Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2vlCslhHsmfLp-cVe7B-61zMq9c.roa
File: 2vlCslhHsmfLp-cVe7B-61zMq9c.roa (raw, json)
Hash identifier: kxQ+omVPusmEFbgqFhj5hZLD23Q76iAytpNl306lJps=
Subject key identifier: DA:F9:42:B2:58:47:B2:67:CB:A7:E7:15:7B:B0:7E:EB:5C:CC:AB:D7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E79DE8680281F2CD3A8B8DF8924319
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2vlCslhHsmfLp-cVe7B-61zMq9c.roa
Signing time: Mon 02 Jan 2023 05:15:05 +0000
ROA not before: Mon 02 Jan 2023 05:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 2a10:cc40:230::/48 maxlen: 48
2a0e:97c0:3e4::/48 maxlen: 48
2a10:cc40:231::/48 maxlen: 48
2a0e:97c0:3e2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:9d:e8:68:02:81:f2:cd:3a:8b:8d:f8:92:43:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daf942b25847b267cba7e7157bb07eeb5cccabd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:cc:ec:b2:32:cf:38:61:71:1b:b4:d6:3b:
9e:b5:ad:82:3c:9d:5d:75:d7:a5:85:de:bc:2c:68:
da:5b:69:c6:e4:62:90:15:e6:89:28:96:11:5e:f5:
80:65:92:0e:3b:a0:99:14:70:85:7b:b1:40:d7:8c:
5f:a6:23:74:f9:bc:66:f9:32:69:32:bb:b0:b3:c4:
ec:27:d4:38:21:83:c1:ac:22:40:32:14:17:21:6c:
56:9d:48:0f:b3:26:09:a9:7a:53:6c:59:94:59:0c:
88:33:4b:9f:24:7d:d1:c6:8d:e4:a8:75:18:af:16:
fb:1f:28:79:30:26:3f:a3:8d:5e:f8:78:0f:42:d9:
3b:c8:76:ea:b3:24:cf:7c:8a:6a:2b:bf:90:f1:66:
17:c1:e9:67:a1:dd:c9:2f:74:94:43:99:b3:9d:3d:
bd:7d:aa:3f:31:1f:2b:ad:e1:ff:77:db:98:fe:f2:
fd:fe:75:51:63:9b:28:57:9b:7b:c0:be:9b:c9:df:
c1:f0:2b:2b:a8:90:a9:06:d4:95:c3:08:3c:66:dd:
80:1b:2f:24:04:c2:64:3c:c8:39:17:a7:9a:7b:c7:
40:0b:68:48:e2:d4:87:a5:69:f9:07:67:9b:12:39:
de:7a:5c:9a:52:17:03:a6:54:f6:ca:a5:78:8f:ab:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:42:B2:58:47:B2:67:CB:A7:E7:15:7B:B0:7E:EB:5C:CC:AB:D7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2vlCslhHsmfLp-cVe7B-61zMq9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3e2::/48
2a0e:97c0:3e4::/48
2a10:cc40:230::/47
Signature Algorithm: sha256WithRSAEncryption
11:84:1e:dd:b2:57:23:d3:e7:71:4c:92:2b:d5:23:60:c0:d0:
ba:8a:c0:6d:23:fb:bd:82:0d:c3:34:bd:d1:be:25:40:8c:70:
5c:49:a1:e1:be:c5:d8:d7:f9:a6:8f:15:87:24:ad:fe:7b:c5:
b9:37:0d:1a:90:66:bd:00:d7:ca:37:88:6e:b5:6c:7e:fd:c9:
e4:7c:8a:58:77:9a:52:de:e1:a4:fd:74:a2:b3:3a:2d:9e:fa:
47:e1:9c:93:93:4a:f5:e5:2e:16:65:6e:d8:17:8d:10:8f:14:
a3:4f:97:ba:ed:99:ce:1b:d6:05:ab:a0:97:7f:3f:cc:60:0f:
92:a8:7c:52:b6:89:7a:fc:a2:ef:87:b0:33:a2:9d:db:29:34:
cc:dd:8e:d7:7c:67:9c:9b:85:f0:9a:7b:f1:75:cd:ba:ed:7c:
a4:c2:20:5a:9a:4a:9c:26:23:7d:4c:55:11:39:17:9c:8f:74:
cc:7f:f4:3a:08:b0:5e:ed:d7:00:7b:6c:51:8f:ef:26:03:e4:
1a:36:38:57:a4:c9:a9:be:81:5e:1f:88:95:a9:8b:fa:2f:71:
a4:cd:70:66:5c:58:3c:2d:ee:c3:13:c2:8b:44:ee:47:8e:b0:
56:9a:60:cb:68:d6:3e:f7:be:80:09:9f:ac:16:d1:aa:54:1c:
24:ea:59:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org