Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OQeRvZ3QVzwrjDmnVSs8YoCUXW0.roa
File: OQeRvZ3QVzwrjDmnVSs8YoCUXW0.roa (raw, json)
Hash identifier: nCxUEytmrMqTd8BTE7Gv1lJ3Sd6meRId3+agimh2sgw=
Subject key identifier: 39:07:91:BD:9D:D0:57:3C:2B:8C:39:A7:55:2B:3C:62:80:94:5D:6D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189C67DC5EFCB31BEA9876CBD3C13FDDC67
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OQeRvZ3QVzwrjDmnVSs8YoCUXW0.roa
Signing time: Sat 05 Aug 2023 16:17:58 +0000
ROA not before: Sat 05 Aug 2023 16:17:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a10:ccc3:ccc2::/48 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:b107:5d0::/44 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc3:ccca::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a10:ccc3:ccca::/47 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:7d:c5:ef:cb:31:be:a9:87:6c:bd:3c:13:fd:dc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 5 16:17:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=390791bd9dd0573c2b8c39a7552b3c6280945d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:45:7b:8a:70:ee:af:b5:4a:95:82:72:10:
cd:af:7e:13:f7:9b:54:8a:8c:0e:9e:7d:f9:01:5b:
64:dd:c9:9a:ca:04:7c:69:2b:32:f1:56:3f:0a:b2:
68:58:1d:8d:f0:e9:29:30:3e:51:e8:7f:9e:fb:ff:
11:ba:7f:de:16:cb:95:bb:6e:d9:b5:af:40:2c:e6:
b9:f2:8a:bb:bd:6b:6a:aa:3b:79:d1:0c:34:64:dc:
2d:0e:8b:f7:4e:1a:46:73:2e:c0:08:a6:e5:1b:b4:
6f:e0:2f:ea:fc:75:e1:7e:57:f4:27:1b:cb:cb:ff:
0f:bf:0f:c4:16:b0:78:4d:c7:b3:42:51:d6:fd:80:
e9:f9:9e:a7:f5:bd:f2:81:84:08:18:07:74:4c:2e:
54:67:3e:10:8f:2a:4a:53:86:d0:0b:3c:9c:1c:2a:
62:3b:0c:6e:4c:ec:73:2b:54:9b:60:2c:87:02:0f:
6a:dd:d4:17:60:2b:3c:c4:19:ee:9e:72:18:76:b1:
46:f6:67:3a:09:d3:78:3d:b4:59:dc:42:fb:e0:76:
13:d5:2c:b8:14:77:d1:52:1f:bf:37:97:63:7f:d0:
b3:08:e0:2a:6b:3d:3b:8d:90:2b:da:31:9e:af:90:
9d:61:4c:d7:d6:93:84:08:a4:ff:8b:ea:dd:37:04:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:07:91:BD:9D:D0:57:3C:2B:8C:39:A7:55:2B:3C:62:80:94:5D:6D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OQeRvZ3QVzwrjDmnVSs8YoCUXW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:5d0::/44
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a10:ccc3:ccc2::/48
2a10:ccc3:ccca::/47
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
66:73:75:1d:da:8d:3b:db:b0:92:b3:92:d7:c5:7f:fb:1d:46:
e2:6d:93:3c:c1:b6:3f:01:f0:ae:90:d1:66:9a:a2:66:22:51:
de:d0:74:f6:f4:71:17:12:47:5e:e3:53:f3:cc:ed:e2:d2:41:
e4:a2:d1:03:20:a7:e3:74:60:af:be:8b:00:10:48:b8:f5:d3:
a5:33:d8:7d:a6:51:ee:94:a5:2a:6f:48:df:0d:20:69:13:77:
f6:58:af:c0:ce:89:cb:86:24:64:b7:bb:b1:e5:86:49:59:80:
42:fa:ae:0e:01:8b:e8:cf:67:c8:a2:6b:44:02:dc:d5:c8:8f:
59:b0:cf:96:bd:4d:19:75:0c:a1:fc:28:78:17:c3:b0:d1:1a:
6f:b4:a1:e6:43:8b:9c:8c:a8:34:a0:15:5a:f0:e8:6e:ca:0b:
df:76:19:f3:ea:01:cb:c0:17:d9:ac:52:26:d6:64:01:14:45:
59:f0:0e:ea:0e:0d:ea:a2:ae:d8:22:bf:83:4a:47:db:19:b8:
c7:16:e8:05:7c:d0:f4:92:b9:ae:85:98:6f:16:69:44:34:9d:
1e:01:3d:ec:9d:f2:ef:b0:79:83:d0:44:db:ac:59:11:b7:8d:
62:1a:fa:f2:2a:d9:fd:51:8c:12:56:03:5d:46:c9:8a:ee:e4:
c6:b8:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 13 09:35:03 2023 by rpki-client on console-ams.rpki-client.org