Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6bwu9kOZ21_L1_AjEOiDeINRW68.roa
File: 6bwu9kOZ21_L1_AjEOiDeINRW68.roa (raw, json)
Hash identifier: 5Qb7kWJeu9HPDWotmsppUXvcp/QUE5ohd8XQGsgl4fI=
Subject key identifier: E9:BC:2E:F6:43:99:DB:5F:CB:D7:F0:23:10:E8:83:78:83:51:5B:AF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018900E9CE161E6290DB40AD57F331784D9F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6bwu9kOZ21_L1_AjEOiDeINRW68.roa
Signing time: Wed 28 Jun 2023 07:31:09 +0000
ROA not before: Wed 28 Jun 2023 07:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198016
IP address blocks: 2a0e:97c0:d00::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:00:e9:ce:16:1e:62:90:db:40:ad:57:f3:31:78:4d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 28 07:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9bc2ef64399db5fcbd7f02310e8837883515baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:93:69:3a:50:c8:87:6d:5c:c7:ce:e0:3a:
71:ad:ab:76:4f:0b:7a:4f:b1:b5:81:49:34:d5:78:
81:49:f9:5e:ee:af:6c:a5:50:4d:44:60:05:c6:f0:
ff:2c:a5:ed:f4:f4:7a:7b:28:b1:82:52:69:c7:fb:
8a:46:f4:ce:cd:6a:4f:93:4e:c4:d7:1c:fb:ac:b6:
57:bb:dc:7b:87:34:50:31:40:85:eb:b3:1d:28:43:
04:7c:22:00:b4:f6:8b:70:5d:17:8a:1f:6a:26:73:
2c:77:8c:10:79:d5:f8:8c:8b:ab:e3:5f:82:ac:ba:
46:44:6f:11:49:6f:5b:f1:36:54:4b:fc:74:1d:39:
61:fe:26:c1:2a:b3:0d:bc:0d:f9:6f:15:ab:00:83:
d4:28:be:6a:64:da:b9:34:14:62:ba:10:c1:0d:89:
26:8f:d1:f9:7e:99:8d:5d:3e:75:be:2a:d5:9a:0a:
04:ad:46:3a:57:ca:92:8e:f7:38:a3:1b:ac:48:45:
2f:1e:57:08:0e:33:33:9d:88:cf:77:0b:63:b4:b2:
ef:f0:bf:93:9b:f2:7d:96:5a:92:f6:3d:e3:a7:4b:
1e:a0:f1:21:06:5f:3e:ed:5e:8b:56:61:2b:ff:1f:
c7:81:b5:5a:19:0f:48:9d:04:c8:35:de:ea:c7:ac:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:2E:F6:43:99:DB:5F:CB:D7:F0:23:10:E8:83:78:83:51:5B:AF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6bwu9kOZ21_L1_AjEOiDeINRW68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d00::/44
Signature Algorithm: sha256WithRSAEncryption
52:d8:4c:99:84:fc:67:d4:59:cc:52:0f:bb:2b:c7:95:32:d5:
6b:60:8b:7d:51:6d:c5:12:1a:10:3a:d4:46:2d:31:a2:38:4a:
87:1d:82:e1:57:42:33:86:16:ab:ad:e0:6f:d8:b0:4b:3a:d9:
90:05:08:7d:2f:29:b2:6d:45:01:eb:45:46:ae:f7:a1:43:ac:
d0:cc:1f:8e:79:7b:6a:52:9d:06:0a:4c:54:c2:55:78:24:5d:
6f:07:c8:c2:5b:fa:a7:13:f7:27:75:98:f6:be:5e:11:48:56:
1c:69:0b:47:a4:53:ce:45:39:90:54:54:35:d6:6f:13:8b:41:
bb:87:6f:7f:9a:d5:19:fb:20:59:82:49:23:6a:3d:3f:9a:84:
bb:8d:07:e3:d1:26:35:dc:f0:5a:cf:72:e8:1f:d7:ec:d1:22:
45:72:c9:35:98:fe:06:ca:54:1c:1b:c0:58:fb:e2:8b:67:8f:
ed:11:ea:79:50:52:97:e7:cd:df:82:e4:6b:c2:74:57:98:ea:
b6:56:0a:49:0e:52:c3:01:89:7f:04:21:37:9a:fc:12:b3:98:
55:57:b5:5b:cc:82:95:05:d8:2f:58:8f:3a:e1:f3:4a:b8:42:
e8:8a:de:e7:58:ed:6b:e7:2e:21:07:8e:b9:4e:21:e3:49:ab:
a3:3e:ba:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org