Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BydrBrQ2E5IfnEF9QHQEyQBwqBw.roa
File: BydrBrQ2E5IfnEF9QHQEyQBwqBw.roa (raw, json)
Hash identifier: vOvOKD1zxT/SNJpbox3hefXSVainQWaWWT67/3G2c1Q=
Subject key identifier: 07:27:6B:06:B4:36:13:92:1F:9C:41:7D:40:74:04:C9:00:70:A8:1C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7EC2F7CF709732218B13596BFB8E2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BydrBrQ2E5IfnEF9QHQEyQBwqBw.roa
Signing time: Mon 02 Jan 2023 05:15:25 +0000
ROA not before: Mon 02 Jan 2023 05:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210563
IP address blocks: 2a10:cc44:170::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:ec:2f:7c:f7:09:73:22:18:b1:35:96:bf:b8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07276b06b43613921f9c417d407404c90070a81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c2:ba:97:d3:61:ea:20:82:ba:cf:3a:96:3d:
69:68:4a:99:8f:42:85:c0:4c:1c:cc:b9:f0:79:2c:
2d:40:b5:20:87:dd:c9:e6:e1:2a:d8:a0:f2:14:12:
53:e8:45:04:20:e8:b6:8c:a7:c3:38:13:62:79:73:
fd:ff:14:23:03:47:80:e0:27:43:35:fb:9d:15:ee:
a2:6d:3c:b5:41:98:18:d3:5e:00:d5:c6:8d:79:a0:
4a:89:94:2b:01:f2:a9:27:ea:f1:bf:32:a7:e8:07:
73:a6:11:5d:e7:a2:2b:e2:00:83:b6:ad:2c:75:86:
8e:48:2e:7b:d3:fd:55:55:48:5e:13:04:8d:29:ea:
0c:76:b0:08:92:89:72:b2:68:09:af:e0:52:d9:55:
01:3d:a5:3b:0a:70:bc:78:e3:7f:98:ec:e4:a0:e3:
f7:cd:04:47:9f:65:02:2a:a9:21:71:e3:8b:61:eb:
89:45:96:33:53:05:f3:3d:93:81:26:3e:06:ef:1f:
39:3b:37:2c:0a:a0:88:4d:7d:41:ab:24:fa:7f:fa:
0d:42:29:bb:a5:65:fc:2f:4e:f6:7f:21:a0:7d:99:
12:c6:8c:3f:af:d6:c8:90:bf:f4:b3:07:9e:9b:97:
cf:58:11:c5:47:9d:e7:ba:02:0a:cd:c2:0a:cd:71:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:6B:06:B4:36:13:92:1F:9C:41:7D:40:74:04:C9:00:70:A8:1C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BydrBrQ2E5IfnEF9QHQEyQBwqBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:170::/44
Signature Algorithm: sha256WithRSAEncryption
37:cb:33:9a:a5:42:44:5a:76:a2:e0:29:5f:b5:dc:fa:ff:0a:
e1:66:88:d0:a6:29:c5:6d:1f:8f:9f:b9:27:41:96:3d:b4:e9:
f6:1f:37:b4:5f:28:84:6c:00:8f:43:12:cb:77:d6:62:36:2b:
ff:88:36:bc:73:86:a9:61:0c:88:fa:48:83:42:70:88:6b:b0:
75:4c:94:3a:74:3f:c8:dc:bc:e2:64:f3:40:e9:17:3e:7f:e7:
1c:e4:f2:fb:14:31:73:21:b2:5e:fe:b7:75:f8:0c:92:bc:4a:
94:46:65:74:23:2d:97:a1:04:9d:d9:11:33:62:49:2f:7d:f0:
15:2d:26:59:46:6d:89:3a:3a:d1:b8:6b:42:50:04:19:02:b6:
87:26:66:d2:41:52:b6:de:28:1f:9a:78:1b:71:52:f2:10:b0:
f7:7d:c6:ae:d5:6d:87:f9:57:d7:a3:dc:d7:1e:b3:73:ad:64:
a6:58:38:73:58:42:80:0a:a3:bc:a7:f5:2c:7c:a6:70:6c:6a:
61:cd:47:9a:c9:da:20:a0:9c:f9:f9:af:de:50:1c:a1:ea:b1:
50:0b:9b:68:8b:10:95:a2:3e:df:01:fb:ae:5f:98:6b:a6:6f:
ca:73:63:dd:54:7f:00:27:8f:58:33:04:a6:52:84:d5:6e:e5:
30:ac:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:49 2024 by rpki-client on console-ams.rpki-client.org