Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T3nOuBUTsADEVEQEYt_FDfqvfIU.roa
File: T3nOuBUTsADEVEQEYt_FDfqvfIU.roa (raw, json)
Hash identifier: QdPjliDgyr8ET7a4sfCt0Pbp2ozi2lK5DukrJ/9GMiU=
Subject key identifier: 4F:79:CE:B8:15:13:B0:00:C4:54:44:04:62:DF:C5:0D:FA:AF:7C:85
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C08E51D5B02E841EB0AF5207CBEE39505
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T3nOuBUTsADEVEQEYt_FDfqvfIU.roa
Signing time: Sat 25 Nov 2023 23:51:22 +0000
ROA not before: Sat 25 Nov 2023 23:51:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210606
IP address blocks: 2a10:2f00:175::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:08:e5:1d:5b:02:e8:41:eb:0a:f5:20:7c:be:e3:95:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 25 23:51:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f79ceb81513b000c454440462dfc50dfaaf7c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:75:07:49:50:a8:05:db:90:d9:ac:ee:cc:
80:d4:13:f2:ec:bf:5d:5e:97:2a:b6:aa:35:7b:c0:
e7:06:e5:f1:59:17:80:db:3c:4c:af:a2:aa:a8:96:
2c:fb:8a:57:67:4b:43:5a:61:b9:b8:c8:2b:56:95:
30:72:e5:b3:5c:34:e4:a9:81:7c:f0:e1:42:c1:85:
d5:c0:41:4c:88:db:79:c3:e9:81:61:98:f0:c4:7e:
70:19:6e:48:e5:3b:7d:2e:f8:ca:14:c7:ec:ae:df:
8a:53:73:a1:dd:34:67:38:92:fc:71:d9:64:14:af:
d2:a1:14:bb:de:39:0c:a9:84:51:e4:f3:15:cb:af:
ac:de:2b:e1:d3:6a:9b:48:16:ea:e8:57:ff:34:97:
34:e9:20:6b:ca:4a:3c:23:38:54:b4:75:8a:3f:a8:
89:65:1e:6b:3e:11:51:64:2f:17:6a:85:e3:60:3f:
3c:3f:fc:6c:be:55:6b:31:fa:73:20:b5:25:78:5c:
78:8a:31:ce:a8:83:93:f5:8e:3a:5b:ac:6c:65:69:
f7:59:98:48:6c:9d:42:3b:e4:67:95:3e:b7:b3:7e:
9f:e1:73:a8:e7:0f:0f:86:48:1c:13:6a:4c:f0:b0:
4f:50:e2:4b:fb:7d:7c:e4:7c:f8:cb:0d:5d:34:a7:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:79:CE:B8:15:13:B0:00:C4:54:44:04:62:DF:C5:0D:FA:AF:7C:85
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T3nOuBUTsADEVEQEYt_FDfqvfIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:175::/48
Signature Algorithm: sha256WithRSAEncryption
32:5a:6e:8c:e2:f4:3e:51:ac:8d:71:0c:00:62:38:95:86:f0:
40:68:d8:58:09:7b:f4:e9:2b:71:6e:f8:90:1c:74:2b:da:9b:
52:41:bd:d7:6a:db:b3:eb:6a:39:ad:0b:07:95:37:06:93:30:
1b:09:bc:e6:ff:e6:4c:e2:18:5b:b1:6a:51:64:8f:fa:34:ae:
c7:ef:06:72:4e:11:cb:d5:95:fd:dc:90:32:50:12:fd:6e:99:
e2:ad:5c:ff:0a:d5:16:5e:6c:31:b2:f2:0b:1b:95:b3:af:a2:
7a:83:9a:01:7b:55:e4:2e:70:89:cb:6f:6c:df:33:ee:2f:d3:
5b:6e:be:7b:41:59:59:57:19:80:2d:96:1a:25:8f:27:06:47:
0f:c7:ec:78:71:26:13:82:51:f6:72:e2:36:68:22:48:e2:18:
b7:00:64:fe:b0:e3:d7:cd:0c:3a:ff:0b:5e:3b:a6:df:5e:c7:
6f:49:e1:d8:a2:c0:fd:4e:8e:48:cb:d6:17:16:97:1d:ff:d8:
5d:f0:0c:68:32:c7:ee:b1:3f:84:96:c6:32:8c:d4:7e:18:ea:
02:86:e9:49:f3:be:bb:5b:59:75:47:f2:1c:ee:d5:86:b9:82:
c0:90:3b:27:2a:f6:45:6d:c8:b0:4e:31:6c:33:87:59:22:c1:
e5:53:d7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org