Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/65E8hPQZSsqLrGzQfv8EtECPaRs.roa
File: 65E8hPQZSsqLrGzQfv8EtECPaRs.roa (raw, json)
Hash identifier: LgmmSC29Fmi99u3HNPqknbELDJUAQhiMd5frF6gsAZM=
Subject key identifier: EB:91:3C:84:F4:19:4A:CA:8B:AC:6C:D0:7E:FF:04:B4:40:8F:69:1B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018B1FC26AF5597C920B534C004EF6C3D14D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/65E8hPQZSsqLrGzQfv8EtECPaRs.roa
Signing time: Wed 11 Oct 2023 17:21:56 +0000
ROA not before: Wed 11 Oct 2023 17:21:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212516
IP address blocks: 2a0e:97c0:64c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:c2:6a:f5:59:7c:92:0b:53:4c:00:4e:f6:c3:d1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 11 17:21:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb913c84f4194aca8bac6cd07eff04b4408f691b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:5b:3f:bf:6e:fa:8e:e1:2a:4f:57:f7:4b:
ef:eb:e7:4c:6c:54:2c:1f:09:e0:cc:7a:ba:74:a0:
50:9d:50:78:06:8e:da:37:ca:2c:c0:6a:9b:db:7b:
4c:55:a4:fc:e2:3d:ef:47:4e:06:a0:fe:52:2b:93:
9c:76:f1:5f:a3:7b:3c:c4:79:23:7b:b5:55:f3:04:
5a:54:39:cc:f4:b2:3c:55:06:80:c8:e2:7d:b3:2b:
83:a1:d1:c2:4f:33:18:22:c0:cd:c7:28:d0:1b:f8:
93:78:4f:97:35:da:b6:49:dc:3b:7a:f3:c5:a3:f3:
eb:ac:79:69:07:7f:dd:40:9b:fb:8f:a5:aa:1a:39:
98:e4:b5:91:7f:65:cb:6d:77:bb:9d:6d:4c:d5:33:
51:86:04:e2:8b:6c:ad:09:7a:59:a2:82:d5:18:44:
71:fe:0b:21:1b:a1:1f:f6:6c:47:16:0b:e7:15:a7:
76:00:75:c3:6d:cf:1e:5d:dc:52:94:70:a0:2f:73:
ff:b3:cd:ba:65:26:e2:16:d8:b3:3f:05:43:db:98:
72:b6:e9:2d:06:50:aa:78:7b:1f:03:b6:04:6e:83:
b6:85:fc:4b:77:7a:24:48:f3:e9:a0:42:fb:3f:15:
0d:0a:bd:21:89:a1:19:83:3c:38:49:fb:79:91:82:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:91:3C:84:F4:19:4A:CA:8B:AC:6C:D0:7E:FF:04:B4:40:8F:69:1B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/65E8hPQZSsqLrGzQfv8EtECPaRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:64c::/48
Signature Algorithm: sha256WithRSAEncryption
a8:36:b1:8e:02:fc:ac:29:49:9c:e2:ed:29:18:f8:a6:8c:30:
3f:7a:4c:bb:fb:48:6e:34:6c:9a:46:16:e1:14:bd:46:e8:9e:
8e:57:e9:34:b0:d7:a8:b5:ca:53:2c:e5:c8:4d:13:bf:1a:a8:
bb:6f:30:1e:18:6a:39:92:00:fd:6b:ed:c0:69:56:2e:d5:71:
4c:fb:1e:3b:91:26:82:e2:f2:4e:f5:09:e0:fb:ed:78:c4:d8:
4d:24:96:c0:40:a8:43:be:26:2e:62:ef:a6:89:d3:88:1b:cb:
ab:7b:03:2f:2e:ae:15:5d:7f:2f:12:98:a9:47:f9:c3:6f:80:
2c:ac:f8:94:2f:68:4d:b1:b5:09:1b:7c:6d:60:20:70:58:fc:
57:ed:cb:00:76:ce:3c:3e:41:6d:8a:99:4e:e9:cd:c1:8a:63:
1c:cb:f5:12:17:b3:89:00:90:96:c1:f1:cf:b4:61:7a:24:d1:
42:54:1c:ca:41:e5:5e:00:c1:da:ca:d8:f8:b1:ec:26:0a:3d:
f0:ad:ad:58:f5:03:7f:d1:2e:fa:fc:41:38:c5:91:1a:46:30:
de:a9:f1:d7:12:2b:df:51:f1:cb:2b:50:c9:11:a5:10:be:80:
7b:79:24:12:46:00:9f:80:fe:08:a8:62:61:cb:e8:8a:b8:1a:
54:17:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 09:52:55 2023 by rpki-client on console-fra.rpki-client.org