Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F7Mzvic4B0pjmbNHNWmQjAtX4qA.roa
File: F7Mzvic4B0pjmbNHNWmQjAtX4qA.roa (raw, json)
Hash identifier: feioxpbSgXIAxPBXNBLWveF49io5Khg2VzCb6nnQIt0=
Subject key identifier: 17:B3:33:BE:27:38:07:4A:63:99:B3:47:35:69:90:8C:0B:57:E2:A0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01863898E2FA753751FA8DBEECC5A7C75473
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F7Mzvic4B0pjmbNHNWmQjAtX4qA.roa
Signing time: Thu 09 Feb 2023 23:53:09 +0000
ROA not before: Thu 09 Feb 2023 23:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206895
IP address blocks: 2a0e:97c0:a10::/48 maxlen: 48
2a0e:97c0:a11::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:38:98:e2:fa:75:37:51:fa:8d:be:ec:c5:a7:c7:54:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 9 23:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17b333be2738074a6399b3473569908c0b57e2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:fb:5b:8b:dc:df:69:11:1c:d9:b4:0c:2a:
f8:d3:9a:21:6a:24:66:b6:3a:d2:8a:11:7e:68:96:
1a:91:22:95:67:33:1f:80:a0:45:71:5f:7a:91:d4:
c5:59:a2:e9:b4:98:d4:fc:fd:8d:0d:ad:6c:81:db:
4f:bf:4a:88:ee:74:1b:0d:b7:a3:c3:c4:08:4c:b9:
06:85:d6:90:57:ed:eb:d4:c0:9e:1e:73:45:37:0d:
75:5f:24:f0:92:0d:39:27:45:cf:f1:e5:62:63:8b:
86:a7:35:09:2e:e4:25:56:38:6d:6c:58:85:2c:76:
47:8e:d7:3a:c6:cd:a8:8a:82:b6:7b:da:b4:41:7d:
2e:7d:92:b9:97:03:f0:ee:d2:0a:c5:b6:6d:20:fb:
59:87:a5:46:93:89:30:34:04:1e:b8:b5:7c:1a:4f:
44:69:73:ec:62:0b:73:2a:18:0b:54:71:c4:d0:3f:
41:a5:6a:e6:1c:7c:0c:6d:d4:6e:31:d6:ae:81:d2:
79:2b:82:79:66:92:75:a9:5f:35:e6:3a:ad:82:ea:
0d:59:51:44:62:05:a2:17:31:0c:7c:69:fe:88:c5:
7a:1d:b1:d2:c5:f1:8b:fd:9e:12:24:2e:2f:b4:76:
48:1f:83:46:03:2a:41:12:27:08:89:96:e9:98:fd:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:33:BE:27:38:07:4A:63:99:B3:47:35:69:90:8C:0B:57:E2:A0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F7Mzvic4B0pjmbNHNWmQjAtX4qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a10::/47
Signature Algorithm: sha256WithRSAEncryption
72:69:73:6c:fa:96:d7:95:9c:20:da:f7:38:24:1d:de:7b:01:
d4:1b:6b:95:14:84:e8:0b:24:79:58:22:99:b6:3e:f6:44:98:
77:b0:0d:82:8e:c3:3d:ef:82:6c:a3:83:67:9d:e5:29:c7:02:
dd:3a:a6:7c:05:71:c3:66:d2:88:d7:7d:af:c1:47:58:7f:40:
78:4e:67:98:1a:48:cb:75:f4:ff:b1:1a:dc:6a:17:25:6a:57:
38:b2:08:81:8c:ba:6b:b8:06:c6:5f:e7:9a:8e:b3:d5:ab:5d:
14:f0:83:bf:9a:f6:15:2b:06:9d:39:7a:8f:e6:8c:8e:ce:66:
cf:b0:1a:34:86:5b:38:12:44:88:a8:b1:36:e0:ca:c7:21:ba:
31:17:b7:b5:9d:97:7b:a9:f1:4a:1a:57:20:95:d9:8a:ca:f4:
99:ad:a9:68:a4:c4:f3:16:43:54:ee:9f:e7:ce:f1:34:b9:56:
78:28:67:38:7c:42:2b:ab:ca:76:5f:e2:d7:a4:88:38:6e:27:
38:fc:a9:7b:d0:8c:fd:09:8f:bb:b4:f2:f0:c9:a6:53:4d:b4:
01:b5:41:90:28:d9:7c:bd:b6:af:77:c0:7d:99:9f:a3:9c:ab:
f7:79:eb:18:96:dd:b2:10:e7:1d:1c:c2:dc:ca:1f:df:9d:7b:
3b:12:16:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:49 2024 by rpki-client on console-ams.rpki-client.org