Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-zZUvIMYrKP3YV0Z87ypWWEMR9o.roa
File: 1-zZUvIMYrKP3YV0Z87ypWWEMR9o.roa (raw, json)
Hash identifier: h1Y5NhYYUAkwupLB5osxQHOJwRh7q7lbZWEqMjsJqWY=
Subject key identifier: FB:36:54:BC:83:18:AC:A3:F7:61:5D:19:F3:BC:A9:59:61:0C:47:DA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189CD9AC178F6F67CC546C938F9F9302E68
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-zZUvIMYrKP3YV0Z87ypWWEMR9o.roa
Signing time: Mon 07 Aug 2023 01:26:58 +0000
ROA not before: Mon 07 Aug 2023 01:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197469
IP address blocks: 2a0e:97c0:b50::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cd:9a:c1:78:f6:f6:7c:c5:46:c9:38:f9:f9:30:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 7 01:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb3654bc8318aca3f7615d19f3bca959610c47da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:4e:b5:30:b9:5a:df:41:06:89:47:a4:8e:
72:86:d4:86:50:72:bf:cf:dc:d3:36:01:58:6b:ef:
7d:80:b0:13:b4:5c:a9:c5:4f:68:2e:34:12:33:52:
fb:d1:90:29:22:95:b4:ed:e8:86:c7:d9:5f:22:8d:
7e:1f:b9:74:d5:01:14:05:c4:4d:49:d1:5d:22:55:
f0:38:1f:03:a2:fc:e2:15:99:ab:ea:bb:53:29:27:
cf:c7:4d:84:66:8d:2c:aa:24:9e:a5:ae:8e:10:fb:
be:85:6b:91:24:0e:c9:cc:23:35:9b:4c:b3:5b:40:
cc:63:bb:58:8b:ec:c5:15:bf:93:81:ef:a4:32:fa:
27:75:a5:d1:1a:40:70:3e:24:19:3e:ae:79:a1:1c:
57:7c:ae:d3:a6:e5:56:2c:b7:0b:e0:1a:b1:ff:d5:
e9:bd:e8:9b:dc:ab:a6:d3:71:0a:f7:6c:aa:5d:e9:
55:6b:ca:3f:98:20:3a:85:df:b5:45:65:dd:89:5b:
67:64:9d:30:7a:3d:ee:c6:85:61:2e:50:e6:ef:44:
ec:95:e9:4b:76:19:2c:32:a3:eb:e0:2d:a6:c5:e5:
ec:85:6d:f8:c8:20:65:79:ec:22:85:a5:6a:2b:bf:
8e:9d:0f:2f:6d:90:07:62:c9:54:7a:6c:af:d2:a2:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:36:54:BC:83:18:AC:A3:F7:61:5D:19:F3:BC:A9:59:61:0C:47:DA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-zZUvIMYrKP3YV0Z87ypWWEMR9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b50::/44
Signature Algorithm: sha256WithRSAEncryption
92:12:65:80:7f:7b:14:74:1c:41:01:08:ee:3e:c5:3d:59:a7:
00:f6:99:b1:17:0e:72:be:47:2e:1b:eb:fe:42:7a:cc:57:c8:
88:7f:a2:4e:d9:c1:f7:b2:df:cc:ac:db:7e:70:64:d4:0a:20:
32:bb:69:19:15:09:7f:ca:e4:da:a6:34:c6:9a:23:57:46:4d:
c8:d5:34:05:1d:08:ec:b9:71:c3:15:f9:93:4f:12:45:5b:6a:
59:0c:7a:ee:ca:82:25:f2:dd:0c:2d:e0:7b:89:7f:db:66:e1:
d7:cc:2e:95:37:19:3c:8e:80:a0:f9:d8:c0:6f:8a:70:95:b8:
6b:96:47:a5:ba:c1:00:68:36:20:a4:22:0a:d1:ee:71:10:e4:
9c:e6:ce:96:63:8f:45:69:8e:41:81:ee:49:78:61:d8:22:9b:
72:f7:9f:d5:e1:77:fe:9d:f7:18:fd:8e:18:54:17:a6:99:ec:
03:58:d8:b8:65:4a:1f:0e:8f:33:ed:ae:5c:e1:61:c6:87:9d:
c7:db:91:b3:e7:fe:24:a0:5c:51:a5:24:9f:ad:c2:c2:50:de:
0d:f9:48:1d:cd:cf:6f:65:6b:6f:bb:6c:95:ba:56:71:69:c6:
ce:1d:80:48:99:7b:cc:94:cb:07:c1:79:cd:f1:fb:d9:f2:9d:
30:86:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:48 2024 by rpki-client on console-ams.rpki-client.org