Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TMrIqt9EJq1Rdbn_laSOIItBt2A.roa
File: TMrIqt9EJq1Rdbn_laSOIItBt2A.roa (raw, json)
Hash identifier: yXXr82XAne38jAkX3RcVp5TgYS40QbIeBGzYgIkwA/Y=
Subject key identifier: 4C:CA:C8:AA:DF:44:26:AD:51:75:B9:FF:95:A4:8E:20:8B:41:B7:60
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186BDC35C118D3244E4CF4FE4371650A229
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TMrIqt9EJq1Rdbn_laSOIItBt2A.roa
Signing time: Tue 07 Mar 2023 20:29:02 +0000
ROA not before: Tue 07 Mar 2023 20:29:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205212
IP address blocks: 2a0e:b107:2a0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:c3:5c:11:8d:32:44:e4:cf:4f:e4:37:16:50:a2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 7 20:29:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ccac8aadf4426ad5175b9ff95a48e208b41b760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:e4:38:c3:5e:4b:9a:25:56:d7:d1:ca:80:
08:8d:02:d1:fa:47:54:f4:83:0e:8a:ec:f6:30:0c:
d6:53:75:79:79:bb:ae:92:4a:b2:2b:23:42:e5:96:
ba:a8:99:c4:f6:53:59:83:c4:10:03:4c:e3:22:40:
50:81:fb:19:b3:45:c6:d7:56:28:18:e7:bc:a6:55:
6f:e9:9e:ae:27:0c:7b:51:6b:c5:50:a8:60:fb:d8:
92:28:90:02:f2:a8:2d:4f:5e:0b:2c:98:e3:97:7c:
17:c2:5a:dc:f6:c0:ec:3e:3d:8b:37:f4:fb:3d:ff:
09:01:d4:c2:00:51:36:92:e7:4d:3b:70:e2:ce:dd:
10:61:8f:ae:ba:88:d4:e5:6f:5f:cc:69:e9:17:c0:
ae:3f:7a:4f:7f:8a:0d:75:7e:14:51:a5:28:52:d5:
9a:99:ba:40:d9:e7:ec:d1:78:91:64:9b:1e:cd:9f:
91:61:61:61:65:bd:20:7b:8c:4d:4e:3b:d1:9f:19:
dc:d6:fe:54:40:a8:9e:d4:61:31:81:48:bd:83:1c:
a1:39:0b:28:4b:7c:ef:e3:88:9e:bf:81:85:3e:f3:
72:79:40:e9:67:b0:67:7e:d4:6c:2f:87:d0:74:af:
49:a9:b4:b8:d9:00:26:93:1b:7f:d0:27:e4:60:d4:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CA:C8:AA:DF:44:26:AD:51:75:B9:FF:95:A4:8E:20:8B:41:B7:60
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TMrIqt9EJq1Rdbn_laSOIItBt2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2a0::/44
Signature Algorithm: sha256WithRSAEncryption
6f:27:96:fe:d3:e5:b2:7b:9f:72:73:d7:e2:f5:5b:0d:35:f3:
a6:60:93:f4:79:55:5d:81:cd:f3:45:9c:15:9c:7d:5a:26:69:
48:1e:48:71:29:1c:d5:c5:fb:c8:2c:7c:3d:89:53:5b:06:53:
2a:8f:27:b9:f7:a6:7a:50:5e:04:a1:95:63:82:d4:f7:97:e6:
68:f5:ab:b7:7c:ab:20:69:cd:62:68:6b:c6:3f:c9:1f:ed:5c:
d6:f0:af:47:f4:25:20:35:54:4f:78:65:e3:91:5e:20:29:4a:
79:d2:8d:7e:49:d2:be:12:a3:2a:4d:97:01:8e:a7:7e:eb:01:
df:2e:90:fc:1d:df:ce:d0:89:6c:6f:65:8e:eb:1d:66:87:e7:
a3:1b:06:e7:b6:84:eb:cd:ff:7d:46:09:4f:a9:db:c3:14:d3:
c8:59:19:93:3d:61:d7:3e:73:af:98:f1:26:0c:71:2a:c2:49:
a2:6f:15:73:2a:f4:2f:17:75:0e:c6:fc:dc:9f:3c:26:28:a7:
de:54:f6:58:6d:f2:20:cc:f7:15:de:fd:a9:88:18:9a:cc:8a:
ec:f8:af:10:50:a4:13:40:ad:d9:48:a0:d3:d9:03:18:51:ea:
51:78:71:c8:dd:5b:52:4f:a1:59:de:1a:af:49:42:0d:9c:3b:
b6:16:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org