Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-8MGsouPLNBXUMX1O3Sjcan19qM.roa
File: 1-8MGsouPLNBXUMX1O3Sjcan19qM.roa (raw, json)
Hash identifier: Q/0IbGFMbNptkNyqkpQdsVmLlg/h3gzo61Nrazw5bsc=
Subject key identifier: FB:C3:06:B2:8B:8F:2C:D0:57:50:C5:F5:3B:74:A3:71:A9:F5:F6:A3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BAC50CC02D72E9002D1B43CB1DF2AD37D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-8MGsouPLNBXUMX1O3Sjcan19qM.roa
Signing time: Wed 08 Nov 2023 00:24:18 +0000
ROA not before: Wed 08 Nov 2023 00:24:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a10:ccc0:111::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a10:ccc0:110::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ac:50:cc:02:d7:2e:90:02:d1:b4:3c:b1:df:2a:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 8 00:24:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbc306b28b8f2cd05750c5f53b74a371a9f5f6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:d6:51:55:92:a4:e1:38:42:b2:da:c2:cd:
07:78:0a:75:2e:74:3b:63:67:d8:24:59:b8:94:e4:
67:c6:91:36:0a:04:30:63:72:74:18:31:c3:e3:71:
1b:bb:d1:be:f8:3d:9e:5a:e8:71:40:ea:7d:6d:5b:
af:b8:51:b8:dd:79:4f:c4:e4:1e:a6:ab:b4:72:35:
f7:b4:87:54:5b:13:20:c1:31:2c:15:94:72:51:ad:
25:8c:b4:98:f2:73:e3:d1:88:6c:ab:cb:f0:0b:60:
09:76:f2:ae:4d:5e:a3:71:6f:54:f4:e8:20:bc:60:
70:c7:a4:d2:ac:a2:79:81:bf:a3:a5:09:dc:84:a5:
78:85:8e:03:53:67:39:1b:52:31:1a:b4:b6:be:a1:
22:ec:33:fc:cf:32:53:55:98:8d:8b:8e:6f:88:60:
94:64:3a:e5:b0:f9:c5:c7:e5:88:be:76:09:36:c0:
c6:4d:94:2e:fd:47:1c:1a:2d:bd:12:e3:d4:61:78:
8a:4f:9f:ef:79:c4:3f:1a:4e:2e:0a:68:43:c8:5c:
4f:71:11:45:84:e5:10:83:a4:46:0b:94:f1:9c:ce:
18:33:d9:4a:27:a9:f5:39:5f:9b:f1:b4:5b:15:34:
2e:b9:61:47:f2:80:9d:5d:c3:c8:af:34:15:94:58:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:06:B2:8B:8F:2C:D0:57:50:C5:F5:3B:74:A3:71:A9:F5:F6:A3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-8MGsouPLNBXUMX1O3Sjcan19qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc0:110::/47
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
78:10:79:f0:f5:0d:03:5c:d8:b8:9b:fc:ea:42:c8:45:29:29:
33:59:8a:7b:31:8b:2e:01:95:8b:de:c6:6a:98:27:ef:6c:42:
f0:97:c0:29:71:67:d3:c7:e3:3b:3b:54:9e:93:4d:0e:80:f5:
f4:8d:94:64:9b:66:eb:19:d4:b1:e8:2f:31:ac:a7:22:6e:1d:
12:f2:31:28:87:02:62:b1:b1:f1:c7:01:26:85:cc:79:12:a3:
51:15:a0:ee:29:45:14:5b:f1:5d:ee:0b:40:19:f5:3c:da:5b:
db:1c:24:3b:14:d6:e6:be:04:1e:e9:c1:e1:3d:99:43:a7:ca:
62:64:c9:82:c5:62:78:15:3d:44:f9:91:a0:0f:bf:df:60:8c:
a4:00:0a:81:56:0f:4b:e4:7f:87:ed:ee:f1:c2:15:cf:af:9e:
44:fa:e7:9d:c8:22:bb:c0:53:01:d8:e2:25:c6:fb:f2:3a:a9:
88:07:0a:8e:37:5d:fb:dc:eb:ee:e3:6e:be:7b:a6:34:91:b4:
52:2d:2f:72:fa:22:c1:38:50:06:76:19:44:74:c8:c1:c6:16:
c3:88:0c:1d:0d:d1:08:64:bd:3f:56:72:37:75:54:42:b4:a2:
79:40:87:6a:d3:46:87:a1:4f:45:49:87:3c:86:7b:77:5c:9f:
4a:f7:3e:b9
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 8 01:33:00 2023 by rpki-client on console-fra.rpki-client.org