Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6B-u3tLN2g5yJuy_7TTDXB73mEw.roa
File: 6B-u3tLN2g5yJuy_7TTDXB73mEw.roa (raw, json)
Hash identifier: nZAmRipraC0nk3+CWJiLD1asxr9Sgg1azFGMjekCcsE=
Subject key identifier: E8:1F:AE:DE:D2:CD:DA:0E:72:26:EC:BF:ED:34:C3:5C:1E:F7:98:4C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C67E31EA25E34AFF101D313FCDC1B355B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6B-u3tLN2g5yJuy_7TTDXB73mEw.roa
Signing time: Thu 14 Dec 2023 10:33:06 +0000
ROA not before: Thu 14 Dec 2023 10:33:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215887
IP address blocks: 2a06:de06:e660::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:e3:1e:a2:5e:34:af:f1:01:d3:13:fc:dc:1b:35:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 14 10:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e81faeded2cdda0e7226ecbfed34c35c1ef7984c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:21:a1:0c:50:27:0b:7e:ff:83:65:c6:f9:
d8:f7:c9:33:b1:d7:b6:10:f8:4d:8d:a6:76:ef:4c:
49:4e:41:6b:5e:d4:f8:c5:93:1a:12:dc:dc:93:a9:
6c:d0:24:b5:b7:54:0a:40:3e:f0:dc:93:7e:79:1a:
fe:44:b9:f0:0b:52:43:a1:17:3b:40:9f:7c:d6:3a:
dc:0e:e5:ef:70:ff:87:c1:09:31:17:39:a9:ae:97:
c4:be:b7:47:e8:f7:36:6f:d9:f9:fb:ef:b5:df:56:
b6:1c:cf:b1:fd:95:ca:cc:45:cc:0e:01:ac:de:4b:
a7:2a:6f:c8:c5:c4:98:3e:7d:81:58:4a:88:f2:8f:
e8:b3:83:1d:89:4d:b2:93:5c:7b:5b:3f:90:51:63:
b2:59:30:2d:54:16:d6:da:24:8e:04:43:ff:f2:b1:
50:9c:c1:32:ea:8a:72:b4:17:fd:3c:dc:22:35:f5:
f3:cf:e2:38:9a:13:f0:16:aa:79:d5:ec:5a:61:5f:
26:c5:df:3c:a7:1a:62:38:cc:46:57:75:3b:12:57:
2f:fb:31:1a:a4:81:d1:a0:db:3b:06:4c:82:66:69:
c4:f7:63:a4:6a:36:93:69:15:f1:8c:b3:c9:64:64:
e3:14:4e:94:22:40:b9:f6:60:53:41:a4:d3:b7:b7:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1F:AE:DE:D2:CD:DA:0E:72:26:EC:BF:ED:34:C3:5C:1E:F7:98:4C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6B-u3tLN2g5yJuy_7TTDXB73mEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de06:e660::/44
Signature Algorithm: sha256WithRSAEncryption
a4:0e:3c:f6:17:9f:c6:57:24:94:04:1d:68:c3:f0:47:9c:7c:
bf:ac:37:97:a6:40:33:72:09:ce:a4:32:48:e6:25:90:6b:dd:
d4:9a:2a:7f:3a:ef:c4:fa:1c:0d:5e:79:d4:59:f6:a0:12:6f:
ab:7d:f9:a2:31:fc:02:6c:63:f1:02:cb:f7:71:01:01:81:4a:
5e:1e:b0:b2:65:ca:43:3e:2a:d2:eb:db:7a:39:45:55:49:a0:
48:74:6e:ac:5a:ac:49:ed:ba:c7:34:a2:15:ad:d3:d5:98:be:
60:48:1d:a6:82:6f:8c:8a:d6:8d:f2:3c:6e:c3:3e:e2:c8:3c:
c4:27:c6:e8:49:68:62:42:da:38:fa:9b:b0:66:62:66:2a:a6:
2e:bd:96:a4:59:76:e9:04:01:30:94:63:c4:34:43:10:87:66:
60:26:72:51:a6:ff:28:b4:57:ae:27:a2:97:f3:45:54:23:65:
4b:3c:e5:15:8d:ff:7f:a9:a7:57:cf:27:3e:a9:f7:3e:22:e8:
a1:db:84:87:06:ae:39:cf:da:24:d9:88:d6:f7:09:84:1c:7e:
8f:54:ad:37:97:a5:83:37:cf:fc:71:c3:ac:ba:d8:4e:6a:4c:
4e:7f:59:0d:b1:0e:17:47:20:ad:f7:fb:24:b1:4b:69:9c:0c:
e5:0f:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:49 2024 by rpki-client on console-ams.rpki-client.org