Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2W1WFY-jgSszMymosNgpEq1j93c.roa
File: 2W1WFY-jgSszMymosNgpEq1j93c.roa (raw, json)
Hash identifier: RZvzXOggyskCPD0L4Dyy9P45JKLzNUJvjDfW5qOB9HQ=
Subject key identifier: D9:6D:56:15:8F:A3:81:2B:33:33:29:A8:B0:D8:29:12:AD:63:F7:77
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AC24388DAB15ABF02427DECEE9164
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2W1WFY-jgSszMymosNgpEq1j93c.roa
Signing time: Tue 24 Jan 2023 16:09:36 +0000
ROA not before: Tue 24 Jan 2023 16:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134478
IP address blocks: 2a0e:b107:ea2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:c2:43:88:da:b1:5a:bf:02:42:7d:ec:ee:91:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d96d56158fa3812b333329a8b0d82912ad63f777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:44:66:e3:6f:9a:ff:05:51:e8:6b:d3:01:
5e:d1:a3:d1:4a:9c:05:73:2c:d2:26:d7:f5:99:98:
ee:e7:02:c6:67:5d:e9:84:23:0d:3b:02:91:c3:d7:
00:fe:fc:a5:53:54:aa:ed:00:ff:10:bf:96:7f:e9:
cc:75:56:02:54:50:ce:95:70:eb:e6:df:59:c3:9b:
d3:ee:f0:20:32:3a:a0:19:d0:dc:76:c4:90:21:c4:
ab:ed:d4:51:73:0e:d3:12:b8:a0:ed:b0:5c:53:55:
12:f8:66:ee:ee:41:d5:4e:a3:46:9b:f9:50:05:ba:
2a:db:23:7e:cd:0f:28:f7:7f:d9:09:c5:d1:67:3a:
e6:a1:34:7c:c4:f7:9c:88:85:5d:6b:27:8a:44:04:
4f:e3:9b:b1:fb:83:98:a8:d8:62:35:31:ad:e1:50:
dc:74:38:ac:70:a8:95:e8:99:69:0e:20:9d:78:b8:
5d:9c:e2:69:bb:c3:7f:c1:c1:94:85:f4:43:c8:97:
eb:5e:19:44:46:95:00:af:c9:9b:8e:41:41:05:0c:
e6:4a:21:f7:df:29:65:c0:e0:bf:33:09:7a:e1:b6:
15:94:ab:35:96:bd:8a:72:fe:8f:44:81:e2:53:27:
e1:14:25:fc:32:b5:59:65:69:6f:2a:30:ce:f3:97:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:56:15:8F:A3:81:2B:33:33:29:A8:B0:D8:29:12:AD:63:F7:77
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2W1WFY-jgSszMymosNgpEq1j93c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ea2::/48
Signature Algorithm: sha256WithRSAEncryption
85:14:19:4c:0f:23:0f:fd:35:d7:05:06:fe:fe:9f:ad:aa:d8:
9a:26:00:30:c4:37:c6:35:0a:cd:6e:40:c5:8e:c8:05:ea:af:
44:dc:d4:7e:b6:06:c2:3b:e1:ab:37:07:3d:01:aa:ce:8d:90:
86:7c:66:18:60:f5:81:bc:02:2d:67:3b:2b:6c:da:93:25:ed:
77:df:d0:34:c1:09:1d:94:fa:d0:59:c0:f0:7b:dc:2b:a5:29:
66:24:bd:60:bc:d0:7f:d6:0d:f8:6b:83:ac:5e:d9:e2:e7:4a:
18:87:ca:1c:8e:6e:b1:7a:3b:69:9f:df:70:84:0c:bb:fa:c6:
00:f5:47:1d:78:fb:6d:18:3b:d7:77:2f:d1:be:f1:23:b1:40:
d3:4e:b8:d5:41:cc:c4:b7:e9:75:e8:69:05:4b:96:61:df:d0:
59:b5:47:36:71:13:72:1c:95:a0:e8:05:f9:6b:9c:9c:ea:79:
f8:21:3b:9e:50:07:f4:ef:25:d7:8d:c6:c2:63:32:9b:95:8a:
66:08:84:4f:c7:f9:d8:51:1e:c9:35:8f:e9:7f:a2:c8:6c:1a:
1c:bc:58:d2:f5:15:3d:f2:26:74:41:d7:e5:65:37:79:9f:66:
6e:23:ba:26:4f:b2:0f:f5:44:89:bb:f2:dc:d4:d3:ae:2e:a8:
15:1e:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org