Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7KW_ToyIlSl5bg0JmYoBql1Dlgc.roa
File: 7KW_ToyIlSl5bg0JmYoBql1Dlgc.roa (raw, json)
Hash identifier: QEdeOBW5siMsNDUk57ih70EMxt8xlf8+FosBBpuxCU0=
Subject key identifier: EC:A5:BF:4E:8C:88:95:29:79:6E:0D:09:99:8A:01:AA:5D:43:96:07
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018B1074AE45C0AE4E67374D6BEE8097F906
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7KW_ToyIlSl5bg0JmYoBql1Dlgc.roa
Signing time: Sun 08 Oct 2023 18:02:44 +0000
ROA not before: Sun 08 Oct 2023 18:02:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a10:ccc3:ccc2::/48 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:74:ae:45:c0:ae:4e:67:37:4d:6b:ee:80:97:f9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 8 18:02:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eca5bf4e8c889529796e0d09998a01aa5d439607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:c6:40:e6:da:98:f7:b0:4d:eb:d3:b7:79:
b0:8f:67:29:fe:0d:6e:15:ba:f5:dd:d8:32:e5:06:
6a:9b:c2:fd:66:c3:b2:d3:b9:5b:b6:07:73:ff:79:
69:a5:ad:72:11:e5:d7:7c:42:0c:37:92:88:90:ab:
3f:ef:70:a4:73:39:a4:20:c9:50:34:a4:fe:61:89:
85:63:fe:96:08:be:4d:31:63:67:c7:cf:e2:4c:47:
c0:b7:9a:f9:84:82:b4:40:f0:d7:d0:e1:19:0a:3f:
b4:0c:48:17:26:37:19:7a:cd:c0:a4:17:2a:69:9c:
89:ec:c3:5c:69:b2:60:5b:45:f5:d7:94:a7:70:e3:
2a:41:83:a5:4f:ab:5e:05:35:2c:e1:f7:2f:6f:d3:
9c:8e:34:75:7a:e6:c7:32:d5:82:c5:a4:67:93:3e:
5d:50:1b:42:28:fe:e5:31:bd:12:e0:dc:cc:d5:d9:
d7:e7:67:5c:25:70:46:3c:2f:cf:6b:ed:35:70:ae:
61:dc:43:8d:8b:b6:ef:ca:34:fb:2a:3e:59:e8:de:
64:db:6f:9d:f5:49:c9:ab:0d:86:c2:bc:40:be:9f:
7e:e2:e8:47:b6:ce:a2:4a:1f:75:38:d6:1b:35:1b:
cd:9a:4c:3d:dc:cd:1f:eb:3a:b4:73:b4:2f:35:0b:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A5:BF:4E:8C:88:95:29:79:6E:0D:09:99:8A:01:AA:5D:43:96:07
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7KW_ToyIlSl5bg0JmYoBql1Dlgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc3:ccc2::/48
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
35:63:27:69:59:20:9d:c5:de:98:a3:7e:77:f6:76:42:4a:5a:
a3:d2:a8:c5:20:f9:af:6b:55:01:5c:84:16:55:de:a5:fc:36:
3c:6f:2f:a3:8a:38:aa:90:d7:20:54:6f:74:04:a3:5b:fb:95:
1a:a0:09:7d:0a:15:44:7d:e9:89:b9:29:f1:34:93:1d:d5:92:
3f:fa:70:d6:4e:e7:37:54:85:ed:48:fc:56:d9:6a:16:88:aa:
55:a9:79:fe:ab:cb:c8:2e:01:10:c9:3d:c7:c1:84:cc:8e:62:
55:8b:eb:47:6c:b7:c1:33:1a:bb:ef:6e:d7:9a:8a:b2:3c:52:
fc:6a:e2:11:19:21:48:13:78:c6:55:06:95:e7:30:09:7f:74:
77:43:c7:81:da:0e:23:d3:f2:aa:d1:de:39:29:33:ef:2b:60:
f3:8f:06:51:ee:bd:6d:1e:f9:d7:fb:46:5c:b2:76:0b:a2:ce:
6a:c1:1f:0a:3c:99:42:10:7b:fa:c7:3d:b1:cb:45:3f:dd:8e:
ed:65:a1:44:5c:9a:26:a7:9a:98:17:af:32:12:a2:f4:10:e5:
60:be:da:25:eb:c2:82:fa:9c:c9:f9:d0:f7:be:09:38:dc:69:
05:03:de:28:15:28:4a:b7:0f:93:37:db:b9:cb:68:32:cb:38:
04:44:dd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 20:19:36 2023 by rpki-client on console-ams.rpki-client.org