Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/2tO53hWwa50ZDfim1ohvxhJlPLQ.roa
File: 2tO53hWwa50ZDfim1ohvxhJlPLQ.roa (raw, json)
Hash identifier: R8qZYyrWfWZqrZYIDPIjonZCxfsNCUBu7y8caHofxW0=
Subject key identifier: DA:D3:B9:DE:15:B0:6B:9D:19:0D:F8:A6:D6:88:6F:C6:12:65:3C:B4
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 01891C4EC210426D2146846F3F965E4E977C
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/2tO53hWwa50ZDfim1ohvxhJlPLQ.roa
Signing time: Mon 03 Jul 2023 15:11:10 +0000
ROA not before: Mon 03 Jul 2023 15:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212722
IP address blocks: 2a10:500::/32 maxlen: 32
2a10:500:800::/40 maxlen: 48
2a10:500:200::/40 maxlen: 48
2a10:500:600::/40 maxlen: 48
2a10:500:900::/40 maxlen: 48
2a10:500:400::/40 maxlen: 48
2a10:500::/40 maxlen: 48
2a10:500:100::/40 maxlen: 48
2a10:500:300::/40 maxlen: 48
2a10:500:700::/40 maxlen: 48
2a10:500:500::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:4e:c2:10:42:6d:21:46:84:6f:3f:96:5e:4e:97:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Jul 3 15:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dad3b9de15b06b9d190df8a6d6886fc612653cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:c7:e6:05:0a:89:14:9a:9e:81:89:db:e7:
2a:c6:5d:61:0b:d2:e8:09:7d:54:d5:49:49:63:c8:
e8:ad:91:24:b0:71:09:e8:b6:68:63:98:d7:56:c4:
3c:f9:8b:00:a5:c7:1d:5c:ab:47:5c:61:8e:2d:3f:
43:9e:ac:eb:ad:2f:de:31:ae:b5:ce:cc:2c:e5:17:
30:3e:38:25:14:79:70:bd:40:75:8e:dc:03:13:95:
a3:78:83:2a:a2:d0:db:bf:2b:44:49:bb:d4:90:50:
9c:a6:b3:51:1e:eb:d0:53:88:82:ba:c8:20:dd:b9:
18:b6:7a:30:9d:2d:8e:5b:1d:b3:6b:7b:cd:db:78:
ad:27:0a:31:4d:02:03:c1:8f:9a:81:68:25:fa:56:
91:56:5c:68:a7:7f:38:a0:d6:71:2d:01:a7:63:44:
af:6e:c7:ce:d0:52:5f:6f:d2:d1:c2:1d:0e:dc:45:
30:61:04:24:51:2b:37:18:69:a1:90:e9:8f:64:1f:
3b:38:3f:c7:64:3b:c2:d2:08:62:8b:76:9c:9f:7f:
9b:61:e9:e7:5d:f3:90:e0:7e:c9:89:d2:50:13:26:
2d:c4:bd:90:1b:51:64:ad:83:93:25:20:6f:db:d6:
bb:c1:f2:00:3d:c1:cc:fe:db:19:54:9b:05:d4:22:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D3:B9:DE:15:B0:6B:9D:19:0D:F8:A6:D6:88:6F:C6:12:65:3C:B4
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/2tO53hWwa50ZDfim1ohvxhJlPLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:500::/32
Signature Algorithm: sha256WithRSAEncryption
34:33:f7:d4:95:42:12:7c:f1:7b:de:a5:94:09:ae:32:7b:5b:
b7:95:ae:1f:6f:27:64:4d:16:85:33:2f:3b:b6:5b:b0:cd:90:
d1:bb:3e:c9:d4:06:c0:bc:32:34:b9:12:c0:44:f3:33:c0:0c:
b0:53:a0:80:33:01:46:0b:99:30:6a:3b:8f:3a:6a:b2:5e:25:
a1:e9:ad:6e:0e:08:41:32:72:3d:e6:18:29:53:87:f7:37:70:
d6:32:4f:e6:60:2a:70:e9:df:7c:37:02:9f:67:0d:93:b7:f3:
ea:75:c1:57:58:0b:90:ee:34:e2:fe:f3:cd:ad:ce:e8:1d:a2:
e3:58:e4:4e:df:b5:6e:55:a2:d2:17:a2:50:74:84:1a:dc:1e:
84:72:0d:05:56:0a:61:77:31:a9:8a:89:e4:5a:84:28:6a:db:
f8:70:44:47:82:e1:e4:5d:0e:a9:31:a0:b7:f4:8c:70:2e:c6:
d5:b7:7d:27:e8:8d:76:74:fa:8b:11:28:30:c9:cd:d9:bf:e4:
6c:2f:0c:fc:b0:84:e7:d6:89:49:9c:75:4b:ec:30:94:ad:f1:
22:62:b5:bb:bc:38:b7:73:4a:08:50:55:86:f3:17:78:d8:4b:
c0:55:4f:2a:a5:69:b1:79:5e:90:8f:b0:fd:2b:89:36:0f:d7:
cd:66:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net