Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8rOFEz7s9K6emHFDZ52hVV5JJTk.roa
File: 8rOFEz7s9K6emHFDZ52hVV5JJTk.roa (raw, json)
Hash identifier: 1rgNSLCBluB/lFYDUYejsB746ZhkO0mCYX7V0xMGxpg=
Subject key identifier: F2:B3:85:13:3E:EC:F4:AE:9E:98:71:43:67:9D:A1:55:5E:49:25:39
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AE283881A8093A18CBFD0E3F6B81D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8rOFEz7s9K6emHFDZ52hVV5JJTk.roa
Signing time: Tue 24 Jan 2023 16:09:45 +0000
ROA not before: Tue 24 Jan 2023 16:09:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209101
IP address blocks: 2a0e:b107:510::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:e2:83:88:1a:80:93:a1:8c:bf:d0:e3:f6:b8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2b385133eecf4ae9e987143679da1555e492539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:51:26:2d:99:21:8d:51:99:22:96:3e:d0:ab:
a2:d3:34:96:93:ff:e4:b3:c8:88:aa:e5:d3:8d:04:
3b:61:13:c6:30:32:36:1b:8b:10:83:68:1d:29:51:
82:05:c4:40:69:8d:89:2c:a6:81:bc:09:6c:f8:19:
67:25:25:21:89:43:60:b6:63:a7:8c:8c:6f:f4:01:
78:7a:e1:e0:51:00:51:65:e5:74:63:51:01:d2:8e:
8a:62:ff:14:42:3b:77:cf:0d:8f:18:2d:ad:3e:7e:
83:85:58:c4:c9:10:61:3d:60:90:bb:49:d9:95:41:
83:4b:60:02:a3:c5:c2:df:00:23:03:52:59:f9:1e:
e2:b6:a4:23:22:67:49:f1:66:08:cc:8a:1e:45:fd:
6a:22:8e:56:93:f3:0f:5f:33:61:cf:06:9f:1e:d1:
61:86:b9:a3:82:06:30:cf:35:54:48:21:21:93:9f:
55:67:fc:2a:13:dd:03:84:ca:0c:0e:60:3f:8c:de:
27:fd:7e:3a:a0:bc:92:0c:d1:ee:d3:d3:03:3b:67:
9b:0b:a0:a1:3f:3c:6e:74:84:55:dd:b8:95:22:55:
84:d9:35:9f:10:b9:51:6a:72:b8:91:9c:66:d9:18:
f2:e5:18:3f:9c:b5:9f:10:73:6a:6e:d8:ad:9a:26:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B3:85:13:3E:EC:F4:AE:9E:98:71:43:67:9D:A1:55:5E:49:25:39
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8rOFEz7s9K6emHFDZ52hVV5JJTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:510::/44
Signature Algorithm: sha256WithRSAEncryption
4f:b2:80:d9:70:7a:f7:84:fd:3b:98:a7:21:5d:af:a2:35:1b:
96:d8:cc:23:01:a2:95:b3:e1:7b:21:a8:57:18:67:0e:be:f1:
28:3b:fa:1a:f6:9e:6b:d0:eb:41:7d:63:2f:65:a9:b5:b1:20:
0e:bc:76:dd:a8:99:b0:ca:f4:e3:bf:d1:72:cc:7a:ef:0c:38:
c7:79:f7:04:3f:82:4d:ed:8d:27:c9:c8:30:a5:81:c5:b1:43:
4e:05:f0:de:8f:0f:f2:34:07:e3:85:09:c2:d6:1c:2f:b3:01:
63:2d:e3:57:65:75:31:c8:f5:5e:80:28:51:73:5a:dc:55:16:
76:f9:26:ce:41:fb:2d:24:95:e1:cb:b2:8e:d8:c7:c2:a8:b3:
20:22:3e:31:bb:b1:88:25:b0:90:39:b0:93:65:c3:02:30:fe:
e9:da:06:ce:ae:69:cd:3f:cd:b4:1f:c2:4b:40:72:2c:e9:98:
69:45:75:7e:12:43:6d:c7:6e:af:0e:b7:8d:f7:f1:24:2f:af:
1e:cf:09:bd:ed:85:96:3e:86:c9:3b:69:f7:22:1d:bf:af:7b:
0f:fd:6d:68:39:ee:c6:a2:0e:a5:27:98:f8:8a:68:cd:bc:2d:
0b:21:0c:3e:da:dd:4d:0d:39:6a:84:b6:52:26:9e:82:9c:0b:
9f:93:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org