Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DOKvF84HT3KkiBLWKEbDrKmaaXA.roa
File: DOKvF84HT3KkiBLWKEbDrKmaaXA.roa (raw, json)
Hash identifier: qGzE4XKRFGJ7XFWuzka/nbG/f/PsY4lqSKI/m5RBMPc=
Subject key identifier: 0C:E2:AF:17:CE:07:4F:72:A4:88:12:D6:28:46:C3:AC:A9:9A:69:70
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E79C0FD6D1AC9C77B7DABA9EAAAA97
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DOKvF84HT3KkiBLWKEbDrKmaaXA.roa
Signing time: Mon 02 Jan 2023 05:15:04 +0000
ROA not before: Mon 02 Jan 2023 05:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147041
IP address blocks: 2a10:cc44:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:9c:0f:d6:d1:ac:9c:77:b7:da:ba:9e:aa:aa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ce2af17ce074f72a48812d62846c3aca99a6970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:32:ef:0d:78:fd:37:34:1a:77:e0:f6:b0:
7d:9e:45:14:ab:57:4c:65:86:9d:26:9a:2d:cf:f4:
65:bd:da:1b:c7:33:81:ea:9f:73:e8:53:b2:a8:5b:
a9:48:89:76:1f:c9:a9:f6:4a:ba:c8:ea:42:51:ac:
c2:12:83:1f:1a:e8:05:db:89:3a:a9:ed:4d:9d:bd:
8e:6e:67:7f:bb:ce:dc:08:c5:c7:1d:f1:b3:e8:45:
b8:bb:87:8d:5b:21:18:13:56:91:73:24:24:d4:39:
5f:d4:c7:e1:98:91:0b:72:ef:58:f8:8a:af:6e:3a:
c7:5d:d3:0d:ac:74:9e:14:ee:d5:59:fd:70:68:f0:
32:9d:84:59:08:b3:26:3e:2c:cb:e7:c6:a2:09:b2:
b5:27:f8:49:89:8a:78:47:ca:f4:10:d0:ae:be:27:
4a:e2:11:fd:9f:27:dc:52:7b:20:d3:00:ea:9b:af:
46:b1:98:50:53:8c:04:8e:b3:9f:91:43:2f:a9:bc:
d9:68:5a:aa:55:be:70:d4:04:99:a8:8f:96:a0:ec:
8e:77:96:95:de:b2:53:b5:60:55:4d:64:08:5a:9c:
0b:4f:fa:12:1d:0a:06:fd:bc:bd:69:71:92:b9:07:
b8:39:e0:8a:24:e7:5f:55:ff:82:01:e7:96:bb:4a:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E2:AF:17:CE:07:4F:72:A4:88:12:D6:28:46:C3:AC:A9:9A:69:70
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DOKvF84HT3KkiBLWKEbDrKmaaXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:100::/44
Signature Algorithm: sha256WithRSAEncryption
c1:03:ef:8f:76:4a:b3:b7:bb:d3:ed:8f:4e:db:4f:5c:b9:36:
d1:65:ce:15:78:d0:49:e0:73:75:0c:2c:b9:5e:c9:2d:f0:40:
fe:71:00:5b:48:02:28:ed:f7:24:8e:30:0b:fe:e2:ef:bf:e4:
1d:b0:9e:2d:a2:da:46:23:4d:23:eb:fd:a1:37:9d:96:1d:8e:
a2:65:83:c7:3b:ee:b9:6d:30:3e:a2:d8:5c:02:7e:ac:bc:1d:
dd:c5:97:58:c9:d9:94:e0:c4:39:4f:c4:30:5c:89:48:51:e1:
ee:b6:1e:01:36:aa:a4:32:90:f7:09:03:81:80:92:93:f0:4a:
4f:75:9b:e0:71:70:7d:91:d3:2f:a8:0c:02:be:08:45:c0:f2:
67:36:37:8b:80:c8:00:17:b6:2c:a1:e3:98:e7:19:df:02:d5:
84:94:0e:c2:e0:8c:4f:e5:be:90:c2:7e:6c:d5:22:8f:d7:1f:
20:cd:84:8b:17:39:b8:af:4b:55:c7:fd:3f:e5:ca:33:f1:35:
3e:14:62:2a:81:e8:a2:7f:28:5a:14:2b:9a:fe:6f:b1:dd:02:
7e:29:a0:70:cb:a0:bd:e4:3b:aa:57:4b:f5:4e:a9:fb:16:19:
3a:9d:00:9b:65:99:0c:1f:67:fb:78:4d:7c:13:da:c7:fd:1b:
17:0e:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:49 2024 by rpki-client on console-ams.rpki-client.org