Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RTh8hmGHNNSbZhfPQSAw-HcY__w.roa
File: RTh8hmGHNNSbZhfPQSAw-HcY__w.roa (raw, json)
Hash identifier: BpBgU2aSJANBg+m3Kt96OYnzutlLo36WGEBdRN0t9X8=
Subject key identifier: 45:38:7C:86:61:87:34:D4:9B:66:17:CF:41:20:30:F8:77:18:FF:FC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018AB8C5AEFBD8C0DC65B6876D1D3CF89AB4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RTh8hmGHNNSbZhfPQSAw-HcY__w.roa
Signing time: Thu 21 Sep 2023 17:24:37 +0000
ROA not before: Thu 21 Sep 2023 17:24:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a10:ccc3:ccc2::/48 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:b107:278d::/48 maxlen: 48
2a0e:b107:5d0::/44 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a0e:b107:278c::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:c5:ae:fb:d8:c0:dc:65:b6:87:6d:1d:3c:f8:9a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 21 17:24:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45387c86618734d49b6617cf412030f87718fffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:12:af:9e:9d:d3:59:be:9e:9b:cd:9a:ed:
6a:20:f1:6b:d9:ea:06:bf:2d:3d:c4:89:ab:01:5c:
ff:9e:dd:19:a4:06:4e:92:88:e1:4c:80:33:8e:d9:
47:1a:e7:7c:4c:4b:e7:de:e6:27:47:ea:12:9c:18:
fa:3d:f1:ee:c2:c7:8f:95:c5:da:db:c7:c8:21:65:
c3:bc:87:22:f8:ef:22:95:9d:a0:d1:6f:fe:1c:66:
c1:14:a1:68:21:eb:be:f9:4c:d0:86:aa:22:1c:f6:
3a:cc:65:71:19:ae:8e:84:f7:7b:86:69:d3:0c:93:
7f:e9:75:26:c7:2e:35:d9:51:5e:58:a6:93:e6:36:
cb:69:3c:3b:76:a2:74:6c:9d:97:39:f1:1d:3f:b2:
24:49:bd:2c:e7:33:f7:dc:a1:21:40:b0:21:bd:2e:
04:14:a7:86:72:af:ef:2f:23:dc:50:13:c0:a2:13:
ce:b9:eb:89:6d:6d:c8:61:a8:e3:0d:1c:a7:c8:17:
30:e6:bb:1a:41:62:a2:3d:fe:e2:81:0d:ec:ef:68:
11:3d:67:90:39:6f:6a:ba:4f:10:bf:65:41:9d:53:
52:47:45:f8:f9:87:6e:5a:c5:68:51:d2:c2:40:f2:
d3:64:fe:a3:a3:d8:a2:c5:0d:ab:80:74:c8:8a:0e:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:38:7C:86:61:87:34:D4:9B:66:17:CF:41:20:30:F8:77:18:FF:FC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RTh8hmGHNNSbZhfPQSAw-HcY__w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:5d0::/44
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::-2a0e:b107:278d:ffff:ffff:ffff:ffff:ffff
2a10:ccc3:ccc2::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
9c:b2:86:d9:14:50:9c:3c:ea:8e:0c:67:cf:79:63:26:6d:72:
28:5e:59:f2:f9:f3:99:80:0e:26:c7:1a:7a:ed:08:b0:57:9e:
11:91:10:02:d9:bf:dc:82:40:f5:35:1e:55:dd:d1:a4:e7:11:
fa:a1:fe:11:c2:86:1b:36:87:67:1a:f9:65:f4:e6:f5:b2:b9:
3d:aa:f3:71:81:5c:cc:46:38:74:9d:3b:95:26:96:2e:83:5e:
85:bd:09:dd:c1:e8:db:f2:0d:7d:d9:eb:d1:6a:15:26:d2:b5:
63:9e:c1:6b:0c:6f:df:9c:c4:b4:43:34:6e:f2:68:b6:d3:0a:
d2:7f:a1:05:3c:50:b5:e4:a0:e7:08:48:6a:60:ca:fb:63:e3:
f3:d8:04:53:11:75:f1:d0:4b:01:9c:1c:f4:b5:53:47:3f:7e:
74:39:fb:47:4f:ad:a4:8b:c9:56:1c:c8:4d:d7:19:bc:a9:9f:
d8:29:be:3e:76:ad:50:74:59:76:0b:ab:87:ba:ec:e3:1f:fa:
95:87:af:cf:c0:d1:b8:d0:2e:ed:a1:02:91:5e:e5:b8:18:97:
c2:4d:f4:f9:98:74:04:44:12:9d:6e:4a:99:2e:74:5b:a9:53:
42:bf:bc:d2:a1:4f:1a:d6:fe:ce:63:be:47:76:a4:ae:34:8c:
9e:c1:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 19:04:48 2023 by rpki-client on console-fra.rpki-client.org