Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/50c3QaoZGeR0Jj6FWDcfQoqdDkM.roa
File: 50c3QaoZGeR0Jj6FWDcfQoqdDkM.roa (raw, json)
Hash identifier: CbWc3uyt4a+cvfJIwGsb8nk/tvnDaMUXUa/7hb2kix0=
Subject key identifier: E7:47:37:41:AA:19:19:E4:74:26:3E:85:58:37:1F:42:8A:9D:0E:43
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185AC0CF8B740A3E849B5B2430974431BBC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/50c3QaoZGeR0Jj6FWDcfQoqdDkM.roa
Signing time: Fri 13 Jan 2023 16:53:29 +0000
ROA not before: Fri 13 Jan 2023 16:53:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202427
IP address blocks: 2a0e:97c0:5b0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ac:0c:f8:b7:40:a3:e8:49:b5:b2:43:09:74:43:1b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 13 16:53:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7473741aa1919e474263e8558371f428a9d0e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:8c:1d:71:60:b0:b2:ef:16:6c:6b:54:4f:
79:0a:58:8f:35:0c:91:d7:a9:75:2c:99:94:13:93:
e4:52:58:41:03:4f:54:5c:54:e7:f6:33:0f:5e:b7:
da:d8:a5:98:d0:21:02:5d:69:6e:99:3c:10:53:83:
cf:e4:15:01:57:6e:c9:90:91:a2:0a:c5:8e:e2:20:
e0:b9:50:26:ee:6b:62:13:2b:9d:45:04:b8:5a:73:
bd:cb:a3:69:a0:8e:76:b7:bb:00:9f:6f:16:29:51:
30:01:00:f9:60:cd:88:99:0e:11:d1:05:f3:97:31:
c9:04:66:a7:3c:97:c9:f7:a9:21:d6:ee:d4:1b:11:
21:66:73:19:1a:c5:41:c5:7b:f9:54:9b:47:e0:35:
1f:6f:f0:9e:83:19:b7:84:dc:b7:52:2f:07:2a:05:
fe:76:ec:f5:b1:59:a4:89:98:74:20:c3:65:1e:04:
bc:9a:27:c1:ef:7b:d6:bc:0b:bc:7b:10:a8:c1:34:
b5:c5:25:f1:89:1a:99:21:2e:08:e5:7d:85:42:9e:
8e:c0:f7:79:2f:c4:32:9b:26:51:f0:ba:0a:81:3d:
42:80:98:a1:e4:ae:55:fc:54:e7:69:d1:b8:13:eb:
f0:13:ea:df:2c:0d:c5:67:90:b4:e5:df:a4:17:2b:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:37:41:AA:19:19:E4:74:26:3E:85:58:37:1F:42:8A:9D:0E:43
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/50c3QaoZGeR0Jj6FWDcfQoqdDkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5b0::/44
Signature Algorithm: sha256WithRSAEncryption
4b:3f:13:81:e2:a0:b4:91:bf:72:6b:f7:ed:d8:10:0b:6a:f9:
7b:e7:2a:b4:45:1e:af:86:e7:b2:79:2f:11:b9:72:1a:c4:31:
ed:dc:f3:af:26:92:1e:c2:27:65:06:c2:d1:8a:b1:53:fb:80:
78:8f:1b:52:f6:37:3a:80:bb:21:e3:f1:32:57:6d:08:f6:02:
7d:eb:fb:8c:de:27:de:82:9f:70:7d:b2:bc:78:e5:2c:5b:c0:
0c:02:07:04:c9:3b:ee:39:33:36:45:b0:ec:59:e1:e4:ab:f9:
b2:56:de:55:d5:82:91:9b:b9:d9:54:dd:ca:c0:40:ad:c5:72:
ba:82:e6:ac:4f:d8:0f:34:a2:47:e8:dd:45:05:26:c0:6a:8d:
23:75:c4:69:75:49:dd:3d:a3:8e:34:d9:5e:fa:29:b0:00:0c:
93:45:4b:99:b4:26:d1:19:e4:67:e8:01:97:b5:93:77:eb:1e:
df:be:57:06:ac:07:b4:4f:c9:4c:7b:15:d3:9a:53:0f:9f:c5:
5b:86:fc:eb:2c:bf:d5:3f:e9:1d:8c:7a:1b:47:52:8d:e4:f2:
38:a9:ff:a6:fb:8b:19:0f:16:b4:0d:88:ed:21:19:9c:15:25:
f9:14:fb:d8:62:97:ca:f0:6a:6b:06:e8:91:ab:9f:7f:98:62:
2e:fb:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org