Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6vLCe2bMOU8_-W5so0CShHaaHhQ.roa
File: 6vLCe2bMOU8_-W5so0CShHaaHhQ.roa (raw, json)
Hash identifier: iw6jjrgRJoZmw64BeraFkrFm2ylEX8KpieusTtFtK3o=
Subject key identifier: EA:F2:C2:7B:66:CC:39:4F:3F:F9:6E:6C:A3:40:92:84:76:9A:1E:14
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01893AC4EB61801E3781A6CDC01B2C886CAB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6vLCe2bMOU8_-W5so0CShHaaHhQ.roa
Signing time: Sun 09 Jul 2023 13:08:51 +0000
ROA not before: Sun 09 Jul 2023 13:08:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212516
IP address blocks: 2a0e:97c1:10c::/48 maxlen: 48
2a0e:97c1:104::/48 maxlen: 48
2a0e:97c1:108::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:c4:eb:61:80:1e:37:81:a6:cd:c0:1b:2c:88:6c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 9 13:08:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf2c27b66cc394f3ff96e6ca3409284769a1e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:02:88:b4:13:6f:46:3f:ce:e2:c7:8c:bf:53:
cc:ae:a0:4b:9b:d2:eb:22:7e:90:3b:0c:19:6f:48:
aa:c9:24:84:10:b1:7b:8b:0c:a8:ec:49:6f:b6:f2:
6a:d6:0c:03:74:85:1d:fe:f5:80:b3:36:9c:bb:2e:
45:63:a5:ad:e9:2a:d2:7e:b9:e5:40:96:5a:60:46:
35:52:c7:26:32:e8:86:91:94:d7:46:44:b2:c5:f2:
8c:aa:47:62:dc:47:24:fb:51:f3:09:80:69:94:17:
29:92:5a:04:06:b1:a1:eb:43:8b:61:77:bf:a4:93:
90:53:96:f1:7d:6e:db:1e:83:e8:38:ca:00:84:76:
83:ef:ac:d6:f0:11:61:e6:51:24:13:28:c3:d3:52:
ea:40:6c:f1:bc:70:61:ff:f5:10:5b:d0:e7:dc:98:
ba:cf:5e:6e:24:4e:ca:7e:a7:c1:ed:b7:5a:bd:db:
4e:3f:ae:7b:78:65:eb:7f:2a:9c:5d:66:53:39:80:
66:03:70:24:43:03:1c:38:60:1d:61:9b:d2:6f:54:
66:0a:14:2d:64:10:83:b5:89:47:01:1d:52:07:8e:
74:47:e2:ba:db:13:10:0f:b6:01:19:9f:af:48:c7:
ff:10:a7:d7:f6:38:28:ac:12:b6:73:d6:49:02:9e:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F2:C2:7B:66:CC:39:4F:3F:F9:6E:6C:A3:40:92:84:76:9A:1E:14
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6vLCe2bMOU8_-W5so0CShHaaHhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1:104::/48
2a0e:97c1:108::/48
2a0e:97c1:10c::/48
Signature Algorithm: sha256WithRSAEncryption
95:a6:18:e7:09:d6:b5:2e:ca:7d:63:7e:68:99:d3:07:5c:5c:
0b:01:f4:d8:12:21:ae:63:3a:47:75:d5:db:ca:11:16:ae:48:
b3:31:d9:2f:a3:dc:84:cc:1a:c7:b7:c6:10:1e:a3:c4:51:17:
b8:d8:1b:85:d0:b4:74:32:d0:e7:a0:8d:88:c0:c8:8b:81:d4:
5d:8d:bb:cf:44:50:3a:53:77:2a:0e:50:48:21:17:02:54:b1:
69:da:e7:c0:38:f6:0f:5b:f9:c8:a0:b5:2a:98:f8:aa:a5:06:
2f:f9:07:14:a8:49:2d:d0:a3:8f:01:5f:b5:6c:64:10:37:71:
d5:88:b4:cd:0e:86:b4:3d:88:af:75:a7:19:f1:36:15:53:37:
a7:7d:b8:e0:bb:5b:aa:42:7f:83:f0:47:02:05:fc:5b:4f:f6:
ef:9f:57:09:78:db:da:0b:ee:70:f9:38:8a:9d:c4:57:36:36:
a6:8b:5c:6d:7c:36:76:c6:89:01:d7:69:2e:4c:8d:7c:db:df:
2e:6c:71:76:ae:00:88:18:16:68:4c:16:5d:04:4e:58:a5:5a:
cf:c7:0f:5f:4b:06:49:c7:0b:36:46:fd:39:30:ba:93:36:bd:
3b:63:49:9a:8d:01:94:a7:8c:16:c7:e8:f5:c4:e9:ce:8e:42:
12:9a:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 23:13:19 2023 by rpki-client on console-ams.rpki-client.org