Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XdcdaWcskp68BFVp_kHBXQpYxeU.roa
File: XdcdaWcskp68BFVp_kHBXQpYxeU.roa (raw, json)
Hash identifier: 5gyAqou08MDrWRwdL5IpWMlyk7YibGRmH9EaT+ejGPM=
Subject key identifier: 5D:D7:1D:69:67:2C:92:9E:BC:04:55:69:FE:41:C1:5D:0A:58:C5:E5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7CCEF62F89C746DEFA0F5C75911DE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XdcdaWcskp68BFVp_kHBXQpYxeU.roa
Signing time: Mon 02 Jan 2023 05:15:17 +0000
ROA not before: Mon 02 Jan 2023 05:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207550
IP address blocks: 2a10:2f00:111::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:cc:ef:62:f8:9c:74:6d:ef:a0:f5:c7:59:11:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5dd71d69672c929ebc045569fe41c15d0a58c5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:92:4c:b1:c5:1a:2e:ba:f1:88:bf:22:ae:
16:a0:45:7a:ed:40:ea:c4:3c:3e:40:20:d3:9a:de:
9f:30:2c:d8:e0:42:dc:42:c8:e0:81:2e:a7:b4:d2:
ff:a1:7f:5f:6a:df:d4:56:52:5b:55:c0:56:40:09:
69:df:5d:84:17:cb:96:77:7a:37:c6:21:f7:12:d4:
2f:1b:42:74:05:38:a8:bd:02:2c:60:39:a3:50:b5:
e8:55:92:e6:cb:b5:81:6a:66:12:49:24:0b:ca:c6:
48:67:5a:ea:7d:c0:2e:36:90:20:c2:eb:94:ad:bd:
d5:21:c8:c4:70:7d:27:60:ec:74:2c:0a:75:ea:21:
6b:4e:4a:b0:4a:ea:da:f6:b3:7f:c8:2f:52:e8:05:
ee:bb:70:d5:db:4d:8d:74:ea:e6:f0:3e:cb:0a:5d:
07:0a:ae:d2:06:5a:36:df:29:37:29:12:60:43:85:
d8:78:ec:e1:bd:1b:36:08:c0:43:70:f4:d5:63:2e:
4e:46:3c:ed:14:10:f6:10:f0:ce:e6:c3:0d:40:de:
dc:c5:a2:fe:a6:55:a2:00:1b:dc:26:e0:56:06:65:
88:d3:97:60:2e:19:6d:42:29:4e:0f:a7:b2:6a:d4:
e0:63:da:da:83:13:c6:82:c2:52:a1:5c:6b:7f:81:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D7:1D:69:67:2C:92:9E:BC:04:55:69:FE:41:C1:5D:0A:58:C5:E5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XdcdaWcskp68BFVp_kHBXQpYxeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:111::/48
Signature Algorithm: sha256WithRSAEncryption
71:8e:09:b6:6c:aa:d1:0e:d0:23:84:3e:b2:62:43:c0:66:e8:
24:75:57:3a:77:ca:71:c7:92:b9:5f:f0:26:cc:82:bd:3a:d7:
00:39:fe:68:2d:a1:69:15:1a:2d:94:31:f6:36:03:98:a3:13:
6a:08:9c:0d:c7:c6:ef:66:14:3b:83:2d:b5:2f:6a:fc:4b:f9:
8f:6b:67:be:43:3f:b7:b5:03:34:97:d1:c1:73:da:a2:2f:b9:
ca:bf:ba:27:17:51:7c:ab:6a:3c:d5:0c:fa:e1:e6:ae:d5:3a:
3a:0d:c8:4e:37:db:cc:a9:5e:80:ab:11:47:f3:df:9b:27:33:
86:bf:01:c8:5b:7c:a3:b5:59:18:31:ce:80:65:18:13:53:27:
6a:d5:e2:dc:ec:0a:8b:77:e3:80:9b:e9:be:22:9a:8d:d6:79:
d1:2a:1f:1b:26:72:08:ce:b9:16:ac:3f:b6:59:77:10:b7:08:
38:03:ba:29:20:f8:fb:a2:25:b6:94:c3:5d:ac:15:a6:fd:a9:
1f:d6:9f:38:63:be:60:92:73:a8:f3:52:b1:d8:1d:3e:08:1f:
6b:df:a6:49:31:1e:8a:33:fa:30:d7:8c:eb:74:c4:08:f5:d1:
14:09:d2:1f:3c:9a:90:25:49:b9:61:da:04:36:da:01:28:a2:
58:bc:e6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:32 2024 by rpki-client on console-fra.rpki-client.org