Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/I3I4oPYbl34QuS4n9WGOmI_u2k4.roa
File: I3I4oPYbl34QuS4n9WGOmI_u2k4.roa (raw, json)
Hash identifier: 6hu567OXFVbEIhKDSVMT87al+vC7TUlEg3gOVQ5CDSk=
Subject key identifier: 23:72:38:A0:F6:1B:97:7E:10:B9:2E:27:F5:61:8E:98:8F:EE:DA:4E
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 018570CBCC11804A3F7B0AFE6D13A95266B8
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/I3I4oPYbl34QuS4n9WGOmI_u2k4.roa
Signing time: Mon 02 Jan 2023 04:44:42 +0000
ROA not before: Mon 02 Jan 2023 04:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29670
IP address blocks: 2001:678:fd8::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:cc:11:80:4a:3f:7b:0a:fe:6d:13:a9:52:66:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Jan 2 04:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=237238a0f61b977e10b92e27f5618e988feeda4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:e8:c6:78:b9:3b:e7:94:c7:07:41:e7:1d:
7d:31:b9:10:98:08:cf:b6:00:40:02:fa:98:d3:9c:
20:b1:12:53:8f:4b:cf:a6:75:c0:98:58:a9:d6:db:
02:0e:89:ab:c6:e4:22:9a:be:e9:e9:b9:56:73:e8:
5e:22:dc:c3:05:6e:1f:02:80:33:6d:9a:cd:38:27:
90:0a:bd:b8:b5:58:ca:f4:e6:8e:68:60:bc:57:db:
7b:47:43:33:cd:a9:0a:1e:48:21:04:71:63:7e:ea:
f1:c4:66:47:40:97:3b:88:2e:07:47:9e:80:27:21:
66:4b:90:a4:87:ab:33:36:03:cf:8f:d1:2f:c0:26:
fb:fe:84:7e:c9:4d:8d:56:25:66:2f:fc:4a:6d:30:
6c:3e:62:d5:22:87:a3:d9:23:28:c8:2d:9d:84:0b:
1f:de:c9:01:87:27:b0:91:82:53:af:58:5c:e2:21:
ce:52:b5:19:05:e0:bc:a5:73:8a:1b:f5:2d:7d:ab:
4e:68:ac:b8:d8:03:fc:1e:c7:8b:9b:0e:83:a3:72:
0a:e6:a1:1f:50:f0:c4:ca:2b:2d:fd:cb:6f:92:ec:
69:46:a7:df:ad:e7:7c:79:52:72:f8:af:a8:34:56:
7c:35:6e:b2:36:f2:00:18:77:d2:5d:31:ee:bc:ab:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:72:38:A0:F6:1B:97:7E:10:B9:2E:27:F5:61:8E:98:8F:EE:DA:4E
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/I3I4oPYbl34QuS4n9WGOmI_u2k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:fd8::/48
Signature Algorithm: sha256WithRSAEncryption
0f:89:b2:ae:03:3e:6f:c8:45:2f:68:d7:ae:59:42:92:07:36:
c6:4c:f8:b9:86:46:85:07:b2:79:56:d0:57:f6:d1:81:a3:be:
75:73:1d:f8:6e:9f:e7:13:9c:9d:cc:a9:a5:f7:07:21:e7:50:
25:f6:75:55:f1:54:de:3a:c4:44:08:3a:39:58:1a:5d:75:80:
b1:fe:45:6e:fa:10:08:91:70:61:c1:99:6f:31:32:02:4f:1f:
4c:88:0f:01:28:30:c6:58:c5:d3:85:65:6e:a3:29:e7:16:6f:
87:50:ff:17:44:57:68:b1:4e:06:6a:7e:3c:94:7c:d9:57:4d:
72:04:b5:28:a1:9a:bd:c5:f5:d2:22:ce:db:8f:e8:91:2c:e7:
13:25:e2:88:c9:08:36:ff:06:69:03:5e:3f:b2:22:d2:3c:28:
df:43:da:a8:58:eb:73:3b:f1:29:40:5b:70:0c:3c:f6:da:af:
f2:1c:7a:35:42:d8:fc:22:33:57:0f:61:24:5f:80:47:66:e9:
92:ac:26:fc:16:c5:f3:52:94:45:36:99:6c:72:1b:a1:f9:a9:
85:cb:53:91:01:37:f3:81:06:2d:ab:bc:68:ad:74:c2:7e:11:
33:57:73:f8:92:e9:8a:8a:33:25:07:e4:d3:f6:80:78:30:01:
c4:54:fc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:36:33 2024 by rpki-client on console.sobornost.net