Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D1G50Gb3eAQMjWMKvp9dxbTHVpU.roa
File: D1G50Gb3eAQMjWMKvp9dxbTHVpU.roa (raw, json)
Hash identifier: 9GlQkvPzUQgaAMhrtxMlLtACdl+GJER12ZDHcSWkreQ=
Subject key identifier: 0F:51:B9:D0:66:F7:78:04:0C:8D:63:0A:BE:9F:5D:C5:B4:C7:56:95
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E781312D822672CF47F8EE8AF92372
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D1G50Gb3eAQMjWMKvp9dxbTHVpU.roa
Signing time: Mon 02 Jan 2023 05:14:58 +0000
ROA not before: Mon 02 Jan 2023 05:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48987
IP address blocks: 2a0e:97c0:700::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:81:31:2d:82:26:72:cf:47:f8:ee:8a:f9:23:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f51b9d066f778040c8d630abe9f5dc5b4c75695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:a8:57:6c:ce:9b:42:9c:00:d0:ef:5e:8f:
59:a2:05:bd:7a:21:2e:81:a3:f1:46:6b:21:d7:09:
08:19:3e:4b:ac:e8:a9:6f:a7:18:aa:c1:fc:46:fb:
04:a7:ff:72:f5:73:6d:4b:34:81:5f:e1:85:2d:34:
2d:a7:24:b2:a1:8c:7f:6e:aa:00:63:50:36:72:b0:
15:17:2d:1c:70:b9:72:8f:b4:d1:7f:ab:83:53:66:
13:3a:c6:b5:30:64:c4:22:0a:21:e0:71:6a:4f:86:
af:3a:db:73:08:b3:9f:a4:56:62:fa:08:52:f8:69:
72:88:5a:a0:a0:a5:57:c5:c0:d2:37:80:c0:cc:88:
4e:aa:fa:ff:0a:2c:eb:7d:22:8b:64:f1:ca:db:31:
93:dd:3b:c1:6e:e0:1e:5f:a1:62:ed:07:00:bf:94:
ad:09:50:dc:18:b5:2f:4e:0e:89:16:0a:63:ef:ca:
4b:e2:36:6e:fa:ea:2c:cc:b3:c2:0a:e7:0f:48:d4:
42:a2:57:a9:ec:27:74:4d:f0:ee:09:52:e1:04:1a:
2f:4a:8f:20:b0:56:74:a3:78:49:69:ae:6f:89:e2:
c9:7a:d1:e3:87:8d:fd:f1:38:8d:ce:3d:01:ae:57:
33:4f:fd:55:d9:49:63:4b:3d:df:23:55:8b:57:3e:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:51:B9:D0:66:F7:78:04:0C:8D:63:0A:BE:9F:5D:C5:B4:C7:56:95
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D1G50Gb3eAQMjWMKvp9dxbTHVpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:700::/44
Signature Algorithm: sha256WithRSAEncryption
b3:54:0a:9a:74:e5:8c:c5:39:60:41:b0:7d:e7:f7:d9:b8:b3:
d5:4b:d9:14:e1:b1:20:b9:1e:f0:06:74:d4:5d:e6:18:da:38:
ef:85:e5:24:76:3b:03:aa:e5:b4:23:e2:46:93:bc:d9:32:e5:
ba:cb:fd:a6:b6:3a:8d:b9:3a:6a:d7:17:b0:20:e5:28:0d:39:
6f:3b:00:56:21:7d:97:55:2e:73:07:38:82:1d:fc:88:f1:03:
ee:77:74:af:8a:ca:1c:ac:c0:48:de:a4:91:cd:0a:3b:9d:54:
d7:cf:66:78:57:a8:9a:f7:ff:61:bc:b7:7a:ec:6f:f0:04:25:
d4:68:3a:65:80:a9:5e:8c:75:30:b6:ab:04:3b:e6:c7:c8:e7:
3d:b2:e6:2a:b6:12:7c:1f:2b:40:da:af:26:8d:8a:53:80:d0:
19:74:5b:89:a2:42:a6:fe:e3:a0:00:1a:5f:78:4c:84:da:e2:
2b:d1:19:52:05:88:a3:43:3b:05:c4:f8:3f:d1:43:84:dc:b9:
0c:df:17:cc:93:ce:1e:54:0f:b1:2f:5b:65:18:8a:90:5f:fc:
5a:bb:cc:0f:c2:3d:a9:42:11:17:29:e1:a1:c3:22:74:09:c4:
89:51:5f:02:1f:39:e4:a1:59:ee:28:bf:0e:60:3b:99:82:9f:
d5:a3:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org