Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0-FqTx9xVSP7q07Fc_ZeUwfqat8.roa
File: 0-FqTx9xVSP7q07Fc_ZeUwfqat8.roa (raw, json)
Hash identifier: qTE2rE14PDadg7jPN+irAIGA5PecGOsfTj1Sic6HTDA=
Subject key identifier: D3:E1:6A:4F:1F:71:55:23:FB:AB:4E:C5:73:F6:5E:53:07:EA:6A:DF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AE672F436A9E729E9D0FE69246D55
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0-FqTx9xVSP7q07Fc_ZeUwfqat8.roa
Signing time: Tue 24 Jan 2023 16:09:46 +0000
ROA not before: Tue 24 Jan 2023 16:09:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209460
IP address blocks: 2a0e:b107:19a1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:e6:72:f4:36:a9:e7:29:e9:d0:fe:69:24:6d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3e16a4f1f715523fbab4ec573f65e5307ea6adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:49:18:9f:af:96:95:8b:80:e3:9d:a9:05:
ca:21:dd:46:b8:98:7c:90:d4:45:f6:e2:ce:68:17:
30:70:5b:48:93:34:ec:8a:69:fe:1c:c6:2d:e7:fd:
85:2b:9b:94:55:32:0e:34:31:6e:88:49:87:fe:98:
f6:25:b9:58:e8:fb:0e:ec:e8:4e:28:04:e2:cb:da:
61:69:10:78:33:21:db:cf:47:e9:2d:a5:78:11:d5:
38:c8:63:36:11:b1:8f:d9:0f:07:d8:76:5b:59:b0:
eb:87:94:ec:e9:da:1c:ec:3c:ad:4c:35:79:6c:60:
3b:c1:32:fa:01:f3:0d:e0:68:ef:fe:bd:01:bc:b2:
22:09:83:36:ca:82:60:de:18:b6:65:3c:7e:0e:5d:
df:be:f4:d6:01:d4:eb:7b:c2:51:81:f8:8e:b0:13:
a5:ec:69:6c:fa:60:a8:e1:30:af:e2:34:2e:bd:41:
68:a1:f9:cd:a0:c7:ea:59:d9:c8:42:d4:72:54:93:
75:ee:16:9e:da:09:7b:1b:3e:3a:fa:2d:20:5c:30:
66:36:3a:4a:ed:f7:00:61:8f:02:ea:ac:c2:ec:85:
d7:12:6a:69:db:f0:6c:70:e0:7d:eb:b5:7d:14:9e:
50:2d:33:3f:5a:b8:3a:b5:63:54:0f:05:96:98:90:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:6A:4F:1F:71:55:23:FB:AB:4E:C5:73:F6:5E:53:07:EA:6A:DF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0-FqTx9xVSP7q07Fc_ZeUwfqat8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19a1::/48
Signature Algorithm: sha256WithRSAEncryption
23:4e:9c:e3:d3:dc:60:7c:07:b0:a2:29:c7:2c:f9:2c:d5:24:
57:1f:1e:37:e8:f6:4a:48:89:66:da:c8:88:1d:66:5f:98:14:
ef:f1:f1:23:9a:58:dd:1e:0b:13:ac:b0:d3:a5:0c:7c:5e:9e:
d9:9b:13:90:5e:90:98:6c:e6:be:11:3c:8c:44:39:28:c0:f5:
e9:0b:fe:6a:7e:36:23:2e:2b:58:20:93:31:a0:84:ad:ce:0d:
32:81:1e:b9:58:ec:07:e2:15:e6:dd:32:59:d7:83:27:82:0b:
10:fc:90:e9:04:7c:97:7b:89:01:ad:04:c3:15:f4:fe:3b:4a:
3e:db:7a:c5:4f:9a:cd:fb:ab:8f:f2:3c:f6:91:52:df:2f:e9:
e9:82:6a:63:24:5d:81:0d:9b:0e:a5:a8:ae:bd:23:6b:75:4d:
c4:5d:5a:a6:04:7c:fb:80:e7:a7:b5:f3:ec:12:3c:5a:a7:e3:
4b:d4:a7:cf:20:80:70:08:aa:cb:55:81:b3:f1:54:8a:af:2a:
21:b2:b0:33:c4:e2:3c:5b:78:5e:80:d3:fb:6b:43:e1:e3:b0:
5c:b6:d3:8f:f5:85:97:72:9a:1c:e8:9a:8d:73:bd:ef:6c:8a:
7a:1d:03:6d:43:ed:52:02:3a:ed:68:d3:b9:b2:bf:08:7d:91:
5c:ea:75:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:28 2024 by rpki-client on console-fra.rpki-client.org