Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WIrLPZvhmcRXOK92a94-2rSRdB8.roa
File: WIrLPZvhmcRXOK92a94-2rSRdB8.roa (raw, json)
Hash identifier: LNTjcQomSCDlZ43/4ZnFUIhgcaAA/2UDEE1grIfGEfE=
Subject key identifier: 58:8A:CB:3D:9B:E1:99:C4:57:38:AF:76:6B:DE:3E:DA:B4:91:74:1F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018849FF8F13C227A1234535B49D2D3485AC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WIrLPZvhmcRXOK92a94-2rSRdB8.roa
Signing time: Tue 23 May 2023 19:04:25 +0000
ROA not before: Tue 23 May 2023 19:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151202
IP address blocks: 2a10:ccc0:cc0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:ff:8f:13:c2:27:a1:23:45:35:b4:9d:2d:34:85:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 23 19:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=588acb3d9be199c45738af766bde3edab491741f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:13:cd:0b:73:cd:fc:d1:4c:8f:cb:f0:3a:
70:e0:3f:10:69:67:97:b2:a1:4f:09:01:8d:ae:70:
32:ad:23:84:0c:d8:40:d2:b8:ec:06:a6:b4:fb:ed:
d0:b1:d6:79:36:f3:80:6b:af:8d:87:41:5e:46:00:
db:8d:d8:6e:0e:07:62:18:c3:9e:3f:e2:36:35:7f:
a2:09:35:c9:92:1e:53:22:b3:ca:6d:c5:bc:db:cb:
f4:fc:4c:a2:42:f9:c7:51:1c:fb:04:14:f3:c1:61:
bd:70:2d:7d:2c:1f:fe:5c:cc:d9:96:19:c1:84:04:
b7:bf:bd:cf:ae:03:1f:aa:3a:58:f5:44:db:9e:01:
bb:29:09:bd:af:93:fb:7c:ff:de:96:06:52:2a:21:
30:bd:ea:54:0a:65:d9:aa:e8:e1:1e:ae:af:81:47:
7f:08:3b:fb:05:d9:c2:f1:d4:4e:e1:9a:72:06:30:
97:91:59:45:a6:fd:8f:01:77:73:0e:99:99:97:33:
32:cd:ea:18:07:de:ec:c3:fb:b8:25:d8:c7:5a:45:
b5:5e:07:ae:38:de:02:29:62:e2:4a:79:74:47:a8:
b0:4f:db:7e:26:18:c1:ab:64:f1:03:75:6f:24:22:
92:46:eb:cb:36:cf:bc:99:c4:94:c3:6d:34:d1:d8:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:CB:3D:9B:E1:99:C4:57:38:AF:76:6B:DE:3E:DA:B4:91:74:1F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WIrLPZvhmcRXOK92a94-2rSRdB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:cc0::/44
Signature Algorithm: sha256WithRSAEncryption
57:0f:86:e3:fb:18:7a:da:60:1c:53:e9:cb:53:6b:7f:0c:21:
b3:16:19:4c:c7:6c:a7:69:4b:8d:cd:79:e2:af:43:bd:f8:a8:
f0:02:6d:30:2a:52:79:d0:2a:9c:6d:65:99:d3:a9:18:d1:6b:
e8:cc:ea:e6:b3:e1:b3:9d:e3:ab:47:46:d9:ed:62:47:7f:db:
cb:6e:f6:fb:6f:b2:79:c8:7b:67:f7:b5:c3:cb:4b:f0:e3:41:
bc:c2:72:1c:6c:29:54:d7:85:4a:39:26:95:a2:5d:cf:0d:dc:
0d:f3:a8:90:f5:0a:c0:d7:90:70:22:10:bf:2f:a1:8d:fb:ed:
b0:1c:6b:9c:93:db:e8:7e:3c:a6:79:48:eb:9c:aa:0b:2a:ea:
0f:d1:60:b2:84:a5:63:53:b1:15:7b:26:16:f1:27:45:56:4f:
83:88:f9:1d:f4:a6:53:b2:a3:1c:26:9f:05:91:31:a2:59:5f:
29:90:fb:e1:c7:6f:75:9e:cc:c1:54:5e:e3:46:31:ac:a5:95:
bf:8e:da:1c:1a:00:2d:f4:38:ec:a7:c0:04:98:05:ad:02:bb:
e3:a0:bf:fe:1d:15:15:b5:fd:27:10:95:3f:72:a6:dc:f5:22:
94:f1:4b:9d:3b:bf:fe:78:b1:b6:04:6f:f1:fd:f5:25:c0:9c:
35:f9:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org