Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5FSrkNclVrPbdHFpltSJxCsfJkI.roa
File: 5FSrkNclVrPbdHFpltSJxCsfJkI.roa (raw, json)
Hash identifier: CWgtqeBnxneLICrrFTarJnwT9h0EZOvM0toExstHGE4=
Subject key identifier: E4:54:AB:90:D7:25:56:B3:DB:74:71:69:96:D4:89:C4:2B:1F:26:42
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018712BC0F60272A065C85C1EE1A05EBD736
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5FSrkNclVrPbdHFpltSJxCsfJkI.roa
Signing time: Fri 24 Mar 2023 08:28:47 +0000
ROA not before: Fri 24 Mar 2023 08:28:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210633
IP address blocks: 2a0e:b107:1960::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:12:bc:0f:60:27:2a:06:5c:85:c1:ee:1a:05:eb:d7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 24 08:28:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e454ab90d72556b3db74716996d489c42b1f2642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:30:be:25:9a:bd:24:fb:a5:9f:5f:53:fe:
a8:93:ae:bd:9d:39:35:d9:b6:dd:78:2f:52:c1:82:
8e:89:d7:f0:86:a5:b6:80:81:56:bf:f8:c4:83:9f:
51:0a:cd:df:33:55:ce:23:34:e6:dd:9e:9d:18:c7:
5f:81:ff:37:25:9a:b3:e0:11:9b:34:09:05:3b:9f:
92:f2:f0:33:d4:87:04:89:19:22:1b:3d:02:37:7a:
c3:72:c2:2f:a5:bf:2b:10:e3:74:13:13:6a:2e:8e:
07:42:6d:72:07:bd:b6:1b:eb:8d:bb:b7:dc:03:75:
20:52:90:a4:16:11:4a:9c:a6:c6:64:35:c1:d2:01:
01:cd:c0:73:f9:ca:ed:f8:63:74:76:b5:0d:34:18:
ef:50:f4:cd:15:fc:b8:c2:79:99:d0:ca:9b:69:e0:
98:44:b7:8d:72:3f:a1:76:d5:e2:33:42:cb:7f:d5:
93:5b:79:76:33:01:5f:18:2f:4a:ff:35:48:11:c3:
7a:94:f1:82:b8:7a:07:11:00:62:c7:53:6d:76:3e:
c1:11:35:20:05:6c:8e:d5:12:55:09:44:0a:6a:3f:
03:35:17:3d:5c:2d:76:fc:32:e6:b3:2f:dd:68:41:
90:58:df:b6:b0:d8:0a:b6:89:1d:98:8a:af:96:8a:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:54:AB:90:D7:25:56:B3:DB:74:71:69:96:D4:89:C4:2B:1F:26:42
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5FSrkNclVrPbdHFpltSJxCsfJkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1960::/44
Signature Algorithm: sha256WithRSAEncryption
76:1a:1e:ba:ee:4e:84:d4:06:27:5a:68:09:f3:fe:e1:6d:24:
60:99:45:42:0f:0b:4e:e8:10:64:d1:b6:5a:8b:f6:8c:8e:ab:
68:a0:c3:07:db:53:d3:4b:7b:8a:69:2c:cb:e1:c6:64:99:f2:
e1:bd:6c:06:2d:2c:a4:53:6b:64:01:5c:b5:91:dd:97:41:d0:
7a:03:8a:05:ff:79:da:ca:8d:49:9a:6a:21:25:73:81:41:39:
82:5f:63:af:db:e9:10:62:98:a6:62:b8:84:c9:ae:22:5e:56:
83:45:86:2a:0f:17:0c:f2:15:54:4c:00:3f:22:01:29:b2:13:
aa:e6:2a:d5:d6:87:10:b9:29:8a:8f:97:da:63:db:ea:37:b5:
fb:72:58:70:94:75:ed:a6:76:8b:6b:68:20:94:de:3a:8d:25:
91:da:ab:de:56:cd:5b:92:f4:81:e6:45:c4:99:c4:0d:50:05:
94:9a:49:65:c7:b1:29:4c:8b:89:2c:75:3b:e9:9e:6b:91:d3:
aa:10:ab:54:ec:96:46:e9:4b:79:fa:6c:56:a9:ab:59:07:ef:
a9:42:12:3a:0b:ce:71:e5:ad:d1:e4:81:6f:52:c9:4f:02:b8:
27:fb:e4:eb:f7:d9:19:24:d4:70:3b:67:b1:02:32:3c:d3:a1:
2c:60:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org