Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4V-mETxN3_hKGtsCX_NLcLUOUSM.roa
File: 4V-mETxN3_hKGtsCX_NLcLUOUSM.roa (raw, json)
Hash identifier: GOERf4AE8LPR15AUZuo0JbEB8U0G7ztKVWG5emdxjP8=
Subject key identifier: E1:5F:A6:11:3C:4D:DF:F8:4A:1A:DB:02:5F:F3:4B:70:B5:0E:51:23
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A74B21A49CA8E7CEE26477767431EC27D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4V-mETxN3_hKGtsCX_NLcLUOUSM.roa
Signing time: Fri 08 Sep 2023 12:09:03 +0000
ROA not before: Fri 08 Sep 2023 12:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216357
IP address blocks: 2a0e:97c0:500::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:b2:1a:49:ca:8e:7c:ee:26:47:77:67:43:1e:c2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 8 12:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e15fa6113c4ddff84a1adb025ff34b70b50e5123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:2f:be:03:8f:e2:b3:1d:27:8b:d7:51:86:
e6:89:18:43:91:22:58:4a:68:ba:e4:6b:c8:ce:1d:
5e:b6:4c:6c:ea:ec:17:e1:4c:50:f6:aa:a8:10:48:
5b:09:65:c0:ff:2d:b9:66:1b:a5:d4:a2:ef:29:10:
8b:c8:05:17:47:de:a9:ea:4e:5f:2d:c4:b1:d7:6c:
d6:66:9c:88:58:91:e1:2f:db:f4:07:8a:46:dd:0f:
63:3d:48:9d:24:ab:1c:d7:4e:a0:25:67:57:98:1d:
d0:ea:c1:5d:83:82:c9:41:9e:6f:ac:d8:83:ae:4c:
e3:4e:17:ba:6f:bb:97:f8:1e:bf:fa:ed:66:9e:11:
0b:c6:79:b3:c3:c5:d4:8b:a6:30:eb:35:97:20:4f:
91:94:ed:2b:6b:99:7a:f4:2b:58:03:e3:a6:dd:dc:
1b:17:d7:96:c8:2e:b2:e4:74:c7:4f:f0:ae:81:6c:
57:d4:cd:5c:05:69:58:22:e6:fb:4f:8c:98:33:2e:
77:79:db:83:b6:46:d3:4a:7b:8d:52:62:69:8a:60:
14:cd:70:ad:e1:a9:14:60:5d:8e:c5:ff:40:1f:c8:
cc:c0:cf:bb:d1:a5:bf:b1:ac:7e:36:3c:49:a9:67:
74:0b:9f:63:14:36:f7:58:44:1e:8a:e3:15:99:21:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:A6:11:3C:4D:DF:F8:4A:1A:DB:02:5F:F3:4B:70:B5:0E:51:23
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4V-mETxN3_hKGtsCX_NLcLUOUSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:500::/44
Signature Algorithm: sha256WithRSAEncryption
14:b7:c9:ed:e2:69:a7:f6:98:80:e0:68:c4:df:87:41:db:f9:
04:f6:64:36:c2:e5:c0:89:41:aa:66:b9:65:34:b4:ce:0a:1c:
26:3c:b2:fd:21:ee:46:c2:70:fd:f3:7c:37:9d:b6:32:fe:79:
25:6f:a2:c3:56:b0:07:7c:66:2d:43:b9:1b:f8:6c:7f:31:01:
b2:9f:c1:ef:94:aa:ea:2b:1c:0a:b2:f2:eb:da:01:b8:fb:2e:
40:4e:d5:1d:75:0f:a7:a6:51:41:91:f9:26:29:43:b3:91:91:
54:fa:bc:fa:6d:d5:16:76:50:5d:b1:48:46:c3:ff:39:fb:3b:
ed:3a:ed:cb:0a:80:36:db:ea:fb:8b:6d:16:24:d6:e4:cc:6e:
78:23:f4:86:15:14:11:c0:1f:02:67:00:ef:ec:ff:38:08:5e:
b1:48:8d:6c:c2:5b:72:ad:57:55:72:2d:73:ce:63:c9:20:7e:
a2:00:0a:a0:0c:8e:f9:6b:13:aa:27:c6:fb:fa:b7:14:4b:8b:
16:97:a0:f7:d9:33:13:d0:0b:a7:fc:22:b2:ea:ac:ef:2f:43:
4d:47:a4:78:f4:73:40:c1:68:3e:28:df:d6:d3:d1:42:5c:03:
9f:13:35:99:db:3b:72:9f:89:f8:52:b8:51:0c:d6:a8:35:5a:
11:b0:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 18:51:47 2023 by rpki-client on console-fra.rpki-client.org