Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/83e6Ks1VMyEPiwgRHs6yNgkRwFY.roa
File: 83e6Ks1VMyEPiwgRHs6yNgkRwFY.roa (raw, json)
Hash identifier: 1rw/0Qzxm9Yom+Naej2HP/3kOMPTaQCowfl4LTOKLqM=
Subject key identifier: F3:77:BA:2A:CD:55:33:21:0F:8B:08:11:1E:CE:B2:36:09:11:C0:56
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 01856F0B41DDB7F694301E4A04460DC36816
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/83e6Ks1VMyEPiwgRHs6yNgkRwFY.roa
Signing time: Sun 01 Jan 2023 20:34:46 +0000
ROA not before: Sun 01 Jan 2023 20:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8315
IP address blocks: 2001:678:76c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:41:dd:b7:f6:94:30:1e:4a:04:46:0d:c3:68:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jan 1 20:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f377ba2acd5533210f8b08111eceb2360911c056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:84:88:0c:03:53:14:6d:6f:45:cd:5b:39:
6f:92:f2:ee:d2:94:45:84:c1:40:30:e4:32:56:bd:
5f:00:6c:a0:34:e4:0b:79:f3:b0:92:9b:90:de:27:
90:80:ff:cc:af:84:a2:4b:03:6d:b9:47:2b:f0:eb:
6f:2e:a8:69:5f:ab:59:aa:3d:1a:d9:be:03:39:43:
a2:d2:11:12:a5:d7:a9:03:d6:58:a1:a0:19:f5:34:
ab:5e:1b:2f:fd:71:15:c2:a0:5c:2a:c2:c0:a3:1d:
78:49:df:36:ca:6d:a1:0f:e5:74:e5:8e:82:80:3e:
e0:f7:90:98:ed:ab:2f:1e:d8:4d:ef:74:83:3c:bf:
c9:9d:c1:ed:ba:52:4e:c3:a9:9c:5b:47:dd:68:cc:
4c:db:c0:ec:0e:b3:35:ff:ed:93:a1:ae:59:52:64:
7e:d7:b2:88:59:e0:3e:b8:56:4c:4f:60:ae:af:ed:
10:59:9c:b0:26:f1:a1:2c:eb:47:c5:fb:b1:8f:cb:
8d:e6:8b:54:5f:0b:9c:90:24:46:36:26:d0:4a:b1:
b5:9c:ba:43:56:c4:04:49:a2:8d:05:79:a6:fa:18:
9b:3c:59:1e:5f:b8:fe:e7:6e:c7:09:fe:62:bf:5c:
dd:a4:1b:49:82:3b:7f:02:81:fc:71:6f:5c:08:ec:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:BA:2A:CD:55:33:21:0F:8B:08:11:1E:CE:B2:36:09:11:C0:56
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/83e6Ks1VMyEPiwgRHs6yNgkRwFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:76c::/48
Signature Algorithm: sha256WithRSAEncryption
88:aa:de:68:f8:a0:bc:31:90:60:3a:00:19:a6:a4:b2:3e:0b:
31:bb:f2:bf:59:38:36:94:b1:b0:5e:7d:28:aa:f8:42:05:c7:
d2:a8:76:04:ce:4f:2d:76:65:e8:0b:b5:ab:cd:9f:2f:59:e0:
50:a8:4d:8a:3a:b5:16:f4:e2:dc:60:99:f9:c3:91:0b:50:48:
4b:42:16:79:11:72:d4:98:31:4a:e6:59:39:93:59:df:86:9f:
f6:f1:91:38:a5:61:a8:03:1c:fa:d8:c2:4f:98:4f:8a:20:28:
16:25:00:98:49:5c:2a:9b:b8:1f:58:06:67:d4:4d:ac:cd:0d:
da:3d:1d:66:d2:d1:ec:bf:86:78:80:e0:11:22:a6:b0:c9:92:
20:d4:15:51:d7:0a:53:32:08:11:a3:d2:0a:b4:41:b0:28:fc:
85:e6:4b:65:ea:fb:b6:9e:ad:fa:a7:b0:16:ab:15:5e:c2:d1:
09:86:2e:58:74:2e:60:51:db:c2:da:c2:f2:3f:0c:52:74:2a:
1a:05:96:d3:8f:3e:70:60:b0:db:62:be:7c:ba:b8:a2:28:bf:
6d:01:d4:41:3c:ed:1e:4c:1c:cd:95:c0:88:62:ce:1a:c9:5a:
ee:b0:3f:5e:78:6d:30:c4:52:8b:8f:50:ef:27:f3:32:99:a1:
f1:64:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:47 2024 by rpki-client on console.sobornost.net