Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XC3ojducQytXjq9LKO0QYvcbWzY.roa
File: XC3ojducQytXjq9LKO0QYvcbWzY.roa (raw, json)
Hash identifier: 1/GLBIj04AsLbS+WCfJWVC3ZDV5MiWzyunyAd5cY1xk=
Subject key identifier: 5C:2D:E8:8D:DB:9C:43:2B:57:8E:AF:4B:28:ED:10:62:F7:1B:5B:36
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018B5279CF26F381138DB1512092418F7D6C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XC3ojducQytXjq9LKO0QYvcbWzY.roa
Signing time: Sat 21 Oct 2023 13:43:16 +0000
ROA not before: Sat 21 Oct 2023 13:43:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57351
IP address blocks: 2a10:2f00:19a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:52:79:cf:26:f3:81:13:8d:b1:51:20:92:41:8f:7d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 21 13:43:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c2de88ddb9c432b578eaf4b28ed1062f71b5b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:af:fb:80:ba:c5:47:d6:8f:9c:a5:86:a0:
1f:2f:c9:f3:43:49:99:68:58:e4:14:ad:d8:a5:39:
8e:4e:4b:2e:19:e4:8b:ad:b5:fc:98:e9:b4:67:01:
7d:07:93:b4:4f:63:b2:15:c7:95:07:f3:4a:8f:d5:
85:0b:eb:8c:67:7a:ef:4c:72:4c:17:8e:53:a5:56:
06:9a:3c:d1:7c:4f:d1:9e:58:8a:82:8f:34:2c:5c:
f8:47:81:bf:0e:e6:e0:d0:ef:60:c7:98:65:2a:55:
87:6e:f2:b5:0d:91:df:3b:e9:78:8a:5e:30:75:d0:
14:34:38:13:fb:78:6e:41:7f:c1:6d:bc:97:53:04:
fc:77:ac:96:0c:79:d4:7c:23:64:c1:e1:3a:2f:44:
0e:0f:1e:f2:1f:f6:68:e9:92:a4:ef:8f:13:b2:fa:
0b:39:01:88:9e:7f:4f:3b:14:7c:8d:fe:3d:88:e0:
d2:b4:27:3a:7c:82:bb:a7:44:3c:91:cc:d3:d2:20:
18:c3:80:05:e6:90:37:af:1f:9e:2f:cb:be:0e:10:
90:3e:83:0d:5d:bc:e9:bc:41:10:b0:e2:ae:4a:1d:
1b:50:d3:09:4c:04:a7:38:ea:57:18:2b:e6:55:f0:
66:8b:10:d8:64:fd:79:62:ef:ef:5d:e4:32:12:dc:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2D:E8:8D:DB:9C:43:2B:57:8E:AF:4B:28:ED:10:62:F7:1B:5B:36
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XC3ojducQytXjq9LKO0QYvcbWzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:19a::/48
Signature Algorithm: sha256WithRSAEncryption
03:6f:39:3c:92:7f:f5:4d:5a:37:ed:37:f8:52:1f:ac:7b:fa:
0c:6d:ab:90:83:60:52:63:fe:67:3f:a5:ee:20:c1:f0:52:9c:
e8:5d:a7:75:1a:05:32:56:1c:fb:75:62:cb:fd:e4:c5:d3:31:
53:02:16:f7:c5:96:5c:e7:56:a0:a7:d7:0d:46:75:a8:4a:9d:
7c:83:4e:30:4b:3d:e9:16:a4:50:bd:62:f2:0c:ec:f9:72:36:
75:ab:d6:93:9b:30:a0:a7:11:02:34:77:0b:f5:4d:c1:6f:85:
f4:e2:f4:58:56:5b:95:a4:80:8c:3a:7c:a7:0b:77:ae:88:27:
e7:66:22:f2:af:af:57:ab:8d:6c:48:a6:4b:67:46:0d:60:41:
f4:51:74:5e:62:bf:1e:61:fd:2b:c7:19:d3:6e:1f:0f:78:7b:
86:e0:19:18:ab:c2:4f:aa:b0:51:96:f0:f9:9d:6a:f9:79:33:
96:d3:c1:6c:61:87:64:ce:ec:52:16:c3:df:c6:ca:eb:d9:08:
bd:38:2f:5c:91:ac:ff:c8:02:e4:c2:00:e3:7a:09:ed:f8:ae:
61:5c:fa:3a:e4:33:cb:ce:ff:4f:57:96:56:bb:94:07:27:d5:
bb:5d:4c:42:8e:45:a2:da:27:48:90:78:70:94:18:0b:fc:68:
d8:89:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org