Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6vcsYKniWIABrwS91S7NXRRrwTQ.roa
File: 6vcsYKniWIABrwS91S7NXRRrwTQ.roa (raw, json)
Hash identifier: j3F1U5OULMOsOZtiFvM0Nx7JWUoDP8ogAGvpxa+kAGA=
Subject key identifier: EA:F7:2C:60:A9:E2:58:80:01:AF:04:BD:D5:2E:CD:5D:14:6B:C1:34
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AD933F5A5D833D8E11874AE3417B4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6vcsYKniWIABrwS91S7NXRRrwTQ.roa
Signing time: Tue 24 Jan 2023 16:09:42 +0000
ROA not before: Tue 24 Jan 2023 16:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205531
IP address blocks: 2a0e:b107:178b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:d9:33:f5:a5:d8:33:d8:e1:18:74:ae:34:17:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf72c60a9e2588001af04bdd52ecd5d146bc134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:f8:c4:56:f1:ff:e0:e0:95:cc:23:bb:7e:
f3:a0:0b:a3:4b:38:0e:18:94:03:89:a0:6d:0d:0c:
48:35:51:71:c3:e8:ac:86:11:db:fa:b8:d3:f8:d2:
99:fe:02:b7:fc:e5:8c:12:77:c8:61:57:d1:f5:da:
ea:56:37:7c:42:bd:89:55:21:97:96:8e:a4:a1:67:
b8:fe:01:2c:1d:67:25:00:ef:68:4b:70:44:07:5f:
80:1f:76:01:b4:fc:ad:22:60:85:ff:41:b5:5a:ad:
cb:41:cd:67:26:ef:48:01:d5:18:b1:9f:50:6b:72:
66:52:a9:37:c4:2c:32:5a:7d:8e:94:a5:2f:05:70:
65:a0:61:02:a7:ef:54:ab:ab:ae:7d:11:e0:36:38:
d7:80:10:2f:e8:79:4c:e0:ad:20:f0:d6:28:85:35:
a2:f8:96:ef:34:a2:1d:97:51:79:e0:a6:f7:fd:98:
cd:1d:f2:74:5d:7c:3d:5c:d8:37:72:e1:08:99:35:
8d:9e:be:96:48:0a:f2:b9:04:6c:8b:f4:5e:28:98:
ab:b2:b3:62:80:0f:36:8b:24:38:67:a2:fd:52:d6:
35:c2:5a:a9:3e:b6:0c:68:65:cc:15:2c:fe:37:0b:
75:f1:2e:ef:cf:e1:80:56:5f:ca:61:e8:e3:a4:d0:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:2C:60:A9:E2:58:80:01:AF:04:BD:D5:2E:CD:5D:14:6B:C1:34
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6vcsYKniWIABrwS91S7NXRRrwTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:178b::/48
Signature Algorithm: sha256WithRSAEncryption
c3:b3:ca:28:af:ee:9f:69:de:02:6b:d2:c9:e9:12:f0:15:e7:
e8:e1:20:56:ec:ed:5f:b0:96:ec:5d:d2:48:c0:58:7c:d0:f6:
4f:1c:a3:27:6e:00:5d:36:8a:17:ba:11:f5:7c:43:88:84:23:
6c:f8:fa:58:05:0f:c1:70:28:b5:34:b7:e6:d5:44:54:7b:2e:
4f:11:d5:24:df:16:f7:16:2f:1c:d3:76:a8:42:3a:44:1f:0d:
52:ec:ca:21:4b:02:25:bb:5c:67:aa:72:a7:3b:02:21:7b:69:
87:86:52:2f:6b:5a:be:b0:6f:b3:bc:5f:9e:f7:32:83:fe:2c:
9a:aa:52:9d:86:9d:dc:07:35:fb:e9:85:43:27:13:a1:03:13:
e8:6a:44:db:5b:87:96:cf:bf:d1:66:d4:e0:9a:cc:41:95:3c:
e0:4b:a8:03:b1:60:a5:02:ca:7a:60:28:ed:a4:f1:97:5d:e9:
33:b5:14:91:d7:de:f4:b6:35:f2:c8:bd:da:c8:94:98:b6:31:
8b:df:02:7f:e7:99:26:a3:72:fa:7e:92:fd:a9:79:0d:4e:a8:
b2:77:88:f0:2d:a9:df:fc:2c:91:2b:c6:bf:69:5c:9f:67:bc:
2b:78:0e:17:89:6b:44:b4:dc:3a:09:f5:47:5d:cf:10:1e:3b:
62:0e:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:49 2024 by rpki-client on console-ams.rpki-client.org