Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E6GIxKHgrYXULOawfqQw3cmdwo0.roa
File: E6GIxKHgrYXULOawfqQw3cmdwo0.roa (raw, json)
Hash identifier: 3atHxh9kQCNGkiySr1vfXUMoT6ofbrwiABDm3zo9AeE=
Subject key identifier: 13:A1:88:C4:A1:E0:AD:85:D4:2C:E6:B0:7E:A4:30:DD:C9:9D:C2:8D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AFC4B0FBDE766D7C283AD490E4A90
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E6GIxKHgrYXULOawfqQw3cmdwo0.roa
Signing time: Tue 24 Jan 2023 16:09:51 +0000
ROA not before: Tue 24 Jan 2023 16:09:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212034
IP address blocks: 2a0e:b107:3e0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:fc:4b:0f:bd:e7:66:d7:c2:83:ad:49:0e:4a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13a188c4a1e0ad85d42ce6b07ea430ddc99dc28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:6c:b1:1f:2b:32:19:e6:a7:2e:02:43:4d:
cc:5b:00:fb:42:4b:82:58:25:77:f6:05:29:28:b6:
de:cd:9c:29:65:ad:83:6c:e2:5c:fd:35:9d:70:67:
46:94:70:a5:64:57:80:78:48:90:20:30:f9:f5:b1:
57:cc:45:f0:0d:c5:90:93:b7:0f:a3:57:e0:70:7d:
be:9f:b8:16:79:5a:d8:41:83:12:96:22:4c:30:18:
57:30:85:d6:6c:05:58:c2:ee:c0:be:f8:ca:66:d4:
be:ba:e2:5b:28:9f:89:7b:2b:e1:a9:64:44:34:35:
df:fc:a1:34:33:01:9e:1a:bb:36:50:7c:76:35:34:
63:a1:98:b4:92:01:2b:0f:0c:d5:d5:fd:e6:3c:0d:
fd:f3:12:08:c4:e4:6b:f9:06:d7:c2:b7:2c:2b:88:
f1:b4:42:2a:1a:59:6f:fc:84:16:b0:6d:cc:3a:92:
6b:2c:f5:3f:da:77:50:f3:e2:7f:68:7e:0b:ca:05:
65:60:cc:54:f9:ba:c4:cc:cb:fd:2f:65:3e:bb:f0:
17:e7:8f:39:8b:68:6c:49:e8:ae:d3:5b:7c:13:0b:
92:86:09:1a:c2:1a:07:80:06:0b:aa:c7:15:9c:76:
9d:14:99:a2:17:a6:8d:bc:82:01:07:f7:96:a1:0c:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:88:C4:A1:E0:AD:85:D4:2C:E6:B0:7E:A4:30:DD:C9:9D:C2:8D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E6GIxKHgrYXULOawfqQw3cmdwo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:3e0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:99:72:b8:18:f9:09:35:5c:bc:a4:c7:18:47:dd:d5:34:91:
48:78:cf:57:50:75:1b:d4:b5:44:82:1a:13:43:cd:d4:23:71:
5a:a0:7c:2f:33:58:f2:2d:1c:6b:25:5e:3b:e7:9f:17:24:23:
5f:fd:d9:12:79:23:a0:76:e8:4b:ab:9d:8c:06:71:91:74:3f:
a3:14:87:28:68:a3:87:4e:b1:a2:12:94:49:5e:98:dd:75:10:
95:4e:bc:dc:08:f8:4a:e2:41:95:a9:a5:57:d4:e8:4a:a4:98:
89:39:c0:0e:ff:8e:3e:18:73:17:ea:7a:f9:83:2c:64:d6:2b:
a8:22:b4:e0:67:5a:9a:06:75:e5:56:3f:b6:c5:65:5d:8f:83:
b6:03:fb:cb:45:be:9b:bc:7f:e2:ad:f4:8d:17:7c:5e:20:6f:
39:a6:fc:d9:70:cb:1b:51:31:eb:09:d9:7c:b0:05:37:3e:81:
7e:7b:f8:ff:84:33:a1:f2:69:c6:89:2c:bf:13:bf:9c:c5:72:
c8:26:1b:e4:82:d9:3b:79:68:02:78:62:1d:7b:b9:11:df:10:
42:ab:9d:66:dc:d3:8d:db:d4:f5:85:f3:27:2e:f0:be:7c:78:
2d:f4:e6:0f:fb:77:19:2d:66:11:9d:ce:19:c2:21:e4:75:bf:
a0:8b:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:49 2024 by rpki-client on console-ams.rpki-client.org