Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Up_5Zsd-Afn4sqalN4gbY3800bs.roa
File: Up_5Zsd-Afn4sqalN4gbY3800bs.roa (raw, json)
Hash identifier: EsGfmK5CnDuW8KKs9P3xf4EflHrkMVQvwHS8umpPRtE=
Subject key identifier: 52:9F:F9:66:C7:7E:01:F9:F8:B2:A6:A5:37:88:1B:63:7F:34:D1:BB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187B4FC8C9CA99808CA077F7A999B4B7D9D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Up_5Zsd-Afn4sqalN4gbY3800bs.roa
Signing time: Mon 24 Apr 2023 20:37:42 +0000
ROA not before: Mon 24 Apr 2023 20:37:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203442
IP address blocks: 2a0e:97c0:bc0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:fc:8c:9c:a9:98:08:ca:07:7f:7a:99:9b:4b:7d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 24 20:37:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=529ff966c77e01f9f8b2a6a537881b637f34d1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:56:82:f6:a2:11:02:14:a9:a0:6d:d1:51:
ee:f4:ae:36:a7:be:d7:87:7b:e4:a7:f7:3a:85:66:
8a:9f:d5:cd:72:42:1f:14:c0:cf:19:63:f7:49:eb:
a3:2c:70:16:0a:b3:9d:30:f2:60:c8:ee:2f:cd:89:
fe:b2:89:12:64:89:af:4e:19:99:5d:c8:1a:c8:82:
15:6b:2a:82:22:91:35:f3:d9:20:df:d2:b2:b5:87:
df:32:6d:fb:dc:1c:7e:36:56:a4:fa:a0:34:2a:f6:
f8:98:e8:e8:e3:0f:ad:5f:dc:ae:be:fa:36:9e:b8:
21:78:83:62:3b:0d:a7:f5:03:fc:d5:94:86:72:fc:
c0:32:80:a3:f7:8f:1e:69:76:fc:42:12:2f:eb:8e:
74:e7:36:01:1d:ac:42:20:97:aa:04:4b:49:84:84:
03:61:0b:f8:77:a3:08:41:90:29:7d:08:64:2a:8b:
0c:0d:a5:ee:b8:db:eb:ca:2d:5b:38:02:b5:c9:bd:
24:cd:e1:01:46:aa:42:0a:f7:47:28:f7:fc:68:6a:
56:09:b7:60:6d:79:64:b5:5e:a0:9b:28:0e:8e:93:
89:0e:7b:90:85:f1:f0:af:45:4c:21:da:e5:6b:9b:
29:eb:f0:ed:cc:9d:08:25:1f:0b:26:e8:33:4f:1a:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9F:F9:66:C7:7E:01:F9:F8:B2:A6:A5:37:88:1B:63:7F:34:D1:BB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Up_5Zsd-Afn4sqalN4gbY3800bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:bc0::/44
Signature Algorithm: sha256WithRSAEncryption
10:8b:a9:80:66:cc:78:bc:bc:9b:70:f1:c8:21:a4:0a:fc:4d:
46:16:b1:a3:5f:36:d5:6c:0b:ca:cb:eb:a9:f3:28:a8:15:7d:
0d:4c:19:d6:f3:4d:28:77:7a:87:f9:2d:04:ef:fb:65:f0:92:
96:ab:71:16:97:73:5e:1e:cf:a8:23:08:28:c5:b0:50:af:ce:
cc:ca:a5:7a:30:ad:e6:1d:eb:eb:e9:bc:2d:94:0f:fd:07:28:
d0:2e:25:5d:1f:da:4e:a0:3c:0e:e1:6b:e1:b5:c8:99:99:63:
12:fb:2b:59:6b:2a:1b:fe:3a:f5:dd:c5:12:c2:7c:ae:2e:58:
f3:71:87:65:c2:27:5d:55:36:30:7c:73:36:fb:1b:0c:ec:b8:
32:0a:bd:cb:5e:be:76:fa:7c:79:73:55:81:92:b3:79:90:c2:
32:84:54:e0:93:14:be:8f:21:8e:1b:fb:57:4e:3d:70:d1:27:
d3:ab:72:a6:c6:49:0a:e3:47:da:fb:e9:b5:30:1e:57:fb:7f:
4c:8c:63:51:c3:86:81:4d:0b:af:d8:4a:5d:9e:ac:b4:17:d1:
5b:7a:25:e7:f8:f6:c4:86:12:8e:6e:45:c2:2d:d5:5b:30:21:
45:69:54:eb:6b:98:db:37:ec:f0:00:38:1b:80:f7:53:70:11:
cd:5f:ba:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org