Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EWtVEjKFmJzplOuR682eqziOD5o.roa
File: EWtVEjKFmJzplOuR682eqziOD5o.roa (raw, json)
Hash identifier: 8QZfJ5p/Q2VJWKzWBfMq0sEVvI/J2+fLYgdvOGtIRAg=
Subject key identifier: 11:6B:55:12:32:85:98:9C:E9:94:EB:91:EB:CD:9E:AB:38:8E:0F:9A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AD6FA6C32465809F152F8561B381A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EWtVEjKFmJzplOuR682eqziOD5o.roa
Signing time: Tue 24 Jan 2023 16:09:42 +0000
ROA not before: Tue 24 Jan 2023 16:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204693
IP address blocks: 2a0e:b107:1ad0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:d6:fa:6c:32:46:58:09:f1:52:f8:56:1b:38:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=116b55123285989ce994eb91ebcd9eab388e0f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:f2:5b:9e:d1:c3:a1:f1:fe:3e:ee:96:73:
56:07:fc:89:0d:cd:7c:79:e6:3c:6a:d9:84:a0:f1:
dd:98:e6:3c:f2:6e:e2:0a:d2:06:d8:62:96:1e:c2:
42:cb:ff:77:f1:68:ce:44:db:ee:58:87:82:c5:26:
af:9b:e8:c7:33:8d:64:09:24:b6:3b:d0:8f:85:29:
73:69:f8:94:3c:65:03:64:42:03:83:85:dd:8e:ac:
02:37:38:7a:80:94:9c:eb:08:1f:f1:97:14:95:a9:
c9:e2:69:0d:ba:44:16:00:59:bd:8e:d6:ea:2d:be:
80:a0:8a:7c:a9:67:b0:f1:68:77:f5:95:8f:6e:01:
3b:94:4b:95:7f:de:53:11:3f:64:4b:3f:20:61:c4:
c5:f6:3a:e0:2b:93:96:b0:e1:c7:34:77:80:02:97:
01:5f:29:da:48:27:66:30:a9:77:8e:42:a6:61:5b:
b8:5c:f2:d2:b4:8f:0c:01:22:4a:97:47:36:7a:3e:
88:8d:e7:32:6b:63:79:1d:5a:a7:b2:d7:44:09:b5:
87:74:80:da:2d:ca:d3:d7:8d:0f:29:65:04:cc:31:
a4:3c:3d:50:cf:46:b7:27:5d:06:34:cb:b0:fb:aa:
d2:f6:f3:a3:f3:6d:39:17:4d:b6:2e:58:d4:dc:33:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:55:12:32:85:98:9C:E9:94:EB:91:EB:CD:9E:AB:38:8E:0F:9A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EWtVEjKFmJzplOuR682eqziOD5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ad0::/44
Signature Algorithm: sha256WithRSAEncryption
8a:e4:38:e2:5f:13:cb:25:5f:5b:57:f8:40:d0:4d:8a:10:43:
e3:fd:27:a1:c1:4c:fc:c4:f8:8c:de:bc:27:41:c5:26:77:12:
f6:7e:21:b5:f2:47:14:98:5a:cd:2f:88:47:58:14:75:32:08:
31:29:d7:06:a4:a5:38:2e:89:16:ae:a0:92:06:67:76:5e:82:
cd:d3:31:da:e0:95:73:bb:42:a0:c9:4b:6e:74:09:41:96:e3:
32:4c:d8:07:2d:af:42:9c:1d:b9:24:bc:36:49:aa:7c:58:95:
02:36:fa:40:2f:57:5a:87:16:f9:ab:2a:1e:74:74:f4:b2:10:
4a:79:ff:e0:4b:c8:86:73:ce:85:23:dc:96:ec:bd:39:70:18:
e9:97:e8:32:41:87:55:b8:1c:74:c0:7c:e8:b2:4c:d4:1b:2d:
79:2a:05:91:0a:f6:07:6d:dd:b8:f0:6d:b0:08:4f:57:34:c5:
b8:66:58:2b:17:24:7a:5f:0a:c1:2e:65:b7:48:a3:f3:44:89:
0a:1b:8c:26:2d:57:4c:38:7d:25:8d:c1:c8:04:22:70:23:90:
44:8d:d5:bc:57:16:2f:fe:7e:cb:6f:94:ae:9e:7a:e0:eb:5c:
6d:14:73:fc:f3:d4:c4:6a:4d:b5:2d:37:59:e3:a5:5f:1f:8c:
be:a8:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org