Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/91XuThdTWMTgja9pOCZioCH3mOQ.roa
File: 91XuThdTWMTgja9pOCZioCH3mOQ.roa (raw, json)
Hash identifier: a/n2gkE0sJsBWNv4od6ISliwhAwTep2e73uAZbJgR0g=
Subject key identifier: F7:55:EE:4E:17:53:58:C4:E0:8D:AF:69:38:26:62:A0:21:F7:98:E4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018658CD487B25E77DB93E6CFDEA4A4F4E46
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/91XuThdTWMTgja9pOCZioCH3mOQ.roa
Signing time: Thu 16 Feb 2023 05:58:13 +0000
ROA not before: Thu 16 Feb 2023 05:58:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208454
IP address blocks: 2a10:cc44:1d0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:cd:48:7b:25:e7:7d:b9:3e:6c:fd:ea:4a:4f:4e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 16 05:58:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f755ee4e175358c4e08daf69382662a021f798e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:ae:f7:48:40:47:da:4f:72:05:5f:e7:e0:
59:1d:20:29:50:48:67:79:d6:99:6d:24:7b:85:1c:
44:bc:19:d1:3e:de:20:03:4d:11:55:2a:8e:b8:7d:
e4:9b:1f:85:d4:33:61:55:42:76:07:7a:71:d2:2e:
42:07:fa:d1:14:38:d5:3e:29:6e:db:46:fc:20:dc:
70:09:d4:63:fa:47:13:a8:64:49:4e:45:80:eb:1c:
62:9c:aa:12:04:3c:b4:7e:40:19:21:94:0f:2c:42:
e6:00:a5:6f:12:d8:6b:f1:0e:3b:ea:ba:49:91:30:
84:a1:d0:cb:29:7c:08:25:0c:fb:35:7c:29:f8:b9:
cb:d0:8a:a9:ba:84:f0:41:d2:34:c5:71:d0:ac:c4:
22:6d:c4:94:ce:1c:48:d7:2b:49:32:ec:24:36:cc:
b3:67:a9:dc:ee:9d:52:f9:98:d2:46:7c:b4:d7:0a:
c6:0c:c4:19:9b:99:e3:d0:43:44:e8:28:39:e7:aa:
16:cb:36:42:1c:80:05:9e:f8:41:59:a2:72:5f:63:
2a:72:98:65:75:6c:9a:79:69:9e:84:4e:ea:b7:66:
ee:bf:4c:87:f2:c4:e1:87:57:ee:e7:79:58:36:fc:
a8:ad:b2:61:9b:ab:e8:69:1d:9e:1f:6f:ea:f0:66:
ec:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:55:EE:4E:17:53:58:C4:E0:8D:AF:69:38:26:62:A0:21:F7:98:E4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/91XuThdTWMTgja9pOCZioCH3mOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:1d0::/44
Signature Algorithm: sha256WithRSAEncryption
29:83:fa:af:02:3b:be:4a:d4:8a:fd:d1:16:13:91:03:5c:44:
8c:37:49:ab:48:b4:8d:b2:b2:c9:91:bc:eb:81:45:59:03:88:
2d:b2:c2:4e:8f:cb:65:af:c9:0c:fd:7d:63:5e:45:a2:73:33:
43:85:9b:52:66:ce:99:4a:50:01:12:f5:b4:0f:24:37:4f:cc:
ba:f0:c0:5d:14:95:93:ef:32:40:6a:30:41:a7:86:49:f2:92:
10:9b:ca:60:44:da:ce:ec:1b:e7:cc:c7:61:fa:2f:dd:2d:e4:
8a:4c:b4:f1:42:b1:75:a2:5d:35:9c:9d:7e:55:96:d4:6e:13:
aa:ad:28:01:92:c5:70:5e:6d:a0:98:26:a9:54:2f:74:7f:f4:
43:d8:e3:06:56:a6:60:d8:d2:c8:ed:6a:07:51:f4:14:2d:15:
ff:a6:88:27:8d:1f:48:77:aa:95:4d:9d:e3:3a:20:3f:13:ec:
78:bf:c0:67:3d:c9:b7:31:5b:5f:29:f7:bd:68:96:49:18:88:
23:ee:ce:be:93:31:14:27:c3:0d:97:c7:04:3b:70:32:bf:25:
45:78:0f:d5:98:e9:1e:7b:73:01:1b:2e:40:7e:6e:2e:30:55:
ea:08:36:f1:c4:c9:95:12:3b:38:9f:6a:7e:ba:59:72:f0:10:
e0:30:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org