Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/JuPtKaOpZvwWaPP5WQ2RfMb5ItM.roa
File: JuPtKaOpZvwWaPP5WQ2RfMb5ItM.roa (raw, json)
Hash identifier: m1Vdw6A0PWruh62SxVhMBjmI1VwkTMmxqXHvsgTxw7I=
Subject key identifier: 26:E3:ED:29:A3:A9:66:FC:16:68:F3:F9:59:0D:91:7C:C6:F9:22:D3
Certificate issuer: /CN=c754c6069e49d24931379a4c92456385922b46ce
Certificate serial: 01867A8B5570A426B981618A4C5B90B55DDD
Authority key identifier: C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/JuPtKaOpZvwWaPP5WQ2RfMb5ItM.roa
Signing time: Wed 22 Feb 2023 19:13:17 +0000
ROA not before: Wed 22 Feb 2023 19:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51847
IP address blocks: 2a0f:4a80:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:8b:55:70:a4:26:b9:81:61:8a:4c:5b:90:b5:5d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c754c6069e49d24931379a4c92456385922b46ce
Validity
Not Before: Feb 22 19:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26e3ed29a3a966fc1668f3f9590d917cc6f922d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:71:43:40:79:5e:b3:b9:26:3c:89:da:16:
b3:48:f4:9d:0b:28:2a:5a:1d:18:ed:69:79:b7:eb:
6d:28:f8:5c:8a:81:f5:67:d5:c8:2e:21:74:fe:f7:
8d:1d:d3:e5:dc:52:27:19:e6:56:42:c3:dc:97:5d:
ea:76:05:9b:32:e7:31:7c:f2:46:b2:7d:53:dd:68:
b0:96:a2:38:93:a6:77:33:ac:26:62:67:ae:0e:38:
63:08:8e:36:3f:c7:ec:4e:6d:ff:02:aa:03:b2:94:
cb:94:0e:3c:ae:7c:32:33:6e:8c:2f:03:8a:f1:ed:
72:19:42:4d:02:3c:04:53:2e:e6:99:df:be:2c:d7:
78:bd:32:15:8f:f4:6e:ea:a1:4a:00:8c:b3:bc:6f:
f4:62:b0:f3:c8:52:bc:b6:f1:23:a4:61:97:db:22:
45:62:7e:1a:7b:65:47:24:53:8b:08:5a:58:92:55:
ac:c8:95:ea:3a:0a:e6:97:98:9e:92:42:8a:27:58:
1c:ed:7d:29:67:f2:10:3f:13:c9:b3:18:ae:0a:44:
7a:2e:35:cd:a5:28:4a:2a:5d:ff:34:61:40:91:78:
d3:85:48:b5:6c:d1:c4:db:05:26:3e:f7:97:13:25:
43:b4:1b:f0:28:da:2b:09:b1:7f:f1:51:16:db:1d:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E3:ED:29:A3:A9:66:FC:16:68:F3:F9:59:0D:91:7C:C6:F9:22:D3
X509v3 Authority Key Identifier:
keyid:C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/JuPtKaOpZvwWaPP5WQ2RfMb5ItM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/x1TGBp5J0kkxN5pMkkVjhZIrRs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4a80:1::/48
Signature Algorithm: sha256WithRSAEncryption
28:86:7b:7b:fe:be:29:25:9a:00:71:e2:bc:22:1f:71:84:99:
03:9e:46:02:1a:c9:44:ea:c9:7f:71:fd:61:86:b0:9f:4a:0c:
81:00:1e:24:7e:09:2d:8b:96:d1:7d:3a:f7:9d:52:e9:23:ad:
a9:78:33:59:2e:6b:d6:e6:3b:f3:6e:3a:0f:dd:8d:54:93:50:
9e:3a:77:98:ef:1f:67:62:82:27:b7:f0:2f:a6:c2:db:b7:33:
75:9a:5d:43:0e:f7:8d:5b:eb:ee:48:85:8b:78:70:65:5d:40:
98:0b:ad:26:df:1d:83:64:15:4f:ca:e9:0f:6d:64:8f:09:73:
10:ef:c1:c6:f1:8e:b5:88:44:92:d9:1f:61:d5:3d:1c:58:9a:
87:7f:d2:5f:3c:db:6e:8a:31:80:a8:23:94:2b:f8:34:b9:97:
93:5c:a9:ac:fd:2d:bc:36:4a:e4:09:94:c3:2e:d7:b3:a9:8f:
83:39:ea:1c:9e:ba:2e:73:a4:0f:bd:ac:fb:9d:73:fd:e2:54:
ff:f6:4b:68:a1:e0:7f:5e:fe:51:c5:2f:35:7b:1a:c9:ac:9b:
5a:96:10:78:e9:98:f0:3e:70:3c:1d:a4:21:cd:61:be:0e:61:
ee:a7:bd:9d:82:b1:4b:f8:a2:96:37:9b:31:11:e4:71:e8:59:
93:a2:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:21 2024 by rpki-client on console.sobornost.net