Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/CAUUG8iq-vT9QATyZ8xoWJ_S-u4.roa
File: CAUUG8iq-vT9QATyZ8xoWJ_S-u4.roa (raw, json)
Hash identifier: C3QkKgJEXjAL/z6TSwJgJuVVjugkEzLbmA4wrfer2KQ=
Subject key identifier: 08:05:14:1B:C8:AA:FA:F4:FD:40:04:F2:67:CC:68:58:9F:D2:FA:EE
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 0188C352C918EFF0A04C65F788BFEE58F5FA
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/CAUUG8iq-vT9QATyZ8xoWJ_S-u4.roa
Signing time: Fri 16 Jun 2023 08:29:22 +0000
ROA not before: Fri 16 Jun 2023 08:29:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203820
IP address blocks: 2a06:9040::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:52:c9:18:ef:f0:a0:4c:65:f7:88:bf:ee:58:f5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Jun 16 08:29:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0805141bc8aafaf4fd4004f267cc68589fd2faee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:15:8f:e3:4a:5f:c6:21:6d:d4:f6:2a:a7:
ac:4c:2f:b1:fb:56:10:00:da:b2:2f:31:f4:61:0e:
c1:a6:94:2f:94:6b:4a:b4:be:69:11:92:37:0f:36:
88:17:3a:a5:0f:bf:1b:6c:ae:66:54:d6:d6:63:d7:
40:3c:4c:d0:b1:34:da:8f:ae:7b:48:58:4c:84:a6:
cd:45:0b:ab:b0:7a:1e:df:c1:c7:ba:54:5d:9b:0f:
3b:7a:34:3f:06:3d:7f:e6:6d:ff:2a:bf:dd:5b:f0:
36:c0:d3:3c:2b:1a:f6:09:4e:aa:0d:a2:88:7f:63:
d2:57:c0:a1:95:e3:11:19:36:b9:54:51:f0:47:c8:
fe:d3:9a:06:03:fc:32:c2:64:ad:32:bd:6c:ec:3f:
85:bb:0a:1e:7c:dc:da:0a:aa:61:6a:8e:85:7e:a6:
97:85:6e:87:de:76:b5:95:0c:e9:18:d5:66:0b:ac:
1e:01:2c:cb:f7:ed:51:1a:f9:b7:74:ed:0f:37:09:
11:61:f0:b2:95:b5:9c:25:9e:b1:93:bc:1f:37:ef:
23:d2:33:7d:a4:0c:4a:0a:a0:13:89:fc:ee:a8:4b:
57:d8:fc:b8:12:d0:af:d5:cc:86:72:5f:d2:ff:79:
55:63:a1:9f:56:c4:1d:4e:49:02:b1:c4:55:59:d0:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:05:14:1B:C8:AA:FA:F4:FD:40:04:F2:67:CC:68:58:9F:D2:FA:EE
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/CAUUG8iq-vT9QATyZ8xoWJ_S-u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9040::/29
Signature Algorithm: sha256WithRSAEncryption
04:8e:3a:a8:9b:0e:eb:39:85:a6:bd:54:78:53:55:af:80:94:
45:45:59:69:f9:46:36:4e:bf:ed:5f:34:5d:20:cb:2c:6d:9b:
fa:e0:93:85:4d:2b:a6:2b:ec:5b:8a:05:91:a1:30:c3:bc:b2:
80:78:50:32:fe:86:4c:b3:3e:3a:5b:90:56:a1:5e:c4:e4:d5:
56:2a:9b:eb:6d:f3:5d:2c:70:31:87:ad:8d:fa:4e:2d:be:a5:
8a:c6:1c:9b:84:bd:da:07:6c:15:6f:36:f3:57:69:9b:2e:d9:
25:52:e6:6e:b2:83:c4:61:a9:9f:f3:9e:5d:a6:3f:39:9b:c3:
bc:a0:5a:91:76:76:fe:42:ac:b5:7b:d7:cb:7e:b1:3c:6e:e4:
23:96:7a:e2:93:86:6b:73:8b:24:49:9a:63:b5:ed:33:0e:0d:
b2:14:c8:07:19:39:d6:bc:30:77:0f:06:23:d7:df:59:b1:f9:
91:a6:50:34:99:ec:5f:bb:7e:fb:88:e1:fe:94:f8:7a:2b:a5:
17:b8:6a:e5:f8:03:49:a0:8e:de:94:20:a8:1b:f0:71:98:32:
39:d6:64:53:e5:80:7e:d9:6a:2e:a8:c7:05:f4:ac:93:d2:5e:
15:d7:8e:b1:42:d6:62:33:25:02:a5:49:9c:32:8b:24:4f:ee:
c9:9c:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:14 2024 by rpki-client on console.sobornost.net