
d2:ae:16:9b:59:ae:74:1b:ed:9d:09:e4:95:1a:cb:
bd:02:0a:be:47:73:17:37:ef:2d:37:f4:62:7e:ab:
9e:54:0e:b3:37:15:df:20:4b:2b:01:0d:28:c6:eb:
a2:f5:f1:55:3f:b0:ec:6f:88:4b:9f:f6:c5:dd:89:
4c:38:2f:fc:f8:79:8c:67:8f:78:e2:56:3a:ce:34:
8d:01:5c:e4:08:6f:09:3a:bc:2d:cc:f5:99:3d:b7:
82:17:10:4f:e6:74:00:0f:23:fb:37:06:3c:e1:40:
92:e0:46:19:99:ce:fe:c8:52:8f:88:b3:a5:f4:51:
12:eb:15:88:de:e1:ba:c9:61:11:f5:65:f5:e0:de:
72:5a:29:94:e1:64:c4:28:12:a8:17:49:5b:30:4e:
e6:84:ef:d1:46:a9:55:dd:c7:10:ba:c9:3a:9a:64:
eb:9c:d6:39:58:7f:ce:74:68:ab:f6:03:9a:72:ed:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1C:71:3F:8A:01:8B:C4:AC:11:87:2D:A4:18:1F:1D:07:5F:D8:95
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/1-hxxP4oBi8SsEYctpBgfHQdf2JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9f80::/32
Signature Algorithm: sha256WithRSAEncryption
b8:b4:5d:70:aa:d5:f5:b8:6d:dc:07:b3:90:84:20:60:42:8f:
31:49:81:db:6e:45:ba:00:fb:26:22:8f:4b:f7:d6:bb:57:7a:
11:30:2c:6c:40:47:9a:da:1a:91:42:03:f9:de:9d:26:30:ec:
7a:f1:c6:6d:c0:7c:c8:db:53:c8:77:4d:e4:60:b2:b9:18:7b:
8f:a6:aa:fb:68:21:a5:ad:f9:07:9d:34:51:7f:06:6e:81:07:
2c:53:16:37:11:79:6e:3e:c3:d0:03:7b:0c:ca:6b:74:f3:19:
7a:a4:ea:dd:1d:47:36:26:9f:f4:10:90:4c:e1:83:40:47:3d:
5f:74:cc:1f:03:d0:c3:89:25:0f:b6:43:dc:29:0c:e4:68:ce:
c2:01:70:9c:b7:51:17:d2:1d:19:2e:0b:da:0c:2c:04:15:98:
67:4e:fa:55:55:a6:4a:38:c8:ea:dd:5d:67:f3:9a:91:0f:42:
1d:44:be:17:d1:95:78:64:3e:92:89:f6:7b:8d:c7:c4:06:11:
b6:52:25:e6:95:0b:2a:69:9b:75:2e:69:a8:3b:ae:a0:35:18:
23:8b:10:ea:6c:b1:3e:6d:11:97:77:9d:df:a3:0d:e4:a6:0b:
49:50:39:ac:9d:8f:6d:77:94:78:2c:74:6c:4c:42:f2:62:4a:
fa:11:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:00 2024 by rpki-client on console.sobornost.net