Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6bwUlndfai8bTWGy7vY1klMU_YQ.roa
File: 6bwUlndfai8bTWGy7vY1klMU_YQ.roa (raw, json)
Hash identifier: MToimFgOrChpuYTksgbCtDF/Vg1toOBBDL6mnMZJZpE=
Subject key identifier: E9:BC:14:96:77:5F:6A:2F:1B:4D:61:B2:EE:F6:35:92:53:14:FD:84
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48ACB63F3B88F7620EDCF242325A29B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6bwUlndfai8bTWGy7vY1klMU_YQ.roa
Signing time: Tue 24 Jan 2023 16:09:39 +0000
ROA not before: Tue 24 Jan 2023 16:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142588
IP address blocks: 2a0e:b107:1991::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:cb:63:f3:b8:8f:76:20:ed:cf:24:23:25:a2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9bc1496775f6a2f1b4d61b2eef635925314fd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:68:c6:1e:6f:65:fc:a7:f2:93:bc:e3:9d:
00:dc:f6:51:58:56:0a:44:09:ac:56:35:33:e5:f9:
55:ad:ec:61:c3:80:2b:eb:88:29:80:1a:d7:bb:7b:
cb:a7:97:70:bb:55:25:ea:f3:6b:bb:53:7b:06:bc:
8a:5d:83:85:51:1a:23:cb:3f:70:88:fb:9c:27:dd:
17:8f:1e:8f:74:98:00:5b:2e:20:26:d7:dc:74:ab:
e7:39:d2:8e:ac:6c:7b:57:c5:53:de:74:d8:86:77:
4f:50:c4:8f:ca:6c:71:14:8e:4a:89:4c:1b:44:2c:
ec:88:1c:70:12:94:04:9c:71:ae:25:b6:b8:59:43:
ed:0b:4c:88:fb:e8:d6:46:5b:6f:9d:4f:a3:aa:26:
96:15:64:9c:29:1c:97:c6:31:87:4f:a3:3d:ed:5a:
d2:e6:c6:e5:ff:2f:d1:a2:e4:bc:db:22:5b:8b:17:
64:18:2b:13:6e:8a:66:5a:9b:59:53:e6:49:de:82:
9b:ec:79:db:be:57:db:76:43:0c:b1:33:0a:d4:81:
e1:44:60:ae:8c:4b:84:3a:2d:af:44:49:18:45:e6:
16:a1:ad:de:74:5d:ff:64:b0:7b:7e:5f:e2:96:96:
3e:33:c7:61:63:8f:fc:cf:d8:54:4e:a5:e7:2e:2e:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:14:96:77:5F:6A:2F:1B:4D:61:B2:EE:F6:35:92:53:14:FD:84
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6bwUlndfai8bTWGy7vY1klMU_YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1991::/48
Signature Algorithm: sha256WithRSAEncryption
a3:81:5e:50:31:bf:ae:1f:54:50:bd:ec:59:79:25:75:b0:af:
d4:20:de:1a:c9:5a:85:2a:36:c5:ac:a3:3c:66:58:18:c6:93:
b7:cf:d2:83:c0:16:f2:ca:89:d6:a7:13:f2:0e:56:36:c2:c3:
ba:2f:03:76:84:b0:3b:ef:a3:06:5b:d8:ef:20:40:7d:aa:35:
a9:f1:8c:2f:28:9b:99:cd:35:01:03:23:9e:ed:63:16:9c:d9:
c1:ad:c0:e7:c7:f3:1e:60:7b:73:bd:44:00:c1:6c:86:91:69:
31:fc:15:1b:e0:1d:41:00:26:f5:eb:67:40:0b:ec:6c:81:08:
f0:cf:e2:ef:2b:b9:b9:7d:e0:99:0e:bd:92:f6:e3:3e:4c:0e:
9b:21:50:aa:9e:50:5a:7c:15:b8:ad:35:fc:e0:33:46:cf:4c:
71:4d:b0:50:8c:9b:c8:9e:49:17:30:49:d0:57:02:fd:29:34:
a9:df:27:0d:d3:a5:42:0b:f9:9a:77:81:8b:3b:5b:60:ca:73:
c9:9e:82:84:2d:c4:8e:c5:2f:08:f8:25:eb:12:75:72:f7:df:
1a:c6:13:3e:71:ee:a9:33:81:39:db:88:d4:48:a3:10:0a:19:
44:4e:c1:ec:b4:6a:7a:c9:68:1a:cd:ce:32:5a:e7:e0:7a:a0:
a6:d6:88:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org