Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5ENFr-e4kLQce977InUokVTWfRU.roa
File: 5ENFr-e4kLQce977InUokVTWfRU.roa (raw, json)
Hash identifier: wPM2hdMOtf4S+iUj6ZXwL0ylUfQyi15UWRWLMNHHeQA=
Subject key identifier: E4:43:45:AF:E7:B8:90:B4:1C:7B:DE:FB:22:75:28:91:54:D6:7D:15
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7F987C22313748CB35E41F19BA817
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5ENFr-e4kLQce977InUokVTWfRU.roa
Signing time: Mon 02 Jan 2023 05:15:28 +0000
ROA not before: Mon 02 Jan 2023 05:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211044
IP address blocks: 2a0e:97c0:490::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:f9:87:c2:23:13:74:8c:b3:5e:41:f1:9b:a8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e44345afe7b890b41c7bdefb2275289154d67d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:d6:fc:fe:c0:ca:38:82:ff:dd:ac:ec:47:
7f:ac:7e:0f:df:e1:49:01:99:53:ac:af:24:8d:7d:
17:0a:1e:e6:db:0a:87:a2:13:a4:c8:a6:dc:5d:dc:
d8:f5:03:e1:a8:9a:82:b8:6e:04:07:6a:d5:8b:19:
8f:fb:34:11:70:ee:82:5f:28:58:e0:e6:a4:20:1f:
15:c2:e1:a6:3c:32:a4:d9:49:dd:8b:7c:5a:a3:d4:
b3:e3:0b:25:73:7c:3e:b3:0e:5d:55:e2:a5:68:f4:
95:b5:05:76:35:93:2a:7f:92:5c:77:10:d1:2a:d5:
ca:bd:21:e7:88:44:8e:a7:43:a0:93:46:0c:28:4c:
8d:4e:0f:30:8e:a2:5b:56:98:b6:a9:e2:19:29:ef:
2c:21:b7:b6:af:c5:f1:da:8e:51:57:48:de:be:c1:
59:dd:5d:54:16:74:40:ef:e6:d8:b7:ca:34:d6:50:
61:63:08:e1:e7:78:1e:61:ab:98:02:08:a7:8e:58:
97:f0:9a:f4:10:de:17:cf:95:4e:f0:57:52:b0:1f:
01:b1:ae:ab:ce:47:7f:27:07:26:17:f0:28:e4:61:
ee:ae:61:58:59:bc:36:4e:73:71:57:c4:5d:bd:5d:
fb:92:b1:cd:32:ec:39:43:63:68:cd:a3:87:6f:df:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:43:45:AF:E7:B8:90:B4:1C:7B:DE:FB:22:75:28:91:54:D6:7D:15
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5ENFr-e4kLQce977InUokVTWfRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:490::/44
Signature Algorithm: sha256WithRSAEncryption
71:95:db:66:0d:14:b4:4e:68:7c:89:af:33:9d:d6:59:3f:c6:
c4:ea:e1:27:81:f9:be:c0:d9:91:2c:3d:97:2e:d3:58:78:24:
11:00:47:ca:74:56:c8:59:1c:7d:fe:e4:15:e6:6d:a7:b2:82:
1c:02:41:78:11:c2:6a:95:4c:08:50:59:14:77:6b:e3:0d:d4:
7b:cc:38:c2:c6:7e:b4:14:5c:d5:9d:4e:51:ec:79:5d:ba:00:
bd:fd:ff:43:31:c8:98:a4:8d:fd:de:f9:5b:21:27:0f:c1:66:
f2:37:c6:b2:52:1c:55:d7:e6:0a:af:d7:07:70:b7:1c:92:cf:
ec:35:ce:09:06:9d:e4:b3:0f:84:b3:d5:69:7e:a2:9a:90:4e:
7a:b2:23:41:14:0f:f4:f2:61:cb:81:42:f9:37:8e:89:e5:9c:
d4:ea:92:87:0f:ac:f3:08:b4:24:dd:37:39:fb:38:84:28:45:
2d:f7:bf:35:0a:b2:72:d2:b6:48:b0:e7:5f:f5:bc:a4:08:d5:
b7:a7:d8:39:72:f3:1a:fd:28:d5:93:e0:c2:e1:9c:b9:20:0d:
ea:3f:67:f0:a7:35:fb:ef:ea:56:3b:48:e2:dd:08:9e:f1:df:
3c:a7:67:b6:fa:c2:f3:bc:39:02:98:f8:3a:f3:0d:eb:e3:35:
3a:65:2b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org