Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0B9m4V29CSDcY8hbMVIgEZeIzoA.roa
File: 0B9m4V29CSDcY8hbMVIgEZeIzoA.roa (raw, json)
Hash identifier: xel+f00d71eXU/fhr9usm0W97VbRucZvyuewJM9n7Ww=
Subject key identifier: D0:1F:66:E1:5D:BD:09:20:DC:63:C8:5B:31:52:20:11:97:88:CE:80
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E776DDE6AF069C37CF1A3F5AAE4839
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0B9m4V29CSDcY8hbMVIgEZeIzoA.roa
Signing time: Mon 02 Jan 2023 05:14:55 +0000
ROA not before: Mon 02 Jan 2023 05:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 2a0e:97c0:3e1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:76:dd:e6:af:06:9c:37:cf:1a:3f:5a:ae:48:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d01f66e15dbd0920dc63c85b315220119788ce80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:6b:26:22:1c:61:b7:8c:80:64:24:90:e5:
a6:6f:2b:37:f5:18:7b:b5:96:09:ef:6d:a4:47:95:
3f:c2:4a:e5:5a:1d:7b:c8:b1:f3:66:1f:e8:f6:2e:
01:01:96:96:d5:2a:56:b2:d8:3c:f6:38:3c:0c:3e:
1e:e7:4b:79:b4:ed:a5:d9:c8:13:79:ed:55:d1:9b:
95:6a:3f:af:c6:37:1a:3a:bc:76:71:61:87:3d:51:
ac:ae:42:52:c9:59:a6:38:08:21:90:b7:2f:34:0e:
6a:dc:5c:a0:c6:10:d8:46:ae:a0:f0:73:ba:f0:e3:
4f:19:6b:a4:33:18:27:b6:ff:f0:c4:a9:38:dd:82:
26:62:ca:98:6d:bb:69:cf:83:08:b9:ba:d3:01:b0:
7c:86:00:0f:0b:78:84:47:8e:a1:34:d9:08:62:21:
45:1a:69:3e:3c:5e:0e:6d:77:77:4f:c5:0f:3f:2a:
cc:75:e1:7e:aa:1a:63:a4:4e:d1:77:45:e0:d7:9f:
f0:9b:b6:34:f4:bf:67:07:53:07:1f:df:d9:50:0e:
89:d4:7d:d5:49:3a:40:74:83:b9:10:35:a1:47:6d:
a5:02:97:a2:05:ee:32:ea:b7:10:04:2b:89:13:87:
c7:ce:5e:b8:74:34:4d:a8:9b:73:7d:c7:b8:dd:ea:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1F:66:E1:5D:BD:09:20:DC:63:C8:5B:31:52:20:11:97:88:CE:80
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0B9m4V29CSDcY8hbMVIgEZeIzoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3e1::/48
Signature Algorithm: sha256WithRSAEncryption
bc:f2:fa:58:1b:bb:85:ab:15:79:d1:4a:6c:3b:34:e1:1a:c1:
b6:23:dc:16:d6:03:07:f2:36:34:81:67:ad:ec:1c:ef:da:a2:
6d:ef:b6:05:95:53:39:11:b5:94:9d:fe:22:dd:06:74:fa:63:
83:20:5b:b9:57:3d:72:a7:fa:81:59:7a:d0:94:2f:24:6f:be:
26:80:9e:de:cf:c4:8d:b2:31:d2:6b:95:53:aa:fa:83:d0:f9:
b1:cc:a6:09:ad:5b:22:8d:41:e7:c4:dd:85:70:85:1d:b7:78:
f6:80:05:ff:83:0e:fa:20:e2:14:49:6d:92:bf:c2:4e:9f:83:
08:70:b5:bd:74:3a:74:f1:59:e5:3a:50:a2:b6:5b:7f:07:45:
39:ad:e1:05:46:e7:3b:5d:05:a5:c6:b5:23:46:4d:18:ff:b0:
33:eb:f1:77:30:ac:ce:d2:3c:44:cd:57:86:d6:53:3f:57:54:
62:a1:1c:b5:91:0f:79:08:ac:27:14:30:a4:35:ab:4e:9a:70:
fa:8e:b1:9e:7a:4b:4e:8e:d3:97:8f:85:0f:84:51:61:a3:2b:
3d:41:7b:52:10:91:e8:15:59:82:fc:bf:dd:31:f2:1c:c6:35:
13:77:e0:c8:ce:a2:aa:07:5a:61:90:92:e4:26:b6:09:c9:27:
22:be:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:28 2024 by rpki-client on console-fra.rpki-client.org