Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1iIvm-6zzN-3CfSNsfUDAZsi35I.roa
File: 1iIvm-6zzN-3CfSNsfUDAZsi35I.roa (raw, json)
Hash identifier: xG9tDgMm6sEGtW5tVrRqKCKmrDJ08ovW6xYxU93h4x4=
Subject key identifier: D6:22:2F:9B:EE:B3:CC:DF:B7:09:F4:8D:B1:F5:03:01:9B:22:DF:92
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018AB78D7DF91D9856C581178DD943328FB6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1iIvm-6zzN-3CfSNsfUDAZsi35I.roa
Signing time: Thu 21 Sep 2023 11:43:37 +0000
ROA not before: Thu 21 Sep 2023 11:43:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200993
IP address blocks: 2a0e:97c0:5d0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:8d:7d:f9:1d:98:56:c5:81:17:8d:d9:43:32:8f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 21 11:43:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6222f9beeb3ccdfb709f48db1f503019b22df92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0b:68:38:d2:65:ce:9c:09:56:5c:48:c6:5b:
88:ad:71:a3:94:80:68:32:e2:93:5b:5c:07:66:f1:
2f:56:a4:41:8f:2e:d7:49:f8:72:25:57:42:23:30:
39:ff:1c:9f:5e:fe:66:ed:c1:b1:59:be:a4:93:57:
4d:30:8a:74:07:d8:18:cd:59:30:f4:90:cd:94:82:
e0:b3:b8:2d:9a:d1:d2:da:d4:5a:6c:f9:5f:b5:d5:
00:e5:1c:0b:3a:d0:ed:81:64:17:6d:ab:1d:ea:9c:
e5:db:7e:9d:94:ff:e8:a2:41:14:90:1d:bb:97:2a:
af:95:fd:9b:d3:01:22:77:79:e5:dd:c4:da:92:67:
2a:3c:9f:28:d4:d2:b4:d3:16:28:69:9e:c9:ec:bb:
1c:ee:0a:f0:8a:dd:f2:8a:9b:ac:3f:95:1c:b7:b4:
8d:aa:e6:cd:65:18:22:46:98:c7:78:74:dc:e6:9a:
72:40:72:94:46:5e:6e:bd:14:ff:01:f0:17:bf:6d:
d9:ad:03:0e:8c:82:24:a8:e2:16:13:01:f9:eb:9b:
21:95:f9:17:7a:36:5a:74:ca:66:c5:32:66:08:05:
39:2c:ef:0e:8f:8c:25:0f:0c:cd:09:7b:16:e0:6a:
f2:b3:c6:f6:17:c0:3c:72:30:9b:21:e0:c8:08:7b:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:2F:9B:EE:B3:CC:DF:B7:09:F4:8D:B1:F5:03:01:9B:22:DF:92
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1iIvm-6zzN-3CfSNsfUDAZsi35I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5d0::/44
Signature Algorithm: sha256WithRSAEncryption
6c:b8:d6:9a:7d:14:aa:40:09:3e:7b:20:32:67:1b:98:7d:77:
28:fe:8d:42:c9:bc:72:4f:c9:f8:a1:d7:05:83:ab:67:99:69:
db:40:da:fa:38:b8:55:bb:57:76:d4:e9:22:aa:cc:26:0e:be:
9b:32:d1:b5:90:b7:e7:f3:a7:0b:94:2d:be:47:27:9b:b6:b7:
02:80:e4:e1:3e:ae:92:38:49:05:da:7a:c5:22:17:d6:03:12:
1f:5b:1b:5e:3b:4b:06:a5:76:62:11:a9:db:dc:6f:4f:a0:a3:
56:29:de:25:a7:73:0d:26:bf:81:24:e6:3d:b5:a9:df:58:97:
29:a5:40:a6:fc:7a:e8:74:98:72:40:f4:de:09:b3:2b:f9:a5:
7e:20:bd:53:07:6b:61:cb:c9:0b:0f:79:af:11:f1:9e:f1:a8:
14:6f:05:bd:7d:b6:b2:cc:f8:08:1c:4a:c1:f2:aa:7e:32:76:
5f:a6:9d:5d:a3:89:f9:f4:47:3f:fb:6e:57:10:0e:e3:91:dd:
45:be:0e:ff:d6:06:57:d6:c8:39:e7:a8:93:3d:ab:42:7b:dc:
39:fd:77:d4:a1:5e:0c:6e:35:0f:d3:0f:cc:82:23:1f:e0:ea:
5e:e1:3c:0e:76:6f:33:ef:84:95:c9:39:cc:1a:cc:11:9e:6e:
e0:d0:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 14:07:10 2023 by rpki-client on console-fra.rpki-client.org