Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7Huj4LTH0BDCfVnSgmW6TBERs3U.roa
File: 7Huj4LTH0BDCfVnSgmW6TBERs3U.roa (raw, json)
Hash identifier: SkMa3e5ZuVL84yfKQU6rIky3PsjIxvWi5wX2KFKQdu0=
Subject key identifier: EC:7B:A3:E0:B4:C7:D0:10:C2:7D:59:D2:82:65:BA:4C:11:11:B3:75
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7C5D06DDBB36145904FFEDF0EBF4A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7Huj4LTH0BDCfVnSgmW6TBERs3U.roa
Signing time: Mon 02 Jan 2023 05:15:15 +0000
ROA not before: Mon 02 Jan 2023 05:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205740
IP address blocks: 2a0e:97c0:a60::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:c5:d0:6d:db:b3:61:45:90:4f:fe:df:0e:bf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec7ba3e0b4c7d010c27d59d28265ba4c1111b375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:88:ce:d7:c5:d3:bd:e1:c7:24:86:b0:36:d9:
45:2e:7c:7a:66:9f:61:87:f0:aa:97:57:94:bd:39:
1a:fd:b7:c3:4c:b0:b2:94:b1:3c:5a:39:ea:3d:2a:
e2:90:c7:1d:a8:ce:6a:39:84:60:53:80:3a:15:db:
82:26:08:6e:88:af:f7:ac:08:ba:c8:37:01:57:0e:
f1:e5:fe:53:cd:bd:21:16:29:d9:69:f8:08:ed:10:
99:7a:5f:ae:8a:42:d5:56:44:96:0e:e6:99:cc:11:
fd:73:a0:8d:26:c5:4a:e0:01:dc:4b:c2:fe:17:b1:
c8:8d:94:04:37:bd:89:dd:d3:fb:e5:d3:0f:d1:d2:
26:f1:8d:c7:28:46:bb:bd:4b:88:ac:58:a4:41:9e:
4c:16:bb:cb:1b:e3:55:35:b3:15:7d:c1:56:ef:c3:
53:10:45:6b:10:aa:85:16:e8:53:6c:51:75:a4:d4:
e3:39:e9:89:ca:41:40:12:ed:78:40:47:19:c9:5f:
db:3a:85:7a:79:75:5c:db:24:b5:70:44:16:81:cf:
a1:55:06:a4:ae:99:49:1d:3e:42:29:fd:9c:f9:8c:
69:3c:68:11:73:09:ba:7d:78:99:0a:74:8c:01:cf:
94:17:99:43:3a:43:43:e0:f0:c5:ed:87:82:d5:96:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7B:A3:E0:B4:C7:D0:10:C2:7D:59:D2:82:65:BA:4C:11:11:B3:75
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7Huj4LTH0BDCfVnSgmW6TBERs3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a60::/44
Signature Algorithm: sha256WithRSAEncryption
bc:a4:96:f3:cc:bb:12:d9:be:00:b9:8f:11:8a:5c:5f:ec:a6:
0a:47:1b:de:f3:53:02:ce:eb:25:74:10:5e:1c:5c:19:6b:89:
d9:ed:d2:f2:fe:d8:d2:dc:90:00:86:42:2d:44:ec:d2:fa:cf:
fd:79:17:32:67:cb:33:49:4c:41:dc:ac:ff:2c:1d:0b:b3:e1:
61:d0:4b:0d:38:af:b9:63:8a:03:84:1c:97:7b:39:01:7c:ec:
1a:fb:09:de:84:92:32:5f:35:ec:5a:28:4a:95:3a:7c:a7:9f:
3e:e8:49:51:21:a0:5c:76:46:44:40:16:cf:28:78:34:8a:fc:
b0:2f:99:04:99:32:c9:3f:b4:e1:f0:fe:c4:c6:70:a9:c0:00:
42:55:cb:38:77:4d:85:73:1f:0b:bc:c6:16:6a:a0:f4:57:e8:
e5:14:10:d5:b9:75:b4:91:91:57:1f:79:0d:00:7f:dd:81:9a:
f3:dd:da:a9:da:9b:27:ae:c3:5e:1d:12:88:53:b0:e5:48:33:
c0:54:85:39:f9:5c:a3:c8:4d:ac:fd:df:7a:80:1e:0b:89:20:
c1:7f:67:7e:6b:95:d8:c0:e0:eb:08:24:44:ee:23:f2:c8:bd:
22:4f:5f:6a:bc:3c:86:9e:3f:d5:c6:60:59:d7:fe:e8:be:50:
c5:52:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org