Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VIIxBirB4ubhGnuxkthi6SSKBPw.roa
File: VIIxBirB4ubhGnuxkthi6SSKBPw.roa (raw, json)
Hash identifier: fw0SvbQMjiCH2pfoYhx7lkswazVS3+o2EZ3L2MUUN3M=
Subject key identifier: 54:82:31:06:2A:C1:E2:E6:E1:1A:7B:B1:92:D8:62:E9:24:8A:04:FC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7AF649B8A2645279221DBD3E94755
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VIIxBirB4ubhGnuxkthi6SSKBPw.roa
Signing time: Mon 02 Jan 2023 05:15:09 +0000
ROA not before: Mon 02 Jan 2023 05:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203446
IP address blocks: 2a0e:97c0:470::/48 maxlen: 48
2a0e:97c0:471::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:af:64:9b:8a:26:45:27:92:21:db:d3:e9:47:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=548231062ac1e2e6e11a7bb192d862e9248a04fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:e5:a3:59:65:84:ad:2b:36:15:7e:3d:8b:
e4:17:cf:63:15:01:f1:ef:f6:c4:02:cb:41:c5:b4:
e1:4c:df:fe:dd:e8:c4:80:af:ad:25:8e:60:76:12:
ee:d5:f7:9a:64:ed:90:65:de:dd:4d:d0:da:28:6e:
3f:f2:77:f1:7c:41:e9:98:ce:c3:22:ce:87:85:ab:
24:51:bd:c3:0c:bb:71:a1:49:e4:91:aa:63:20:39:
57:58:1f:73:fb:ed:c6:a2:e0:ae:d2:34:0d:d6:ac:
28:a9:6a:a5:a5:db:06:48:3c:85:05:4a:56:cc:c7:
ba:f1:bb:84:87:7a:92:5b:bf:4a:0a:40:2b:4c:04:
db:76:48:c0:d4:b1:52:54:58:06:29:ca:15:26:2d:
29:d5:3b:57:59:2f:f9:ca:c9:bc:58:e9:1c:d6:93:
06:0c:15:44:88:fc:38:12:89:15:cb:bf:a0:88:5f:
a1:d1:5d:48:07:b5:51:c2:17:08:c2:3e:3d:73:19:
93:36:5e:a2:d7:cf:36:85:cd:81:ae:d2:d8:14:e1:
f2:fb:f3:8d:7f:f7:8d:ce:53:6e:73:8e:dc:8e:3b:
89:4d:61:36:3d:31:9e:a1:a8:3a:2c:9b:d9:dc:4a:
c2:d3:d5:f9:8e:9b:13:b0:37:30:5f:99:9e:a2:e0:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:82:31:06:2A:C1:E2:E6:E1:1A:7B:B1:92:D8:62:E9:24:8A:04:FC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VIIxBirB4ubhGnuxkthi6SSKBPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:470::/47
Signature Algorithm: sha256WithRSAEncryption
ac:88:96:a7:cc:cb:40:a5:76:56:74:79:53:09:d5:85:5d:f8:
4a:8f:c7:35:43:62:ec:53:77:20:de:5e:eb:18:89:83:77:92:
05:5d:75:6f:65:b8:2d:2a:d3:92:b2:27:32:ff:6c:36:47:27:
4d:65:0c:b4:25:ba:5e:f7:8e:21:a7:44:d6:be:ca:d6:52:e6:
ec:54:d0:8a:8e:af:a8:79:e0:28:97:a9:37:37:07:a2:5d:30:
05:a2:b1:ad:f5:74:25:31:ad:fc:3b:72:90:ce:a2:1f:93:97:
df:3f:e8:75:80:ca:06:c0:a7:ba:cf:d3:c5:05:0f:f6:e1:98:
63:e1:5b:3f:82:db:9f:8e:80:98:c2:f3:9a:a3:90:a8:8a:14:
c4:a0:0a:47:30:ec:a5:61:a9:74:5f:17:e4:d7:ac:26:c0:a7:
44:96:80:0b:18:db:6a:fe:49:9b:6c:1e:94:c8:67:d3:bb:d9:
57:f0:bf:be:92:1e:7e:c7:46:e6:48:ab:7c:e0:7a:17:85:35:
04:8d:5e:59:ed:9e:9a:be:47:ec:5e:29:1a:65:24:50:d1:36:
96:af:73:4c:f5:f1:31:ca:e2:4f:b7:79:c0:01:f1:9e:3f:a1:
9a:5e:ef:ee:e6:bf:26:63:8a:9a:1b:e7:c0:0d:45:6d:75:6e:
f8:5a:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 00:18:09 2023 by rpki-client on console-fra.rpki-client.org