Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2cymGzQDjWlgtXLe662gE4xdP-Q.roa
File: 2cymGzQDjWlgtXLe662gE4xdP-Q.roa (raw, json)
Hash identifier: iohG4/bcswpRWXUDIIUyOsacjEqFqmDdHTUgbU5jytA=
Subject key identifier: D9:CC:A6:1B:34:03:8D:69:60:B5:72:DE:EB:AD:A0:13:8C:5D:3F:E4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187E6B066FB9E6025CE26DC4437499DC59C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2cymGzQDjWlgtXLe662gE4xdP-Q.roa
Signing time: Thu 04 May 2023 12:15:33 +0000
ROA not before: Thu 04 May 2023 12:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203790
IP address blocks: 2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a0e:b101::/32 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:b0:66:fb:9e:60:25:ce:26:dc:44:37:49:9d:c5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 4 12:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9cca61b34038d6960b572deebada0138c5d3fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:f1:c3:6b:19:46:2e:50:e2:e2:0c:8a:91:
07:9d:55:2f:aa:fa:9f:ab:d0:25:c8:3a:b1:d6:84:
e7:16:95:cd:3e:a9:72:28:36:98:03:d0:e8:f4:c4:
35:3b:ba:ce:18:ba:70:28:60:a0:6e:19:d5:55:9f:
19:0e:e7:ff:4f:63:fb:e4:44:74:17:2f:48:4a:7a:
24:90:9f:88:a1:89:5d:b8:da:95:69:cf:d4:65:fe:
27:6d:20:f2:b9:e4:ee:54:2d:c8:f1:5e:d8:a8:e8:
9d:bc:24:09:bd:c6:3b:93:99:2a:5c:a9:a1:0f:cd:
d8:e7:8d:6b:fb:4c:d0:05:f9:f8:da:15:59:9c:5b:
0f:69:41:bd:3b:42:0b:87:ad:a7:b7:26:11:d1:76:
ee:ba:b7:07:c5:20:8d:07:c8:92:9b:00:92:e2:89:
5b:5b:33:2b:08:42:58:9a:84:e0:01:ee:d3:43:c9:
c0:d2:c2:a1:32:b5:3a:29:c0:79:a3:62:36:7e:5f:
d4:a2:fa:a2:68:45:15:c6:8e:da:f5:ed:2e:43:f9:
85:67:f7:47:47:6e:9a:8e:09:79:1c:8d:01:d6:2e:
4f:22:09:96:7f:e4:61:c6:55:87:7f:69:eb:4d:d6:
90:4f:17:71:64:eb:8f:cf:03:c1:b3:50:ab:e2:b4:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CC:A6:1B:34:03:8D:69:60:B5:72:DE:EB:AD:A0:13:8C:5D:3F:E4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2cymGzQDjWlgtXLe662gE4xdP-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:460::/44
2a0e:b101::/32
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
43:ce:3c:8e:13:bc:b1:37:26:72:37:5a:50:dd:3c:0e:63:9b:
39:a7:de:bb:65:3e:d6:60:4e:65:f7:87:4f:32:f1:a4:2b:c1:
a0:57:dc:18:14:13:87:bc:bf:9c:be:aa:a3:57:71:85:03:45:
cd:54:19:21:08:46:75:6b:fa:aa:f1:d8:2b:80:0f:b4:0a:36:
47:f3:f0:29:24:1c:5f:1b:5f:07:56:47:68:f7:9a:a5:a3:7d:
1e:60:90:ad:10:5e:39:1b:32:43:b3:6f:23:b2:35:39:d5:b5:
56:06:e8:58:8f:b7:cc:29:3d:92:ba:fd:a2:be:bd:e3:4c:bd:
0a:e8:79:bb:83:5d:b9:8d:7a:16:7d:10:b2:59:11:19:fb:9e:
ee:7b:8b:00:32:e1:8e:45:ab:9a:bb:1a:e9:80:7c:f4:79:2d:
6a:ca:bd:5b:eb:d1:21:f4:21:f1:5e:ca:54:49:70:63:4d:b6:
5f:7d:a1:83:de:05:f4:74:63:cb:ec:7f:ce:04:ab:1d:5f:95:
c6:a5:e7:75:0c:f8:a8:f9:5f:1d:34:67:e0:87:18:61:29:0d:
87:30:60:0f:d4:bd:68:5f:73:d2:91:c6:b6:d9:2c:68:82:f6:
c1:5d:59:ec:d9:59:b5:22:78:91:22:f6:ba:cf:7f:f7:10:6f:
b1:ea:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-fra.rpki-client.org