Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PcDLWhuVMaQIZcdi1ZoIfqpF0lc.roa
File: PcDLWhuVMaQIZcdi1ZoIfqpF0lc.roa (raw, json)
Hash identifier: W5XtQtZjQSvkXGWUJb2cntu/0vaAfewkvoYro1jxOS0=
Subject key identifier: 3D:C0:CB:5A:1B:95:31:A4:08:65:C7:62:D5:9A:08:7E:AA:45:D2:57
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E8241F6F44E4C13898DA4BB981C9F2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PcDLWhuVMaQIZcdi1ZoIfqpF0lc.roa
Signing time: Mon 02 Jan 2023 05:15:39 +0000
ROA not before: Mon 02 Jan 2023 05:15:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213164
IP address blocks: 2a10:2f00:18a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:24:1f:6f:44:e4:c1:38:98:da:4b:b9:81:c9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dc0cb5a1b9531a40865c762d59a087eaa45d257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:7c:d6:d1:ef:13:1d:e1:4c:c4:5e:65:8f:
77:a5:f0:79:01:da:77:00:d7:f4:d5:02:f6:fd:86:
23:2e:d7:64:a0:7d:2d:5c:7f:28:4e:ac:14:8a:ce:
83:7a:9b:4c:4e:05:93:0a:19:d8:09:51:31:c8:a8:
80:bc:4d:eb:20:ef:86:36:f1:fc:e6:ea:d5:5f:f8:
e9:bb:cb:75:88:e7:62:14:e9:3d:9c:a1:8f:2c:95:
51:0f:7b:77:2b:12:72:4c:a2:e4:f3:8c:12:37:be:
5d:94:63:7b:d0:c8:d7:97:3a:52:d4:57:fc:9f:34:
74:4f:4f:e3:64:30:6a:7f:c9:15:02:cb:bb:95:73:
c3:eb:5a:db:09:40:3d:4b:29:14:62:77:f2:5b:15:
9b:dd:a1:6f:4f:6a:e2:44:46:fb:b9:b1:c3:46:89:
4e:fc:f6:79:56:d2:f2:70:63:73:f9:95:1c:23:be:
3e:a9:40:02:98:bb:23:84:50:44:34:47:5d:01:96:
cb:ac:5c:d6:2a:ec:00:42:39:dd:d8:bf:8e:b0:88:
a2:7e:c5:b9:97:09:05:d5:45:b3:ea:54:a5:1e:2c:
e5:4b:27:ef:5c:e0:0e:86:07:5d:50:ed:58:a5:f6:
3e:03:6c:b3:a5:11:d9:e8:6b:4a:86:cc:54:02:bb:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C0:CB:5A:1B:95:31:A4:08:65:C7:62:D5:9A:08:7E:AA:45:D2:57
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PcDLWhuVMaQIZcdi1ZoIfqpF0lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:18a::/48
Signature Algorithm: sha256WithRSAEncryption
2f:2a:39:58:42:c0:46:e6:35:92:68:e5:92:c4:7c:78:21:ec:
29:b4:6e:f3:27:9f:3a:db:71:94:9e:9f:93:37:17:c2:3b:33:
51:55:52:7a:7b:c6:9a:0f:64:f2:55:bd:f8:9a:ef:26:e6:2e:
7e:cc:74:13:1a:11:a9:da:da:67:8b:b4:fa:ce:5e:9c:a1:ae:
31:84:d2:9c:44:7c:12:b9:c1:94:53:42:a1:e6:73:53:66:5a:
1e:90:7a:70:d9:e2:09:78:9d:40:9c:48:84:e1:37:2b:d3:40:
7f:1e:0c:4a:26:47:c6:00:6d:40:4f:70:e2:53:e9:4c:8b:3a:
36:f9:e6:8e:24:55:69:06:ea:43:63:ec:d2:c9:f3:65:02:35:
31:52:d8:0c:ba:f6:fc:57:6b:b5:88:5d:fe:cf:d5:10:86:d7:
7a:1f:9d:5c:59:d2:e9:2e:46:12:37:4c:65:23:6c:42:5a:b4:
03:0e:87:8f:3d:bd:06:ca:ed:0e:fc:00:9e:41:e1:12:37:66:
b4:b6:84:dc:d2:70:55:7f:ba:71:15:19:e1:03:b3:d6:c0:27:
92:b1:6a:55:40:ab:df:0d:c1:d2:b3:f0:3d:20:1b:e0:b9:fe:
8f:03:e4:d9:52:a4:a1:9d:60:bf:88:76:64:3a:c3:ca:02:7a:
f5:86:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:50 2024 by rpki-client on console-ams.rpki-client.org