Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Q6clBB1Oj9zJGeU-JM1MFx_0CNY.roa
File: Q6clBB1Oj9zJGeU-JM1MFx_0CNY.roa (raw, json)
Hash identifier: YRVjdu135rsrYxOAFd8d44AJsydx3gEIKloEovWLvSI=
Subject key identifier: 43:A7:25:04:1D:4E:8F:DC:C9:19:E5:3E:24:CD:4C:17:1F:F4:08:D6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01897F1A75E289395C75D73BA941E4D95A4E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Q6clBB1Oj9zJGeU-JM1MFx_0CNY.roa
Signing time: Sat 22 Jul 2023 19:36:27 +0000
ROA not before: Sat 22 Jul 2023 19:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210825
IP address blocks: 2a0e:b107:24f0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7f:1a:75:e2:89:39:5c:75:d7:3b:a9:41:e4:d9:5a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 22 19:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43a725041d4e8fdcc919e53e24cd4c171ff408d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:f0:35:64:5c:de:31:7a:6b:4c:df:d3:43:
00:7d:b6:fb:8d:d5:cc:e5:1b:3f:22:e8:ff:be:dc:
88:36:e6:e8:1f:59:0e:2e:e9:4b:0d:24:73:11:8c:
89:7f:39:02:8f:cc:8b:6e:ca:1f:f3:2e:51:1e:3d:
d6:4f:40:ef:cb:a1:1b:34:b4:31:fc:ce:44:67:e9:
38:1a:50:ee:71:98:68:92:99:6f:63:34:db:f2:86:
5a:18:d6:98:05:ce:b8:c9:1f:65:b5:83:34:64:ec:
af:76:4e:eb:4b:a2:26:5b:9e:4b:1b:34:19:5e:fb:
83:14:d2:1e:22:00:46:e9:92:a3:01:e8:55:e2:88:
eb:e5:8b:bc:4a:6d:1b:d7:a0:c6:5a:34:6e:8d:be:
c4:fe:ef:e7:96:19:b3:14:4d:65:d3:3b:82:e1:d2:
0d:75:b5:70:0e:e2:02:d5:fc:8b:fc:08:ce:f8:9a:
05:aa:13:74:50:65:76:82:b3:29:24:ac:9d:24:ed:
c2:67:e0:b7:7e:88:2f:d9:8e:88:db:df:a4:92:70:
de:93:29:f5:9f:45:7f:2a:74:cf:5f:60:a5:34:2d:
d2:a1:eb:b9:4f:98:54:9c:eb:fe:a0:56:23:20:17:
0b:7d:25:32:82:32:46:21:2b:0c:95:25:86:0e:5d:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:25:04:1D:4E:8F:DC:C9:19:E5:3E:24:CD:4C:17:1F:F4:08:D6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Q6clBB1Oj9zJGeU-JM1MFx_0CNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:24f0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:a3:f0:11:23:4d:bb:d7:d9:ea:84:86:f3:7c:06:8c:19:fe:
92:3d:0d:f7:92:9e:ba:dd:06:e7:ed:95:ba:5e:04:6f:fe:d2:
ab:7f:57:f4:b0:87:29:ea:08:33:71:4e:74:c4:52:fd:e8:6c:
74:8b:84:d9:9c:db:79:35:27:73:b3:d7:e8:ac:5c:e8:f5:cf:
77:20:5f:f1:da:16:d7:3a:56:72:40:e7:78:aa:f9:f2:2e:fd:
ec:4e:c2:d4:15:07:98:1e:c8:58:69:94:ef:67:54:ac:84:41:
b6:d4:4d:94:b1:c8:df:e6:e7:de:a1:34:ee:c2:c3:75:7c:68:
0c:a1:2d:2e:9f:12:fa:40:2b:ac:23:19:6a:16:b8:41:cd:cf:
2d:f0:7a:e9:c4:3a:2c:30:b5:5f:76:b7:7a:93:d4:c6:79:df:
dd:ee:c4:0b:f0:d0:f0:04:12:54:ab:7e:27:e5:81:83:8b:45:
0e:c2:38:fa:28:5b:3d:94:f7:2e:3e:77:89:d5:4a:ff:61:99:
f6:50:6a:48:e0:d0:37:77:91:df:b1:4d:49:0e:8e:64:4b:fd:
fa:b6:b6:97:04:90:6f:4d:61:46:84:73:41:d8:60:4e:cf:8e:
a0:ac:6c:0e:dc:9e:f1:06:2f:11:5f:00:26:da:f6:72:f8:df:
5c:b0:ed:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org