Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/w2VO0-1htfH2aNi2O4d_VhnHfp4.roa
File: w2VO0-1htfH2aNi2O4d_VhnHfp4.roa (raw, json)
Hash identifier: XXMOu+fGrPxIFzH0BQohxn+PEUTYcsEnuzns+I7nG3c=
Subject key identifier: C3:65:4E:D3:ED:61:B5:F1:F6:68:D8:B6:3B:87:7F:56:19:C7:7E:9E
Certificate issuer: /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial: 01857355EC08765D982791018F49C0D85D80
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/w2VO0-1htfH2aNi2O4d_VhnHfp4.roa
Signing time: Mon 02 Jan 2023 16:34:48 +0000
ROA not before: Mon 02 Jan 2023 16:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47610
IP address blocks: 2001:67c:a20::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:ec:08:76:5d:98:27:91:01:8f:49:c0:d8:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Validity
Not Before: Jan 2 16:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3654ed3ed61b5f1f668d8b63b877f5619c77e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:c4:88:84:50:c3:66:24:24:31:2d:db:f9:
2b:b1:eb:e2:d6:53:8e:a8:54:6c:4b:5b:77:33:a6:
3d:22:81:d6:13:94:94:28:ba:71:03:7a:56:7f:b1:
28:4c:f4:b6:af:c0:e9:62:10:da:f7:25:6f:d6:e1:
e2:6c:4f:77:57:97:5f:4f:1c:28:9d:0b:fd:e9:36:
54:ef:5b:68:be:a9:21:ab:e6:21:2d:53:f3:ce:5c:
db:79:68:c3:59:ae:cf:18:2c:d4:a7:ee:a2:8d:9a:
09:dc:58:d8:d3:a9:8e:8e:73:1c:c6:f3:81:e8:68:
f6:87:b8:15:5c:2b:47:aa:80:78:75:c9:23:57:46:
4a:59:83:20:a8:ed:4f:22:7e:de:c1:5d:76:ec:cf:
8e:03:57:a2:5c:97:c6:53:53:fe:30:ec:80:72:d9:
a6:39:01:0c:a4:29:63:a6:2f:66:11:e6:19:4b:03:
1c:61:7b:30:5e:c5:f6:cc:dc:55:56:a5:bd:b5:e7:
bb:6f:0b:1e:73:e5:19:de:83:c4:c9:57:a1:fa:97:
8f:a0:0e:6c:19:9c:19:0b:8c:0d:33:22:50:eb:e7:
1d:5d:fb:3d:7f:25:3c:91:ed:de:84:27:81:fb:65:
a5:b5:dc:28:52:38:f7:f1:16:4e:af:81:cd:30:a9:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:65:4E:D3:ED:61:B5:F1:F6:68:D8:B6:3B:87:7F:56:19:C7:7E:9E
X509v3 Authority Key Identifier:
keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/w2VO0-1htfH2aNi2O4d_VhnHfp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a20::/48
Signature Algorithm: sha256WithRSAEncryption
ae:6d:2e:0b:08:c5:3a:ef:86:8c:09:c1:3c:b6:08:ab:c2:b8:
38:9a:ec:05:99:17:be:e2:81:59:74:26:d4:5d:dc:e7:a8:3f:
35:a7:37:a7:45:f5:f3:d9:f4:16:fa:97:b1:fa:cd:92:3a:65:
0a:99:f7:8a:36:d4:56:31:2c:ab:f8:ca:d2:4d:01:81:7f:4a:
3e:e8:5f:02:41:4d:b8:b9:ea:07:77:2b:11:cd:e0:1f:94:0c:
75:92:b7:4f:02:ab:7f:94:07:38:a2:d4:ba:98:92:ce:11:dd:
e5:44:e1:7e:e0:e3:19:25:1a:0c:c8:fe:e9:b7:d4:ff:ac:ac:
77:59:67:03:02:73:e2:9c:dc:b8:e5:4a:f7:d5:1f:a1:88:26:
c7:89:de:2c:d0:4f:f6:b2:23:1d:c8:44:c2:62:41:4f:6a:93:
36:6e:5c:be:6b:de:1c:9e:98:22:08:ed:6a:85:68:2c:ce:03:
64:cd:47:8e:86:15:d2:1e:91:cf:8a:a2:0d:d1:e3:87:00:b1:
c4:28:7a:82:ce:f5:d4:2d:4f:48:2c:a9:0f:51:5c:86:4b:84:
61:33:11:49:79:46:07:c7:71:fc:6b:fe:6d:c1:7f:7d:b6:c5:
5b:76:ea:db:ce:2e:79:4a:90:15:be:1c:34:38:3b:8a:33:ba:
78:2c:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:14:57 2024 by rpki-client on console.sobornost.net