Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IdCrzQ8s00aswWUAMNep9uymyRo.roa
File: IdCrzQ8s00aswWUAMNep9uymyRo.roa (raw, json)
Hash identifier: bi8qruzD6JTu4Nc5bGAHxDbkT9ZuQ8UIRp5Wm4+WR0I=
Subject key identifier: 21:D0:AB:CD:0F:2C:D3:46:AC:C1:65:00:30:D7:A9:F6:EC:A6:C9:1A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7DD5E2D332640F1181DCCE93B3FE2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IdCrzQ8s00aswWUAMNep9uymyRo.roa
Signing time: Mon 02 Jan 2023 05:15:21 +0000
ROA not before: Mon 02 Jan 2023 05:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209391
IP address blocks: 2a0e:b107:1c90::/48 maxlen: 48
2a10:cc40:1cf::/48 maxlen: 48
2a0e:b107:1c95::/48 maxlen: 48
2a10:cc40:1ca::/48 maxlen: 48
2a0e:b107:1c9a::/48 maxlen: 48
2a10:cc40:1c5::/48 maxlen: 48
2a0e:b107:1c9f::/48 maxlen: 48
2a10:cc40:1c0::/48 maxlen: 48
2a10:cc40:1c3::/48 maxlen: 48
2a0e:b107:1c93::/48 maxlen: 48
2a0e:b107:1c98::/48 maxlen: 48
2a10:cc40:1c7::/48 maxlen: 48
2a0e:b107:1c9d::/48 maxlen: 48
2a10:cc40:1c2::/48 maxlen: 48
2a10:cc40:1c0::/44 maxlen: 48
2a0e:b107:1c91::/48 maxlen: 48
2a0e:b107:1c96::/48 maxlen: 48
2a0e:b107:1c9b::/48 maxlen: 48
2a10:cc40:1cc::/48 maxlen: 48
2a0e:b107:1c94::/48 maxlen: 48
2a0e:b107:1c99::/48 maxlen: 48
2a10:cc40:1ce::/48 maxlen: 48
2a0e:b107:1c9e::/48 maxlen: 48
2a10:cc40:1c9::/48 maxlen: 48
2a10:cc40:1c4::/48 maxlen: 48
2a0e:b107:1c92::/48 maxlen: 48
2a10:cc40:1cd::/48 maxlen: 48
2a0e:b107:1c97::/48 maxlen: 48
2a10:cc40:1c8::/48 maxlen: 48
2a0e:b107:1c9c::/48 maxlen: 48
2a10:cc40:1cb::/48 maxlen: 48
2a10:cc40:1c6::/48 maxlen: 48
2a10:cc40:1c1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:dd:5e:2d:33:26:40:f1:18:1d:cc:e9:3b:3f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21d0abcd0f2cd346acc1650030d7a9f6eca6c91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:70:48:b4:eb:65:08:48:aa:c9:38:f8:df:
ff:39:bd:ec:a2:3e:c2:55:01:d4:89:c7:1d:65:78:
26:ba:4b:ed:0a:36:a0:3f:3a:8c:04:96:41:79:7c:
50:62:59:a3:cf:da:31:4b:4e:37:08:f2:8a:0c:47:
c4:e1:71:ee:d4:82:26:0a:e6:cd:28:fb:84:24:64:
cd:4c:90:81:6f:f4:87:48:ad:ac:fa:2d:7f:8b:9b:
6e:bb:c2:c5:c9:33:8f:b3:38:2c:8f:46:bc:7f:a4:
58:bb:58:fa:12:a1:ab:3f:89:15:31:15:30:b8:ee:
af:ca:99:f9:0f:03:0d:4d:4d:33:c8:cf:72:ab:81:
cc:26:36:49:a6:25:ad:1b:18:de:1b:c5:b6:c3:36:
48:30:76:1c:7a:0f:75:2f:98:35:2d:ed:ed:40:3f:
34:f1:5c:2f:fb:6c:cd:51:c4:3d:92:d8:ab:92:88:
b1:86:82:49:64:9a:76:a8:a5:d2:e9:7e:c5:69:2d:
aa:cc:a1:30:fe:76:af:42:68:62:63:1e:04:69:85:
76:a2:f5:cf:34:6d:9e:f4:23:a5:29:73:86:60:06:
82:aa:af:c2:b5:88:49:d6:d0:7a:86:d3:0d:99:81:
b0:7d:a0:1a:a6:0a:56:98:42:85:84:26:9c:51:02:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:AB:CD:0F:2C:D3:46:AC:C1:65:00:30:D7:A9:F6:EC:A6:C9:1A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IdCrzQ8s00aswWUAMNep9uymyRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c90::/44
2a10:cc40:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
4e:0d:d3:c1:5a:4f:e3:71:6b:78:8d:62:35:7d:e9:b5:23:9a:
10:6f:a9:ad:59:12:b0:c4:9b:06:53:0c:0e:84:63:a1:2e:17:
b1:2c:dc:5a:a4:8c:43:6b:51:41:07:31:b1:85:96:78:c5:25:
ba:a1:a9:e0:77:f0:e1:12:e8:64:61:7b:8c:27:41:86:9c:9f:
80:a5:06:a7:9b:54:0c:e0:67:c5:01:09:5d:44:c0:d9:13:af:
e4:a5:60:b2:0e:1c:db:ec:61:ce:bb:6b:49:ab:cf:9d:1b:df:
03:89:eb:d4:3d:39:e3:9d:46:3f:d4:aa:59:0b:62:dd:3e:8a:
da:44:06:a9:41:36:0a:5f:aa:55:0f:e9:a0:b9:a3:88:d0:44:
3b:e9:41:80:44:0a:32:3c:88:0e:83:6f:09:5b:fd:51:cc:a9:
d0:c0:b6:63:b3:b3:cb:e7:ac:a9:ac:3a:67:ff:7a:76:0c:64:
4e:7f:ff:72:33:b5:12:e8:18:9c:aa:42:fd:ef:c6:0f:4d:cf:
2c:bf:28:d0:08:2c:ff:78:fa:6e:c0:28:57:3a:1f:42:d7:96:
41:53:5f:01:f4:d8:fd:87:ec:9a:20:51:8e:56:d8:21:5b:19:
0e:d2:cc:77:61:4d:8c:02:25:bd:4b:8c:34:a1:8a:08:6b:fe:
84:af:27:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:57 2023 by rpki-client on console-ams.rpki-client.org