Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RaJ4nSnvR178vKC2vnwTLpAJMR8.roa
File: RaJ4nSnvR178vKC2vnwTLpAJMR8.roa (raw, json)
Hash identifier: n5GyhmnPTiD9LCJCptiSchnJgRuD66tTjQWoDldNS7g=
Subject key identifier: 45:A2:78:9D:29:EF:47:5E:FC:BC:A0:B6:BE:7C:13:2E:90:09:31:1F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01881750789C8D8669B1EE47F6B221DD3867
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RaJ4nSnvR178vKC2vnwTLpAJMR8.roa
Signing time: Sat 13 May 2023 22:52:09 +0000
ROA not before: Sat 13 May 2023 22:52:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211571
IP address blocks: 2a10:cc40:190::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:17:50:78:9c:8d:86:69:b1:ee:47:f6:b2:21:dd:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 13 22:52:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45a2789d29ef475efcbca0b6be7c132e9009311f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:a5:64:bf:2a:33:61:7c:fd:a0:20:e6:43:
89:42:20:52:bd:21:c0:08:f7:e1:c6:a4:5c:a5:d0:
f5:2b:ef:cc:91:d2:b0:01:63:08:0d:67:39:bf:bb:
9d:dd:59:55:38:de:04:23:eb:1c:b3:17:76:59:7f:
d9:c7:44:58:2a:1b:25:21:25:43:66:18:f1:1f:a0:
be:9c:ad:44:2f:cc:54:86:2d:56:03:0d:10:6c:a7:
f5:7d:45:a7:08:4a:df:55:ca:f1:3f:71:bb:e7:1f:
a2:8a:bd:7b:3f:a6:f1:6b:d6:86:a9:98:d0:90:cd:
f0:29:fa:40:4c:1c:cc:88:3e:9d:0c:3e:b8:a7:4f:
6a:69:aa:4d:a3:f5:af:da:47:71:58:96:bd:7b:85:
ea:e9:80:b6:57:fc:74:f3:ef:cc:04:85:47:67:43:
3d:44:dd:65:09:bb:41:46:76:77:db:44:2e:3f:1a:
32:97:a1:e2:37:47:fe:c1:5a:56:3d:1f:33:6d:29:
ed:e0:94:80:99:48:5b:50:ae:0a:9a:58:1f:f5:58:
6a:ea:d0:f1:bd:b0:a6:80:58:05:c3:b9:76:d1:1d:
c1:94:a1:7a:af:03:8f:08:f6:ba:2e:83:b4:80:d5:
6b:82:b2:80:91:29:75:80:82:92:c5:e3:64:55:13:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A2:78:9D:29:EF:47:5E:FC:BC:A0:B6:BE:7C:13:2E:90:09:31:1F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RaJ4nSnvR178vKC2vnwTLpAJMR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:190::/44
Signature Algorithm: sha256WithRSAEncryption
5c:c0:7b:46:bf:a0:17:87:55:de:c6:83:ee:b6:1b:51:76:b2:
3d:92:25:53:03:85:86:1b:d7:0c:d1:a4:74:8e:bf:66:c0:43:
4f:b9:1e:38:df:65:06:66:46:fe:90:7b:e4:c6:0f:2e:50:0f:
bf:46:8a:8e:30:03:70:9e:a4:66:4d:99:bd:c8:ae:88:b8:ba:
80:8c:63:a3:26:a1:86:34:0c:e8:14:da:f4:69:21:15:26:43:
48:41:09:12:f7:ee:9b:c7:4b:f1:ee:12:51:40:e0:54:c3:69:
c3:73:20:35:c5:f4:77:dc:ee:43:4a:af:4d:a9:d5:b9:8a:0b:
2a:9b:8d:56:17:7a:51:fd:e9:25:4b:2d:d6:9b:96:8e:ce:a1:
3a:f4:44:ad:66:de:ed:68:24:d5:7b:ae:d3:ec:05:d0:db:07:
6b:0c:eb:06:85:5e:c0:c0:5d:72:0d:65:3b:59:99:99:7f:b2:
1a:70:84:3f:8c:97:07:59:13:26:8c:af:8c:80:57:c0:3b:d9:
5c:69:61:e1:33:ca:80:fc:55:a6:0c:dd:b7:65:79:5b:0d:fd:
ed:9c:55:20:90:13:41:7d:ec:e2:b4:eb:8d:3e:fd:11:e6:11:
ed:01:b0:a5:28:f5:a8:1b:fd:21:b2:23:bf:f2:35:11:c2:d0:
cc:d5:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:50 2024 by rpki-client on console-ams.rpki-client.org