Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2BxBZKLssHRSdavumU5gUYxd_-4.roa
File: 2BxBZKLssHRSdavumU5gUYxd_-4.roa (raw, json)
Hash identifier: 9ePsKq5+WljNG6xNTJq+XNr5KC+9PLsMlq/Oui1skbQ=
Subject key identifier: D8:1C:41:64:A2:EC:B0:74:52:75:AB:EE:99:4E:60:51:8C:5D:FF:EE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E782A44909F0926600C2D0881263EB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2BxBZKLssHRSdavumU5gUYxd_-4.roa
Signing time: Mon 02 Jan 2023 05:14:58 +0000
ROA not before: Mon 02 Jan 2023 05:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49922
IP address blocks: 2a0e:97c0:b80::/44 maxlen: 48
2a10:cc44:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:82:a4:49:09:f0:92:66:00:c2:d0:88:12:63:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d81c4164a2ecb0745275abee994e60518c5dffee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:7e:9c:c6:9b:fc:e5:bc:ed:e8:6e:6c:32:
87:c9:60:5c:d2:6e:83:17:4f:14:36:1c:16:e1:79:
34:e9:05:3a:1a:3f:f7:1d:f7:0e:f2:d1:f5:0c:09:
6f:67:7a:cd:d0:85:fa:8b:49:96:e5:4b:7f:ba:0b:
00:98:e3:65:2c:e0:42:e1:5e:54:18:82:c8:cb:a6:
37:fa:82:2c:d7:a0:2b:3c:a2:64:24:be:29:4a:0d:
d2:c3:2d:00:6c:50:ad:c2:0d:0a:d3:37:b4:8b:20:
6a:a2:2f:f2:e7:df:8e:c4:d0:82:a3:fb:c7:6d:f5:
9e:ff:c9:cb:2b:48:70:91:10:af:7d:0e:5f:d5:5f:
d8:7e:d1:dc:cf:67:90:d6:de:87:00:06:d3:80:ad:
43:10:a7:93:c1:64:24:5c:fa:4b:fe:05:e8:1e:c5:
0f:de:f0:c6:b9:97:aa:d3:0a:2c:67:cb:f5:6d:ce:
ed:13:fe:47:7a:1f:90:ce:f7:6d:4b:8f:ac:48:4f:
d1:51:13:07:8b:b9:eb:1a:a2:e2:c0:d0:63:9a:5e:
47:75:5d:ad:d4:ac:24:cb:86:16:b3:96:dd:df:6d:
7b:2e:b5:90:14:4a:60:e4:22:db:fe:23:f9:a6:3e:
96:30:df:fa:6f:59:f4:e6:29:53:21:ff:1a:19:3c:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1C:41:64:A2:EC:B0:74:52:75:AB:EE:99:4E:60:51:8C:5D:FF:EE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2BxBZKLssHRSdavumU5gUYxd_-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b80::/44
2a10:cc44:100::/44
Signature Algorithm: sha256WithRSAEncryption
be:2e:ef:fb:b2:a6:4a:50:aa:b0:8b:45:da:3a:e3:13:3e:b5:
16:f1:fa:09:52:d1:86:56:0a:74:07:93:1a:17:af:52:b8:12:
74:84:41:ba:ce:3a:14:c4:57:67:72:f6:a2:e2:26:ac:ae:b7:
a7:1d:82:dd:3c:0c:43:35:6c:3c:92:26:a0:40:b9:94:70:82:
b3:29:ad:1f:25:8c:54:f5:e6:6f:39:30:4b:5a:a3:5f:86:3b:
4f:c4:5a:3f:64:a8:75:e7:8d:b9:5a:c0:2b:74:a8:85:4d:58:
76:81:25:2c:b3:e2:59:8f:ed:ee:d1:37:5f:85:c4:df:5b:af:
bf:05:51:e8:58:e8:4f:0c:30:5c:4a:f5:16:e1:ea:74:71:02:
bb:b9:11:8f:db:64:fc:6a:cf:d5:8e:36:7f:f0:8c:40:f8:fd:
55:e8:78:66:88:4b:07:87:c2:bb:90:5b:59:2c:b9:b0:d1:d5:
e3:87:a0:5b:cd:13:37:bf:1f:b6:fb:73:c8:0a:a7:fb:23:40:
48:77:ed:2a:d0:ad:e2:44:c1:96:0a:19:09:54:87:2b:7f:c1:
1c:61:a4:64:b9:e3:39:6d:df:48:03:9f:22:6c:34:11:7a:37:
21:38:31:31:dc:23:9a:d1:7e:92:92:4b:e2:77:aa:40:2d:bd:
3a:de:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org