Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wdzn5YaI1bxc6U-82MKKDex0NNs.roa
File: Wdzn5YaI1bxc6U-82MKKDex0NNs.roa (raw, json)
Hash identifier: WSMgCDnTaYtIBkGCH3JXlLtxjcX/FumtU9Ny+u7EuiU=
Subject key identifier: 59:DC:E7:E5:86:88:D5:BC:5C:E9:4F:BC:D8:C2:8A:0D:EC:74:34:DB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018B7CD2929F1E7E6B7AA67B233424205749
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wdzn5YaI1bxc6U-82MKKDex0NNs.roa
Signing time: Sun 29 Oct 2023 19:04:16 +0000
ROA not before: Sun 29 Oct 2023 19:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211063
IP address blocks: 2a0e:97c0:480::/44 maxlen: 48
2a0e:97c0:480::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7c:d2:92:9f:1e:7e:6b:7a:a6:7b:23:34:24:20:57:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 29 19:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59dce7e58688d5bc5ce94fbcd8c28a0dec7434db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ab:41:1b:c9:80:01:10:a7:10:3a:0d:53:86:
ea:78:56:67:cf:56:f3:e5:c1:a7:0e:bf:76:1c:02:
db:ab:6b:36:16:c6:d3:22:48:61:cd:d9:7a:cd:fd:
b1:84:83:c1:38:3e:c4:67:3e:7f:de:a5:9f:62:88:
29:23:07:c9:23:a7:9b:f9:26:e4:19:ca:2f:e7:d8:
41:7b:41:00:be:5e:b3:39:9a:b9:4a:cc:be:f7:5b:
bf:34:e2:a5:5e:bc:7f:af:00:14:a4:2c:b6:b8:59:
75:e1:cb:06:e7:ce:45:9f:dd:9d:bf:8b:13:8a:7a:
43:c6:19:b1:bf:32:d5:81:4a:cf:3b:07:b0:fa:dd:
34:26:ba:0d:8e:71:3a:a4:38:ef:72:9b:be:b0:ff:
1e:63:5a:83:d9:26:f0:64:1d:44:76:69:07:31:89:
f0:e5:ea:05:13:ac:82:ff:68:81:2c:e8:6b:42:63:
49:99:aa:76:b9:95:73:a2:04:21:50:71:bc:47:36:
58:f5:d3:45:ba:e2:ba:9b:1e:26:74:5e:b3:08:10:
9f:cf:7d:7b:2f:69:88:90:e2:03:26:ed:65:31:62:
c0:a6:6a:5a:ae:7c:12:8b:6a:cb:a1:43:e5:79:28:
7f:33:6f:59:78:f7:f5:45:94:dd:43:df:9d:f4:f9:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DC:E7:E5:86:88:D5:BC:5C:E9:4F:BC:D8:C2:8A:0D:EC:74:34:DB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wdzn5YaI1bxc6U-82MKKDex0NNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:480::/44
Signature Algorithm: sha256WithRSAEncryption
38:33:1d:19:3c:a2:2b:2f:a3:85:03:91:f2:a3:4c:d6:a3:74:
57:9b:ff:f6:35:73:06:ee:9c:56:96:65:dc:5f:fe:f7:53:d1:
95:8c:c7:5b:ab:31:d3:22:4d:89:75:66:38:5f:24:76:27:50:
dd:8a:ee:48:e7:ab:38:66:47:87:c3:1c:ea:0b:d8:fd:e2:a0:
9d:69:ef:e4:66:7a:8e:f2:ff:38:7d:29:35:c6:8e:e4:63:66:
7a:4e:79:3f:6e:ac:c9:0b:3f:01:51:2e:db:f2:6f:36:cb:7c:
69:e1:e4:87:e9:cb:b6:f1:37:36:d3:20:4a:98:c6:77:91:e9:
2f:b4:1c:1a:65:a4:2c:d7:9b:7b:c2:c6:d4:39:ae:97:51:7e:
70:33:9a:d3:85:17:49:3d:2b:ec:b7:52:b0:fc:aa:f6:14:2b:
f3:cd:a8:ce:1c:bc:5b:b8:49:19:79:90:d8:5b:c6:79:35:c7:
58:7e:90:4f:d8:be:07:dc:ab:70:22:89:b8:58:82:75:f6:f7:
a8:95:ef:1d:ca:f9:62:61:c3:0d:6a:7b:8b:1a:9b:e8:d7:eb:
e8:bb:03:5b:25:37:24:39:5b:fc:13:cf:d3:3d:03:fd:8d:84:
cc:a3:0a:c0:52:2f:aa:fa:2a:c0:b1:4e:64:96:f6:a6:9a:ce:
d5:d1:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org