Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/4GT4DPbP4VkT2LJic66wYbri4aE.roa
File: 4GT4DPbP4VkT2LJic66wYbri4aE.roa (raw, json)
Hash identifier: CAcYUSny0iXtyXplGHDyvh5+W6pBkT220mBKzpaLU/g=
Subject key identifier: E0:64:F8:0C:F6:CF:E1:59:13:D8:B2:62:73:AE:B0:61:BA:E2:E1:A1
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 01865AEEFE285E0DCCA0B7ED8D2AD8BE1A17
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/4GT4DPbP4VkT2LJic66wYbri4aE.roa
Signing time: Thu 16 Feb 2023 15:54:17 +0000
ROA not before: Thu 16 Feb 2023 15:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36351
IP address blocks: 2a04:f400:3000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:ee:fe:28:5e:0d:cc:a0:b7:ed:8d:2a:d8:be:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Feb 16 15:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e064f80cf6cfe15913d8b26273aeb061bae2e1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:e1:65:78:1f:d3:65:4b:02:a1:c2:5a:78:
d4:b7:12:a8:3d:62:15:2b:84:92:16:00:90:b3:8c:
b3:88:05:30:5a:1d:01:f3:ae:c7:30:09:49:f6:fc:
e3:97:8e:0c:a1:a6:4a:c6:7e:fd:2c:f6:1e:e0:e8:
ac:25:34:14:f1:96:13:86:eb:a5:96:0a:4b:2d:86:
05:31:c6:2e:c1:ed:11:ff:c3:10:d2:1e:6f:f0:e5:
93:e9:15:8f:20:d0:a2:0b:aa:c4:0a:98:5f:11:34:
50:a8:09:a6:34:57:f8:6a:03:14:70:02:3e:57:b5:
dc:5b:ed:f8:96:11:f5:68:0a:f1:42:d7:a8:f4:e9:
42:58:84:84:a4:2d:ba:0e:a5:ce:c7:ce:b9:cb:f6:
f5:58:fc:e4:a2:e8:06:29:6f:ed:af:28:26:aa:4a:
6a:72:ce:08:fe:1c:8f:38:ec:48:0f:87:9e:01:14:
26:92:15:3a:cf:38:04:45:8a:b1:54:fd:c6:3d:3c:
b9:c0:1b:11:33:06:92:06:ab:b3:ce:e3:0c:ea:36:
cb:46:c8:15:1c:12:b9:6d:bd:71:58:65:fb:84:d6:
4e:95:00:aa:73:cc:9a:5c:2b:bf:59:d0:51:98:10:
ba:01:55:ea:99:73:56:6a:6b:4e:80:5c:79:1e:3e:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:F8:0C:F6:CF:E1:59:13:D8:B2:62:73:AE:B0:61:BA:E2:E1:A1
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/4GT4DPbP4VkT2LJic66wYbri4aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:f400:3000::/48
Signature Algorithm: sha256WithRSAEncryption
22:8f:5a:e7:12:2e:d2:8c:d5:44:8f:55:82:ef:5c:03:90:27:
2d:7a:52:19:e7:e6:79:d6:c4:cb:c1:41:ea:32:7a:aa:e7:e1:
ee:05:ed:01:2b:de:ff:50:03:4c:10:26:be:28:c7:9e:9f:c0:
d0:07:b0:2f:2a:33:d9:49:66:46:f9:c2:28:e9:f4:74:41:08:
7b:32:db:06:ba:05:90:10:c1:00:e7:23:89:d7:9c:be:09:37:
96:f4:ff:47:2a:f1:b2:f7:df:72:ea:d1:09:24:78:b1:7e:37:
79:78:ee:85:75:73:b7:70:b8:a7:82:62:87:b9:78:ac:d8:21:
cb:7b:e2:f6:73:fb:4d:98:4f:a0:d4:22:bb:ad:4b:2f:37:87:
f5:c1:85:bd:6d:31:67:56:01:25:cd:56:9f:79:0c:af:a4:27:
87:d6:58:d2:fc:cb:a6:e1:3d:c2:17:76:f1:66:df:82:92:0e:
5f:ab:6d:7a:f1:ae:e9:d0:e4:c3:32:ad:ce:ae:39:f9:86:13:
0f:85:58:54:5a:a9:75:33:24:da:ce:2e:ee:a8:a0:86:ef:e5:
ad:7a:78:a6:ad:56:44:fa:6d:fe:de:ff:da:b9:67:16:2c:13:
4a:c5:0d:1b:de:c8:96:57:2b:86:42:5e:f2:47:7c:85:ea:11:
f4:30:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:29 2024 by rpki-client on console.sobornost.net