Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/X4x4BuBgEEDQ78Q6Z-wI-pbbjdk.roa
File: X4x4BuBgEEDQ78Q6Z-wI-pbbjdk.roa (raw, json)
Hash identifier: F9b5fdJJKDUdeLTVYautOmtTOBxzUk5jx9dL55H5zOA=
Subject key identifier: 5F:8C:78:06:E0:60:10:40:D0:EF:C4:3A:67:EC:08:FA:96:DB:8D:D9
Certificate issuer: /CN=c754c6069e49d24931379a4c92456385922b46ce
Certificate serial: 018AD22F426251B540EC96365FE7075E6D95
Authority key identifier: C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/X4x4BuBgEEDQ78Q6Z-wI-pbbjdk.roa
Signing time: Tue 26 Sep 2023 15:50:27 +0000
ROA not before: Tue 26 Sep 2023 15:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202673
IP address blocks: 2a0f:4a80:6::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:2f:42:62:51:b5:40:ec:96:36:5f:e7:07:5e:6d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c754c6069e49d24931379a4c92456385922b46ce
Validity
Not Before: Sep 26 15:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f8c7806e0601040d0efc43a67ec08fa96db8dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:db:23:5a:8b:dc:aa:b5:f8:ab:8e:4b:0c:
00:69:e3:40:5e:99:6d:ba:7f:59:14:cd:04:08:e1:
5f:04:e7:b8:68:13:fb:b7:be:6a:63:18:b8:2c:a0:
09:c9:18:ab:6f:4a:ee:20:58:a9:d9:4c:9b:35:2b:
5a:00:ad:ab:06:f3:78:f9:7a:95:f9:e2:fc:f8:2b:
47:37:33:a6:66:a2:01:b4:e1:33:8f:55:92:a8:c8:
5c:1c:f7:06:f0:15:24:5c:5c:c9:d6:c2:11:08:33:
95:b9:98:f4:2f:2d:56:0a:ce:bb:d4:10:3a:17:38:
0d:15:62:78:e2:78:4f:d4:43:a1:ee:9a:3f:0d:f8:
14:e5:24:1b:b7:34:47:9f:98:07:75:ed:34:8a:10:
a6:45:bc:35:24:89:16:05:ff:3e:8d:18:55:dc:f2:
5a:67:84:bb:83:5a:38:4f:cb:75:5d:01:36:d7:26:
0f:f5:f2:3c:bd:fd:ce:68:35:f1:95:1d:46:f4:7a:
ff:80:64:a8:cd:72:c9:fc:4a:cb:17:dd:b0:02:0a:
3d:2d:20:a1:a6:7f:13:71:df:8c:23:b4:b3:c0:a0:
39:f7:a1:76:22:32:34:02:df:6c:56:d3:51:d1:84:
ec:8c:72:bb:a7:7d:84:2d:e3:22:45:e3:9d:04:5a:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8C:78:06:E0:60:10:40:D0:EF:C4:3A:67:EC:08:FA:96:DB:8D:D9
X509v3 Authority Key Identifier:
keyid:C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/X4x4BuBgEEDQ78Q6Z-wI-pbbjdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/x1TGBp5J0kkxN5pMkkVjhZIrRs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4a80:6::/48
Signature Algorithm: sha256WithRSAEncryption
13:dd:90:d8:fc:db:24:80:67:c7:15:54:fb:50:9e:2c:9f:af:
5f:09:14:89:1a:5a:e3:59:42:2f:7d:62:a6:94:f4:01:35:f1:
ea:80:09:a0:e0:0c:9d:9f:c5:6e:1d:48:6f:94:36:23:97:c4:
98:56:ff:d9:53:e8:1e:2b:bf:08:8a:df:a8:59:b1:e2:bb:07:
05:c1:38:0e:ad:6b:19:bf:1d:92:2b:22:34:d4:e4:58:9f:6b:
13:97:f3:d7:29:fc:ee:38:d3:a9:19:49:f2:a3:31:13:ec:54:
d9:a8:49:2e:8f:74:32:c8:b2:32:cf:86:e4:92:7f:93:61:2c:
52:de:46:e3:fb:bd:40:d1:f2:1d:81:1f:a3:1a:36:bb:7f:3d:
c4:f3:2b:e3:ce:e8:6b:68:26:5a:d5:2b:41:32:75:f0:58:66:
cd:42:a1:a9:69:c7:01:b2:c2:b4:74:d3:87:6b:ed:26:a3:b0:
bb:3a:2f:3b:42:4f:91:c9:a9:2d:6f:9d:18:2e:82:ff:99:c9:
b6:3b:b0:b7:49:b1:d2:18:07:05:f0:7c:89:2d:b5:5d:54:18:
02:02:cc:7b:0b:e0:f6:77:30:4c:4a:1b:33:7b:69:6f:50:f0:
61:6f:61:bf:cf:ef:83:c8:32:7a:2a:c0:ac:e4:67:ab:f6:0d:
76:d0:6c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:21 2024 by rpki-client on console.sobornost.net