Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R79R6bsvnFqqoB0Cd0v5nurv444.roa
File: R79R6bsvnFqqoB0Cd0v5nurv444.roa (raw, json)
Hash identifier: Un3eR03NMJMxjfd6oqaG2Sjvpes4bXW3ngO9M0oR3K0=
Subject key identifier: 47:BF:51:E9:BB:2F:9C:5A:AA:A0:1D:02:77:4B:F9:9E:EA:EF:E3:8E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48ACEBCAE36BFAB154252AB8CF2E8C5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R79R6bsvnFqqoB0Cd0v5nurv444.roa
Signing time: Tue 24 Jan 2023 16:09:40 +0000
ROA not before: Tue 24 Jan 2023 16:09:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201412
IP address blocks: 2a0e:97c0:c70::/44 maxlen: 48
2a0e:b107:1cf0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:ce:bc:ae:36:bf:ab:15:42:52:ab:8c:f2:e8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47bf51e9bb2f9c5aaaa01d02774bf99eeaefe38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:a9:f8:d8:74:b6:2c:14:26:84:be:6b:6a:
cf:2d:38:d2:e8:a2:c3:fa:bb:62:7f:9a:db:04:d0:
55:84:6c:2e:5b:d2:0f:ad:73:b7:45:3c:39:b2:7a:
ff:c6:e1:c8:ee:a6:36:0d:7c:b3:e4:23:de:24:22:
99:93:26:4a:15:f4:6b:e4:fb:ec:68:b3:f7:d6:0c:
55:f5:12:e5:0e:90:59:1d:49:8f:21:11:15:de:42:
47:64:09:37:62:07:fb:b2:74:f3:f2:d6:a5:d5:5b:
9b:65:d0:4f:83:22:a0:19:1e:99:a1:e6:77:1a:25:
52:b7:eb:ab:30:02:a0:fa:ff:a7:fc:8c:ca:68:7d:
e5:1f:8d:4d:f5:1c:9b:f7:c6:d5:6c:bd:04:d1:f1:
74:79:61:ea:e5:59:11:20:d7:89:1c:c1:d8:6d:ea:
ba:bc:51:f4:b0:ce:83:d8:85:19:da:5a:3e:40:32:
b1:d4:23:c6:57:1c:d2:a9:95:31:e9:63:f9:83:0c:
b1:af:77:16:62:54:34:38:8e:5c:d5:e6:59:5f:ee:
b9:cc:1c:c3:f9:82:e8:9f:d8:2f:2e:8c:b1:50:57:
35:90:00:03:de:66:8b:48:d1:13:60:34:82:34:ab:
41:36:df:11:aa:09:ed:53:3a:ba:91:60:c5:2f:d0:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BF:51:E9:BB:2F:9C:5A:AA:A0:1D:02:77:4B:F9:9E:EA:EF:E3:8E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R79R6bsvnFqqoB0Cd0v5nurv444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c70::/44
2a0e:b107:1cf0::/44
Signature Algorithm: sha256WithRSAEncryption
18:64:4c:45:04:6c:e1:57:d2:cf:48:e3:c0:5a:e2:eb:fb:ce:
7d:e1:33:d7:d3:b3:c1:6f:c0:16:de:eb:bf:95:91:9e:f6:c6:
c9:42:0f:7b:8f:11:ee:b3:e7:84:9f:1f:f6:f9:86:e6:4b:88:
b0:61:ea:74:6c:28:b1:10:fd:e7:54:4e:9f:61:99:cc:01:51:
26:5a:08:ff:37:df:e5:8c:08:9b:06:3c:df:3f:e9:47:a4:da:
45:7a:0b:dd:2c:f9:13:41:cf:c8:13:40:c6:86:63:25:13:2d:
1b:81:fb:20:ab:c8:77:5f:ec:42:b1:63:8e:a7:79:e0:63:0c:
a5:37:bb:41:6f:81:b3:0c:df:25:6e:34:d4:13:25:7a:22:e0:
3f:5f:ed:8a:8c:07:26:1b:43:52:4e:3c:db:11:eb:c0:2f:48:
61:78:ac:f4:58:81:98:7d:34:96:eb:ab:58:ee:71:ce:62:8e:
04:16:61:cb:2a:9d:7c:70:1e:27:77:77:76:98:a2:99:e9:84:
fa:1a:ab:7f:88:5c:64:c9:97:19:f2:12:3b:07:8e:c4:97:31:
13:70:e1:ea:1f:df:e8:1b:e5:58:a4:e9:af:9c:07:e8:ba:5c:
8a:71:eb:30:bd:a2:ef:ff:70:d5:b4:9e:c4:a1:f3:2d:2e:d0:
a8:2e:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org