Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RwqcMw0ODgcum0J6T83euIUjF_8.roa
File: RwqcMw0ODgcum0J6T83euIUjF_8.roa (raw, json)
Hash identifier: GPDkMlbJAqK+7s/SiwezK3pA21mzDZLlLh20Wdv8DdY=
Subject key identifier: 47:0A:9C:33:0D:0E:0E:07:2E:9B:42:7A:4F:CD:DE:B8:85:23:17:FF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AF3C30218F14FCAB4BA0EF5A51829
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RwqcMw0ODgcum0J6T83euIUjF_8.roa
Signing time: Tue 24 Jan 2023 16:09:49 +0000
ROA not before: Tue 24 Jan 2023 16:09:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211242
IP address blocks: 2a0e:b107:13c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:f3:c3:02:18:f1:4f:ca:b4:ba:0e:f5:a5:18:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=470a9c330d0e0e072e9b427a4fcddeb8852317ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:18:8b:e1:2d:d2:75:74:bb:30:5e:f8:57:
47:7f:ed:21:58:b0:64:6b:d5:29:f2:96:fc:56:c8:
0e:ee:c7:34:2f:ee:c4:66:7f:59:25:42:7f:f2:1d:
27:29:46:00:e7:4a:70:c1:82:c2:76:07:b2:69:94:
95:a4:28:b7:0a:96:9e:91:63:6f:38:fe:ec:d3:22:
88:c0:7d:b7:f9:d1:1c:4b:56:f2:ea:4c:ca:50:02:
d9:40:b2:a3:fc:3f:4b:55:fd:7e:d2:01:33:c9:aa:
4a:41:56:b8:6d:38:31:10:c1:4b:b5:b7:3b:58:33:
20:c0:22:fc:97:d0:5f:39:c6:7b:74:40:4c:da:74:
67:0f:44:d5:68:c0:65:af:0e:19:e8:cd:a0:11:66:
6b:e2:ca:84:64:40:d0:0e:f2:d4:a3:5a:58:4a:13:
be:49:1e:b8:aa:5e:1e:c3:01:0e:14:a7:93:23:6e:
c5:cf:5a:3b:94:fa:5d:9e:68:79:03:65:83:0f:88:
e4:03:90:3c:59:0a:6d:cc:12:88:18:2a:25:7b:e0:
ed:eb:3a:58:90:46:47:12:a3:4d:5a:4c:cd:f5:45:
e3:fb:be:48:be:3d:49:2c:a7:04:e1:12:04:11:fc:
2d:23:ee:bd:5b:1e:c3:0e:f5:31:06:78:58:0e:b0:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:9C:33:0D:0E:0E:07:2E:9B:42:7A:4F:CD:DE:B8:85:23:17:FF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RwqcMw0ODgcum0J6T83euIUjF_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:13c0::/44
Signature Algorithm: sha256WithRSAEncryption
1d:f5:08:44:8f:ef:89:d0:89:3c:e6:2b:1d:2d:ea:a8:eb:8f:
3e:c5:04:2a:9f:1a:50:50:5c:b8:a4:3a:3e:0c:7b:c7:73:b2:
21:df:95:89:e2:cd:fa:19:14:23:02:81:4d:80:8d:7f:5e:62:
21:06:eb:17:2e:8c:76:c9:7b:5c:c5:e9:79:35:90:d4:f7:1c:
c0:59:d6:39:44:da:6d:48:fd:ff:e9:ed:c1:a8:03:89:99:a4:
d1:3f:0d:62:81:1c:d9:1d:c0:e6:29:3e:5d:75:8c:f5:97:5b:
d1:7a:14:94:1b:4f:43:76:7b:d9:ed:2d:77:ef:7e:12:28:9e:
a6:36:09:41:60:c1:8a:4e:04:48:00:3f:0e:00:39:78:a8:72:
b9:86:34:0a:0e:de:43:e9:64:90:37:03:c7:e2:59:3e:24:59:
db:51:e5:9f:24:24:5c:81:00:fb:cf:8b:76:c8:39:83:59:43:
2c:d9:c3:0b:36:55:76:50:37:64:1a:61:b8:9b:b1:c2:05:46:
61:fe:73:af:f5:02:a8:a1:44:4f:8b:fb:70:9d:ab:9a:1c:bb:
71:3e:44:32:e3:8a:aa:17:bf:36:03:41:33:a8:4c:57:07:d5:
cb:af:99:05:26:71:37:8e:68:71:ac:27:f8:41:00:4c:b5:73:
d0:79:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org