Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V5TZCwdqr0vJeEmJZbvYfng7SU8.roa
File: V5TZCwdqr0vJeEmJZbvYfng7SU8.roa (raw, json)
Hash identifier: 3xtor4sPRJuXUShRxcBocyM+JrL6kE3iKLst2/jnUMg=
Subject key identifier: 57:94:D9:0B:07:6A:AF:4B:C9:78:49:89:65:BB:D8:7E:78:3B:49:4F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AF44FC76631B1D97021E9618290B2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V5TZCwdqr0vJeEmJZbvYfng7SU8.roa
Signing time: Tue 24 Jan 2023 16:09:49 +0000
ROA not before: Tue 24 Jan 2023 16:09:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211267
IP address blocks: 2a0e:b107:1370::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:f4:4f:c7:66:31:b1:d9:70:21:e9:61:82:90:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5794d90b076aaf4bc978498965bbd87e783b494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:ba:db:c7:c4:a5:25:d8:8c:b1:57:2a:a1:
00:a7:67:8e:cc:fb:9d:4f:d3:99:fc:e6:27:f6:ea:
ec:be:b7:4a:7c:d9:eb:dd:77:40:a8:87:81:3f:c0:
c5:3d:3f:52:f9:83:69:14:9b:d8:75:0c:cd:7d:1d:
75:02:50:c4:34:4a:b5:b2:bf:4a:4e:a4:ae:95:3e:
ad:64:4a:15:67:af:ee:6e:ba:9e:b4:4e:8d:ae:09:
98:77:96:00:35:73:8a:de:a5:38:3d:e7:53:2d:6e:
ab:17:31:ab:f3:b3:6e:97:2e:1f:0b:b7:5d:91:a8:
1c:37:6d:4f:6f:fe:40:82:1e:d9:21:d7:77:6a:65:
22:4f:73:57:97:83:4f:de:f6:5d:33:ce:47:69:c7:
65:ac:41:5e:3b:7f:44:24:a0:da:4a:e5:61:f6:14:
4a:52:bc:18:38:07:08:46:20:e0:26:73:fc:71:2e:
72:1a:b2:24:b2:c4:fd:85:c9:4c:31:bf:48:aa:6f:
39:29:1b:3b:0b:9a:17:52:07:9f:14:73:40:e9:bf:
98:88:3c:af:28:52:16:49:73:aa:4f:25:90:90:ef:
70:df:0d:2a:ba:b6:8f:cf:8e:e1:af:e2:ab:bd:d7:
95:17:ef:58:f3:63:dd:5c:e8:b6:00:25:db:64:6a:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:D9:0B:07:6A:AF:4B:C9:78:49:89:65:BB:D8:7E:78:3B:49:4F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V5TZCwdqr0vJeEmJZbvYfng7SU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1370::/44
Signature Algorithm: sha256WithRSAEncryption
6a:cf:1c:34:12:b2:34:8f:aa:c5:0f:df:d1:b1:d9:c1:4f:cb:
2b:a1:17:30:e9:19:99:b7:95:93:fa:e8:4f:80:b5:b8:35:59:
99:32:6c:3e:16:05:08:f4:6c:87:d2:76:b8:9b:f0:88:45:b5:
89:c2:35:ee:ce:13:86:d9:e4:c8:54:20:ee:ce:c7:f0:fb:e1:
ea:b5:26:f9:fd:6d:d7:d0:9a:b8:28:3f:f7:d0:83:11:02:99:
ab:0f:99:80:eb:9f:c4:ef:79:ac:74:5d:5c:98:6a:50:24:33:
21:67:25:27:43:e0:cd:68:8b:12:23:81:93:6d:fc:8a:ee:8e:
b0:77:cf:3c:c6:5c:b8:5b:29:f3:cd:9b:7c:b7:5e:f3:c2:5b:
fa:a8:11:64:0d:04:7d:e4:bc:88:79:26:91:63:db:a6:a1:cc:
1e:01:96:86:51:59:da:22:02:2e:92:20:02:fb:b8:48:17:e0:
d2:f7:37:e7:46:2e:51:9c:15:bf:ee:5d:0b:ca:6e:d9:77:ec:
08:6e:2b:ca:7a:e4:50:98:5f:79:d8:a6:8d:09:fc:86:71:6c:
7f:63:f0:a2:29:cf:8f:4d:ed:8c:86:72:67:18:07:a4:15:18:
c0:d4:6a:42:75:5c:6d:59:11:4e:1a:3f:1e:3f:1c:b4:19:aa:
8b:0c:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:50 2024 by rpki-client on console-ams.rpki-client.org