Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R2k-XjSWytBR7uFtAjBBNWDXEjY.roa
File: R2k-XjSWytBR7uFtAjBBNWDXEjY.roa (raw, json)
Hash identifier: 5HrWSBiaf25uY5gZFpchXc2nLJlw7RwWwOUdA/JkO8E=
Subject key identifier: 47:69:3E:5E:34:96:CA:D0:51:EE:E1:6D:02:30:41:35:60:D7:12:36
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A5FD89942BE74C7E38E98D14DC4E29AD5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R2k-XjSWytBR7uFtAjBBNWDXEjY.roa
Signing time: Mon 04 Sep 2023 10:59:05 +0000
ROA not before: Mon 04 Sep 2023 10:59:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204882
IP address blocks: 2a10:cc40:1b0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:d8:99:42:be:74:c7:e3:8e:98:d1:4d:c4:e2:9a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 4 10:59:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47693e5e3496cad051eee16d0230413560d71236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:3b:16:9f:e7:65:6c:a8:1d:fa:64:c8:ac:
c9:6e:49:4c:19:9a:df:c5:4b:ed:44:0b:20:91:d5:
84:2b:39:06:e4:33:d0:a0:c2:8f:e5:25:5a:ec:a7:
a3:36:94:82:da:c7:03:92:45:72:31:a9:fb:06:63:
1a:7a:ee:0c:18:53:ed:86:9c:e4:28:c1:1a:c3:a3:
73:18:63:b2:25:a4:ed:f6:45:7f:85:39:ad:1e:18:
68:38:5f:6f:21:7b:31:06:15:a6:8a:63:ba:3c:0c:
ce:8c:88:c9:ed:48:10:f8:67:a1:c1:03:e1:22:e3:
63:81:a8:5b:d5:af:9c:d6:be:58:79:62:45:fd:de:
67:6d:97:29:80:b6:31:4d:39:94:6c:ea:7c:21:b3:
f5:9b:e4:5e:5f:35:fa:d8:fa:73:93:ec:e8:c1:b5:
80:f7:96:97:c8:db:52:32:ae:9e:1f:19:9e:cc:af:
29:b9:ec:c7:d0:d4:ce:87:1d:08:01:7e:14:c9:21:
b1:20:0a:80:f4:6d:0c:1d:cb:1c:e4:e2:55:42:e8:
89:fb:a1:e5:62:af:eb:19:66:49:e5:ff:9b:e8:0a:
e8:bf:cf:0b:b7:30:e6:14:b8:26:59:89:bd:aa:be:
c1:aa:fb:bf:78:80:a0:de:f5:64:31:40:c6:7a:60:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:69:3E:5E:34:96:CA:D0:51:EE:E1:6D:02:30:41:35:60:D7:12:36
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R2k-XjSWytBR7uFtAjBBNWDXEjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:1b0::/44
Signature Algorithm: sha256WithRSAEncryption
9a:11:6a:38:0d:0a:50:4b:5b:e6:8b:8f:f6:b2:54:2b:db:b8:
6b:ba:df:b3:83:18:fe:08:73:d7:54:2c:3d:a7:3a:0a:0c:7a:
82:ad:b4:71:eb:f6:c8:77:c7:0c:f1:48:10:ca:32:e1:9d:42:
ba:5d:1d:92:a4:9b:d3:ba:37:99:11:2f:a4:b4:4a:b0:ed:e4:
03:72:c0:7c:e1:06:29:cb:31:8e:7f:16:fd:da:b4:74:97:77:
e7:03:a7:59:6a:92:9e:f0:4d:ef:76:78:78:5d:8e:0a:88:20:
c8:5c:cb:6c:89:71:f1:3c:b9:43:de:18:f2:5b:b8:18:ee:a1:
1c:91:88:fd:7a:49:a4:d7:cf:05:5f:66:c4:e8:a7:4b:5b:d0:
38:4a:2e:8e:01:c2:f1:00:63:67:54:7b:66:77:df:3c:cc:fd:
db:b1:2c:1a:ca:e1:95:fb:89:97:a6:1c:09:e0:34:32:d9:13:
32:9f:78:14:d5:4e:31:53:54:7f:9b:4d:c8:e1:64:d2:63:89:
39:0d:4c:5e:e0:1d:30:87:83:d0:0d:09:28:7e:2e:d3:1c:13:
7d:72:77:7c:64:14:57:cf:e7:e5:b4:86:e4:4b:46:7d:64:25:
f2:0a:61:80:97:ce:7f:d8:80:57:4a:f1:7f:52:41:ce:7f:3b:
ba:fe:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org