Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-qokTDIccb4pmA0XnUZusUl_MHI.roa
File: 1-qokTDIccb4pmA0XnUZusUl_MHI.roa (raw, json)
Hash identifier: h9QLH7E/l4UD6KPRzrY+nipffMTpgnI1G5C7YvzmnMY=
Subject key identifier: FA:AA:24:4C:32:1C:71:BE:29:98:0D:17:9D:46:6E:B1:49:7F:30:72
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7A74E4C6BD32DD32CD322CE1A23CA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-qokTDIccb4pmA0XnUZusUl_MHI.roa
Signing time: Mon 02 Jan 2023 05:15:07 +0000
ROA not before: Mon 02 Jan 2023 05:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202224
IP address blocks: 2a10:2f00:18b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:a7:4e:4c:6b:d3:2d:d3:2c:d3:22:ce:1a:23:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faaa244c321c71be29980d179d466eb1497f3072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:10:82:e8:bd:02:ed:2c:8f:70:0c:38:e8:
76:78:42:7e:c0:62:b5:f8:fe:74:7b:18:95:8f:99:
20:08:e8:a8:0f:da:4e:8d:28:48:9a:ae:2d:a6:72:
16:b2:3c:f2:99:a6:5b:31:3f:1a:16:63:89:fe:98:
68:fc:24:ee:ec:8a:6b:27:83:2c:a6:60:b4:06:0c:
d1:2b:45:a6:4c:91:c9:83:67:89:33:28:e7:f9:8e:
af:94:de:74:42:08:28:0b:34:38:83:20:9d:88:95:
42:db:97:10:9a:0c:c0:cd:8b:36:11:cc:61:08:ca:
69:20:3d:9d:5c:88:7c:04:6c:96:97:a0:44:b2:d2:
47:b2:84:79:5a:5b:42:51:00:a4:ed:82:fc:12:25:
8a:9e:a2:9b:78:0d:41:24:ba:64:f7:39:d9:3a:ae:
63:45:4b:3b:d0:89:f9:a6:18:f9:a8:6b:a8:8a:d1:
68:13:c3:b6:39:1d:ba:ec:77:c1:39:94:91:be:5a:
ba:29:23:af:34:a9:72:fa:8e:d0:e7:1a:d7:12:e9:
15:79:fa:a6:e1:ba:87:89:7a:2c:b7:bc:81:dc:1f:
38:38:cd:59:45:d0:23:df:5d:22:60:36:be:ec:4d:
de:e4:5a:cd:d4:38:e6:44:be:19:df:05:29:1d:a9:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AA:24:4C:32:1C:71:BE:29:98:0D:17:9D:46:6E:B1:49:7F:30:72
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-qokTDIccb4pmA0XnUZusUl_MHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:18b::/48
Signature Algorithm: sha256WithRSAEncryption
96:e6:8b:50:23:ce:14:07:14:42:b5:ca:ff:95:b9:c8:b9:cf:
fa:81:69:2e:bb:ba:ed:93:b9:4d:1f:55:a9:45:3f:85:22:35:
a8:6f:cb:3e:0c:b5:47:83:16:47:5b:fc:0b:28:be:73:8b:4e:
34:c1:68:54:16:4c:de:25:ee:9e:01:8c:a3:29:9d:bd:83:77:
b8:17:db:8e:84:af:ec:63:2a:77:80:d8:6f:7e:e9:5f:c9:bf:
ec:d8:59:e4:c9:c3:7c:03:e7:8a:c0:31:99:1b:d4:31:67:7b:
30:42:97:a7:5d:15:af:0b:d9:f1:1f:4f:fe:ea:16:c2:9d:e2:
29:89:22:c3:03:7a:48:9d:e4:69:49:93:ac:ec:5e:e0:92:98:
81:48:3e:73:2e:46:03:ac:b3:0f:6a:df:36:a3:44:af:f5:8c:
b5:0e:33:45:bd:2c:9d:45:69:41:47:b3:22:37:26:b9:17:f1:
89:d5:99:6a:bb:e5:0f:c8:a9:c3:83:0d:f6:b4:a0:4b:63:0d:
6c:04:ee:9a:a7:9a:c2:80:ce:3b:e7:4c:a6:9f:75:c0:ad:c1:
b9:02:d6:00:2b:1c:bd:a3:5a:c4:5f:8d:ce:ab:f1:0a:ab:c6:
50:5b:29:fb:1c:be:44:70:f7:dd:82:b0:84:ec:68:fa:1e:c2:
67:13:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:48 2024 by rpki-client on console-ams.rpki-client.org