Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/6DgYKtd-NlXbt8HNPUAY4lQZi1g.roa
File: 6DgYKtd-NlXbt8HNPUAY4lQZi1g.roa (raw, json)
Hash identifier: Ipa+s7OGwe5QVXdsIh4h/AnNpRjQPsFei2NZBDtLAlU=
Subject key identifier: E8:38:18:2A:D7:7E:36:55:DB:B7:C1:CD:3D:40:18:E2:54:19:8B:58
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01857728837ED6F549A974FF36F0159DBB2E
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/6DgYKtd-NlXbt8HNPUAY4lQZi1g.roa
Signing time: Tue 03 Jan 2023 10:23:41 +0000
ROA not before: Tue 03 Jan 2023 10:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212379
IP address blocks: 2a01:190:1802::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:28:83:7e:d6:f5:49:a9:74:ff:36:f0:15:9d:bb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 3 10:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e838182ad77e3655dbb7c1cd3d4018e254198b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:ab:2c:cf:82:2a:57:f3:d0:18:2a:20:dc:
cb:75:3f:e5:13:18:27:f7:fc:3e:45:ad:72:7a:14:
a9:27:7c:a0:21:77:69:89:e4:a5:de:df:fe:c7:ad:
2c:2d:e4:87:7f:57:86:b1:e2:e1:87:3e:fa:12:ca:
16:11:0e:e0:33:ef:33:8a:d8:0a:ff:a9:f1:3a:20:
b3:2f:5a:7d:15:64:1b:7f:ca:16:54:75:e2:a3:6e:
1d:99:fa:bd:2c:ca:05:f8:ad:5d:e2:2d:1d:d0:99:
28:ca:b5:b3:00:3b:ad:06:0b:f6:e4:14:fb:d0:46:
c4:63:c9:2d:70:c7:07:24:1a:98:8a:cd:58:91:12:
2a:60:63:b6:59:45:ef:f9:f5:ed:c3:46:76:ba:ee:
a8:f2:aa:65:ee:ad:79:ad:a0:d4:c2:15:d6:ff:98:
55:65:f8:c9:14:c4:34:8a:c1:01:e3:41:7f:39:48:
39:e4:7b:8b:3d:85:b2:72:3a:06:be:25:43:77:2f:
55:d6:d4:e8:2f:f3:50:fe:0f:78:53:f6:66:f5:6a:
0d:c1:f1:ed:f0:d4:3a:d4:8f:20:f7:dd:a4:7a:6d:
cf:ec:df:2e:16:68:da:c8:30:70:c4:0b:10:73:44:
9f:30:ea:f6:b8:3e:9b:fa:22:4b:1a:f7:bf:65:33:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:18:2A:D7:7E:36:55:DB:B7:C1:CD:3D:40:18:E2:54:19:8B:58
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/6DgYKtd-NlXbt8HNPUAY4lQZi1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:1802::/48
Signature Algorithm: sha256WithRSAEncryption
44:15:be:74:98:36:20:ae:3e:06:99:51:81:77:e8:1c:f5:63:
c9:91:68:20:b5:fe:08:50:58:8e:53:d2:b0:a4:96:c1:fc:70:
1e:4f:fc:23:1b:50:d2:72:b7:74:68:f3:6e:7d:8d:c0:31:85:
84:6d:d2:5c:3b:2d:9b:40:51:84:a2:38:f2:67:16:d6:2e:4d:
ae:a7:c1:62:36:16:7d:4f:b4:aa:b4:6d:93:f5:d5:f0:62:74:
b3:44:ba:a8:fc:eb:b3:de:22:77:ca:e2:2f:31:50:95:45:b9:
44:31:f6:d6:05:6e:ea:85:6c:32:02:be:05:57:7a:e7:0f:41:
f4:b1:c8:b3:9a:1c:ed:ef:f9:18:ef:7d:ea:ab:fe:6d:3f:cb:
7a:e6:f4:d8:a6:df:58:81:57:3c:f7:12:1c:34:71:f3:f0:ef:
07:0d:bc:17:27:4c:82:87:86:6e:5a:6c:65:94:bf:e0:44:cb:
4d:40:98:51:50:f5:ee:36:69:57:ce:18:65:d5:b1:f1:a5:bc:
71:8d:80:44:6a:54:11:46:b9:de:00:58:c5:79:b9:08:2b:23:
83:64:6b:63:4f:35:d6:c3:ed:79:fd:e2:3c:66:c0:93:a3:49:
f4:0e:44:ce:d1:23:4c:7d:ff:86:0d:a6:ed:7f:72:b8:99:40:
92:10:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:11 2024 by rpki-client on console.sobornost.net