Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IGwRRVe5M2m_PaHcwCtJnguYeM0.roa
File: IGwRRVe5M2m_PaHcwCtJnguYeM0.roa (raw, json)
Hash identifier: OlOX5M77oU6mN3lxt55lTf97JPc7n4EaJ/Y5Kt5B8QE=
Subject key identifier: 20:6C:11:45:57:B9:33:69:BF:3D:A1:DC:C0:2B:49:9E:0B:98:78:CD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018752F2BF0E651963A0C6459A229F1BBEEA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IGwRRVe5M2m_PaHcwCtJnguYeM0.roa
Signing time: Wed 05 Apr 2023 19:44:12 +0000
ROA not before: Wed 05 Apr 2023 19:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213286
IP address blocks: 2a10:2f00:131::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:f2:bf:0e:65:19:63:a0:c6:45:9a:22:9f:1b:be:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 5 19:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=206c114557b93369bf3da1dcc02b499e0b9878cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:8a:8c:61:93:a8:af:a0:88:72:d9:b1:ec:
c4:b1:ff:d7:0c:9b:9d:dc:36:af:65:b4:df:e7:91:
34:75:54:9b:2f:06:72:62:4c:b9:21:f9:17:d5:41:
be:8a:54:a0:92:8e:bc:af:ab:7b:48:f1:a8:f2:f8:
65:ff:17:36:ee:47:e5:c1:4f:d2:70:40:50:37:a7:
3d:64:64:01:f8:ce:81:76:34:78:cd:a8:5e:08:dc:
ed:35:c2:db:07:65:00:bc:cf:fa:a4:09:48:d1:93:
80:a1:d0:12:cf:5b:c4:43:c2:b8:4e:4e:37:3b:9a:
97:b9:a3:3a:4d:8f:d9:44:db:33:a6:67:a5:32:5b:
25:92:c3:e9:20:e4:da:ad:49:50:67:33:0e:50:33:
8c:e5:5a:ee:c6:68:d5:7d:8f:a9:9c:17:db:a1:98:
28:4e:73:92:20:f5:de:b8:c1:69:1e:b4:3f:1c:d2:
fb:e9:ea:00:dc:bd:10:ed:0c:27:18:52:60:17:e5:
97:12:c9:54:84:c9:a7:04:43:f1:6b:df:7f:91:fc:
18:79:21:83:b6:96:35:60:7b:18:cf:22:16:5e:bf:
b3:8b:b8:9b:ef:85:10:38:6f:19:7b:00:3a:d2:23:
f0:db:ed:4c:b2:30:6f:19:00:37:26:1f:43:ff:7a:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6C:11:45:57:B9:33:69:BF:3D:A1:DC:C0:2B:49:9E:0B:98:78:CD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IGwRRVe5M2m_PaHcwCtJnguYeM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:131::/48
Signature Algorithm: sha256WithRSAEncryption
51:78:36:69:f0:ed:57:bd:db:59:6d:87:9d:49:8f:d3:0c:51:
3b:c4:35:86:cd:8e:58:ad:e3:42:cf:70:6f:ce:dc:23:d5:b3:
c6:31:a7:96:ca:3e:ae:b4:25:e1:23:35:7b:38:ce:39:e5:b1:
ce:d1:2a:f1:6f:cc:c8:7b:fc:c7:d2:b4:1f:cd:77:09:fe:9e:
0e:1c:57:38:04:39:2a:75:54:b8:f5:eb:92:83:e6:5b:90:be:
a9:d4:de:7d:cb:6a:c9:b0:66:4a:44:46:c2:73:78:71:d2:39:
f8:a9:e5:93:3a:9a:f0:fc:bb:e2:0c:c4:fc:f3:e2:3e:d8:26:
ee:ab:52:69:48:05:8d:40:bb:a4:85:a0:ef:e4:31:78:5d:13:
7e:9f:7a:22:44:13:78:7c:6a:f5:b7:41:0b:48:67:ab:f2:73:
91:9e:f4:2e:f9:e6:d6:ea:40:1c:ac:45:a6:52:2e:44:43:78:
fc:38:02:a6:9c:f2:4c:a9:d6:f8:45:af:13:8a:38:20:a1:4a:
7d:41:78:93:87:7a:4f:bf:d7:79:6c:15:c5:7e:51:75:3e:5f:
2d:af:45:42:a3:ef:aa:3a:a6:fd:69:4a:ed:3d:20:49:98:7a:
e6:a0:0f:f6:0c:2d:b5:bb:fb:42:c8:da:df:b2:65:19:f4:b5:
9c:b0:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:50 2024 by rpki-client on console-ams.rpki-client.org