Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/ozWATrEDZNT5en9TJWVpQcfqA4E.roa
File: ozWATrEDZNT5en9TJWVpQcfqA4E.roa (raw, json)
Hash identifier: gI/EMEDUZknJFuLcvknbHqT2lrlkasOmYLWlmV05bXo=
Subject key identifier: A3:35:80:4E:B1:03:64:D4:F9:7A:7F:53:25:65:69:41:C7:EA:03:81
Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial: 01856ED4CF1334E29BCD59D5196EC1C144D0
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/ozWATrEDZNT5en9TJWVpQcfqA4E.roa
Signing time: Sun 01 Jan 2023 19:35:18 +0000
ROA not before: Sun 01 Jan 2023 19:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204378
IP address blocks: 2a0c:3800:300::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cf:13:34:e2:9b:cd:59:d5:19:6e:c1:c1:44:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Validity
Not Before: Jan 1 19:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a335804eb10364d4f97a7f5325656941c7ea0381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:84:ba:30:dd:80:b5:f5:75:72:11:e6:8b:
54:fe:d4:d2:08:54:81:37:43:52:96:cc:96:e4:e6:
db:4f:1d:8f:b8:79:8c:6a:fe:1e:55:56:94:2f:16:
e2:cf:37:72:30:12:ac:2f:d8:b5:99:9e:6f:da:99:
59:53:0d:b7:ed:f1:95:1f:3c:f0:bf:f2:1b:64:f6:
f6:cd:0d:8d:37:e7:5b:2c:5d:d7:35:b3:15:51:37:
51:21:d3:ad:a4:ef:8b:8d:3e:47:09:ec:5f:31:81:
67:a7:d4:e7:3a:d9:96:5e:42:26:06:b3:e5:99:38:
cd:7a:38:1c:f4:b0:29:19:93:eb:ae:a5:5c:ef:8d:
d3:c3:9b:29:b5:6a:81:98:db:d8:83:51:f4:bb:bd:
4e:c2:60:b9:bc:0f:e7:78:87:20:bf:db:32:00:51:
a3:76:3f:ec:77:62:36:dd:7d:6a:02:73:85:e6:41:
ca:b0:89:c7:f6:bc:0e:2a:cc:d5:6e:81:b0:72:60:
98:4c:08:a4:26:9e:9e:2c:54:c2:98:47:99:5c:3a:
3c:21:4e:c5:89:bb:c8:d2:9a:57:e1:5f:5e:57:d6:
75:e8:00:3c:c6:82:58:ad:f0:9e:8f:53:22:20:eb:
08:6e:d9:86:bd:c6:bc:fd:e9:84:65:fb:94:1b:71:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:35:80:4E:B1:03:64:D4:F9:7A:7F:53:25:65:69:41:C7:EA:03:81
X509v3 Authority Key Identifier:
keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/ozWATrEDZNT5en9TJWVpQcfqA4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3800:300::/48
Signature Algorithm: sha256WithRSAEncryption
64:a8:ee:0b:ba:60:da:9c:45:04:52:b2:25:8d:4f:fe:af:83:
89:28:77:de:ad:c2:65:8f:e6:6a:0c:e9:bf:41:34:cb:b7:c2:
76:0a:3e:90:eb:d0:ba:f6:24:a7:35:53:28:62:81:53:49:ea:
71:ad:50:4b:a1:a8:45:38:ec:de:f3:19:d9:c7:43:15:9e:e1:
40:29:58:4f:01:f3:49:1d:ee:1b:ca:61:58:bd:57:7e:c1:27:
00:e3:f1:7c:9a:d6:c4:38:76:e9:54:85:43:e1:e8:40:ca:b9:
85:64:28:13:0f:bf:a1:e6:0f:d4:79:9e:63:eb:78:21:1a:14:
b0:20:1b:a8:7b:1d:f8:33:dd:1f:fb:ac:d8:11:fc:5c:7e:17:
cb:74:4d:54:ab:24:85:28:3a:7f:6f:41:2a:62:96:8c:2f:55:
83:e9:05:67:d1:49:6a:30:15:f6:9e:05:bc:00:c7:9c:89:24:
5d:91:0c:1f:5e:a5:a2:2c:58:0a:92:b0:ae:a6:2e:f9:fa:5f:
a0:06:f1:06:b0:2f:0b:78:9d:06:4f:58:e6:c7:59:9e:85:fd:
c4:a7:77:c8:66:32:ca:f8:d8:69:91:f2:79:be:fe:cd:92:74:
c8:aa:59:fa:4a:1c:43:7d:bc:e6:17:2b:e4:91:c3:ee:f0:fb:
1e:b7:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:11 2024 by rpki-client on console.sobornost.net