Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EYU9QJN8KY7hcZXVvJ7FvMaN47A.roa
File: EYU9QJN8KY7hcZXVvJ7FvMaN47A.roa (raw, json)
Hash identifier: hadSX1vZ2OD+d2pIbbmJ4OoMiWGx4eVMGZtjDutI6kE=
Subject key identifier: 11:85:3D:40:93:7C:29:8E:E1:71:95:D5:BC:9E:C5:BC:C6:8D:E3:B0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7CA001853FE728B1CE93D0FF4E3FC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EYU9QJN8KY7hcZXVvJ7FvMaN47A.roa
Signing time: Mon 02 Jan 2023 05:15:16 +0000
ROA not before: Mon 02 Jan 2023 05:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206981
IP address blocks: 2a0e:97c0:6a0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:ca:00:18:53:fe:72:8b:1c:e9:3d:0f:f4:e3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11853d40937c298ee17195d5bc9ec5bcc68de3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:ba:5e:d1:de:97:41:9e:ce:c2:14:f4:35:
4d:00:78:4c:2e:66:fa:7c:d9:77:af:5d:04:5d:b7:
42:98:ae:fc:50:1c:97:15:d7:1e:92:11:98:ff:6c:
97:a6:5b:56:22:c2:2e:b9:29:9c:7d:49:47:ae:d9:
49:d7:51:4f:85:f3:bc:af:ee:c3:21:10:0a:6e:23:
c1:76:c5:de:59:dd:50:97:81:d4:80:26:5b:b2:cd:
ae:5c:3a:b4:4d:d9:e8:47:2c:9e:68:a1:38:74:31:
9c:f3:35:8a:bd:76:40:51:f7:ed:d3:e2:78:a7:62:
e8:3b:72:42:91:1c:1e:2a:37:77:77:cb:7f:3b:80:
77:35:23:4b:07:8b:4c:8b:2c:a4:06:0a:c9:12:c9:
7b:cf:d3:e5:0a:2d:22:ed:f4:84:57:a1:56:06:3d:
df:94:f1:b2:9b:14:57:39:8b:5e:fe:a4:7b:35:f9:
cc:d8:8f:d7:e5:90:d5:e6:f0:42:c2:98:19:75:96:
e4:b2:5e:12:ee:d9:95:d1:2d:24:3a:db:fa:bf:7e:
06:06:e5:6f:09:ba:42:71:bf:35:4d:61:54:f8:9f:
60:65:c0:de:8f:f2:94:a3:66:75:61:ab:60:87:a5:
f5:59:c8:bb:43:07:50:4b:35:82:7d:69:c2:13:c8:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:85:3D:40:93:7C:29:8E:E1:71:95:D5:BC:9E:C5:BC:C6:8D:E3:B0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EYU9QJN8KY7hcZXVvJ7FvMaN47A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:6a0::/44
Signature Algorithm: sha256WithRSAEncryption
5e:65:42:14:d4:39:d5:2e:67:70:42:da:af:5f:ae:ac:6d:bf:
84:06:30:54:34:df:90:97:98:26:62:b8:1e:cd:b3:3e:23:ff:
bd:93:68:27:cd:bb:73:48:35:7b:de:cd:3d:b1:16:d5:42:7b:
ce:10:23:de:ee:b6:3d:64:cd:e9:a2:24:f4:7e:38:49:db:ef:
9e:c1:a7:be:38:fb:9d:21:48:75:c0:c7:e8:96:21:ce:54:ad:
48:ea:2e:cb:2f:ae:15:cd:d6:10:bc:0d:c2:b9:c4:d5:12:5d:
cb:ea:6b:a3:e9:b4:eb:20:8d:ac:48:17:88:98:46:4b:ea:9d:
bd:77:64:67:6f:6e:f0:10:02:21:ec:00:c7:ee:0d:4b:78:39:
d8:98:42:23:0c:39:02:c8:2a:1d:b7:18:4c:08:df:2a:0c:8e:
88:98:22:8e:5f:93:15:e1:49:ba:bf:3e:9e:80:b7:54:41:8a:
d9:c0:1e:b7:23:06:01:44:a6:2c:d8:9b:45:af:6c:71:a2:d8:
20:89:c6:51:aa:44:13:10:79:b5:8c:7a:98:33:c0:c7:49:72:
67:ac:1e:42:c1:58:f9:a8:0e:f2:49:8b:04:ac:4b:d7:fe:37:
1f:e7:89:21:73:0c:f0:09:73:ef:e4:b9:12:c1:2e:64:f9:11:
fa:b5:1f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org