Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7hlY9yxSdxhhO7mnJDezjUvI71M.roa
File: 7hlY9yxSdxhhO7mnJDezjUvI71M.roa (raw, json)
Hash identifier: csnFTR90lrRrraV0PRpq0eIXxn9aiUH0YD6p5RwuSpM=
Subject key identifier: EE:19:58:F7:2C:52:77:18:61:3B:B9:A7:24:37:B3:8D:4B:C8:EF:53
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AC5282150A9B8BC9D41EE182DC1D5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7hlY9yxSdxhhO7mnJDezjUvI71M.roa
Signing time: Tue 24 Jan 2023 16:09:37 +0000
ROA not before: Tue 24 Jan 2023 16:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140936
IP address blocks: 2a0e:b107:bd0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:c5:28:21:50:a9:b8:bc:9d:41:ee:18:2d:c1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee1958f72c527718613bb9a72437b38d4bc8ef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:b9:eb:14:67:df:55:db:c9:cc:d8:ee:07:
37:f5:a2:52:3d:65:98:87:63:d9:35:9c:44:80:68:
9c:e9:3f:72:e9:44:34:e0:24:0b:ec:bc:51:57:d6:
1c:ff:0f:b2:24:3e:cb:c5:5e:c6:35:1b:d3:d8:fe:
41:e3:d8:ac:7a:79:7d:70:04:3b:3c:8c:2d:8d:f5:
a1:76:da:54:ba:21:fd:a7:de:9d:1b:0c:0f:42:7f:
8a:b2:8a:39:3d:b4:72:9e:2b:c6:ba:61:93:8c:95:
7c:05:ac:79:31:79:83:70:cb:50:3a:d3:26:80:30:
f0:8c:72:f9:e5:c9:a8:3d:ab:5b:70:7c:39:e0:7b:
6c:38:c9:37:d6:3b:36:f6:7a:f5:c8:4c:f5:0b:48:
fa:2d:08:3b:54:3e:68:33:22:2e:15:d8:02:e5:f5:
f8:d6:86:ef:00:2b:12:4a:1c:50:7c:30:d3:83:f5:
e6:42:72:07:8c:0b:74:8a:da:8d:97:81:30:80:b0:
76:ba:6c:d6:4e:63:b0:bb:17:fa:c4:df:95:9b:50:
06:57:b7:f6:eb:73:56:dc:7f:63:a9:7d:a8:3b:7d:
65:fb:f5:a4:d8:27:a3:64:b8:62:ac:d2:bc:dd:5a:
62:23:7b:19:d9:6c:34:2c:e1:1b:78:c6:a2:d0:0b:
9a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:19:58:F7:2C:52:77:18:61:3B:B9:A7:24:37:B3:8D:4B:C8:EF:53
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7hlY9yxSdxhhO7mnJDezjUvI71M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:bd0::/48
Signature Algorithm: sha256WithRSAEncryption
cb:63:63:2e:85:89:38:a3:21:17:ca:a3:f3:ad:55:dd:6c:6c:
2a:f2:9c:98:b4:ba:48:90:4f:5c:c9:f6:f1:c5:b3:18:f0:ce:
a5:3c:b7:b0:a3:0c:22:61:95:42:72:28:87:d1:c0:23:11:df:
3d:f6:02:a6:ac:1c:74:af:41:8e:eb:9b:40:54:86:03:04:cd:
b3:e3:d4:90:e2:94:bb:dd:79:c7:59:26:a7:ad:f2:9a:24:a8:
4b:d3:df:d8:df:c7:e0:66:88:11:97:80:1a:1f:eb:c2:c9:82:
e4:cf:fd:f3:06:3e:2c:c2:84:97:3c:6e:40:64:44:47:d3:59:
a6:a0:57:d9:87:1a:a4:93:7a:4a:47:45:b9:71:0e:f4:12:5b:
a6:dd:d3:c1:78:4b:80:60:bb:2d:8f:59:ac:3c:1d:7f:23:74:
6b:b8:b8:fe:45:9a:c5:62:25:78:df:cc:cb:d4:09:83:69:02:
a3:b5:f6:db:33:44:5b:ff:04:4a:62:9a:c8:2a:ff:2b:6f:dc:
d3:70:10:fa:61:1e:f6:f8:b3:cf:f5:9d:e3:4f:1e:85:b9:fe:
e1:74:8e:f0:94:da:ed:65:cd:5b:56:e2:44:d1:8a:66:1a:9f:
b6:08:cd:34:07:7d:4d:45:1f:d8:d5:b8:3c:dd:b5:76:f7:b8:
10:7b:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:49 2024 by rpki-client on console-ams.rpki-client.org