Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/anMwUaFsuOvZHi9S1QzpfPNpePU.roa
File: anMwUaFsuOvZHi9S1QzpfPNpePU.roa (raw, json)
Hash identifier: quLVmO56ntXnq3HCJE7IgGpK4eBhYTwTWABMcv6NgCc=
Subject key identifier: 6A:73:30:51:A1:6C:B8:EB:D9:1E:2F:52:D5:0C:E9:7C:F3:69:78:F5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018914687AF8F3DAA84DFB0D3878142BC013
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/anMwUaFsuOvZHi9S1QzpfPNpePU.roa
Signing time: Sun 02 Jul 2023 02:22:18 +0000
ROA not before: Sun 02 Jul 2023 02:22:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34927
IP address blocks: 2a10:ccc3:ccc1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:14:68:7a:f8:f3:da:a8:4d:fb:0d:38:78:14:2b:c0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 2 02:22:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a733051a16cb8ebd91e2f52d50ce97cf36978f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:fd:1e:89:2c:39:0c:40:da:77:37:98:88:
4f:d1:14:1c:e2:85:cd:df:00:59:8c:6f:2f:8f:71:
c6:c4:17:11:66:e1:72:01:21:8d:98:57:58:82:e6:
15:87:f7:dc:f7:99:25:a6:f3:f6:59:34:e1:53:83:
cb:ab:cc:b7:a2:d9:fc:0d:1d:42:df:5a:07:c8:98:
4f:18:aa:ef:46:79:61:b6:21:d5:35:2b:73:65:30:
00:d8:b8:16:ba:ba:68:5b:de:e7:37:4e:f7:b6:f7:
c1:60:bb:68:5b:54:8c:e3:43:eb:f4:47:1e:b7:ea:
59:de:75:d8:c7:82:21:18:5a:2a:40:26:67:81:81:
11:ce:a9:75:69:45:2e:5c:fb:56:11:5f:c6:b8:ae:
1e:90:16:17:17:4b:51:ea:69:f8:f0:a9:fd:fb:b7:
28:83:1b:06:69:58:3f:16:14:77:0b:60:f3:76:1b:
31:2a:c8:48:d4:3e:e2:9e:56:3d:a2:57:78:55:c6:
ba:7b:ae:06:81:4b:61:8e:53:b8:32:ed:5c:53:ca:
83:cb:e9:3f:4a:77:c7:2d:bc:5c:91:28:57:55:c6:
cd:4c:0d:48:5a:89:c7:f8:a6:6f:11:35:0a:75:64:
f3:d5:61:5e:66:c3:bd:99:73:e0:39:4d:26:4f:85:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:30:51:A1:6C:B8:EB:D9:1E:2F:52:D5:0C:E9:7C:F3:69:78:F5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/anMwUaFsuOvZHi9S1QzpfPNpePU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc3:ccc1::/48
Signature Algorithm: sha256WithRSAEncryption
53:40:5c:10:1c:05:58:10:1c:f2:04:6a:44:44:24:71:5a:28:
1f:77:67:1f:de:7d:5d:5a:f8:bf:36:dc:6d:7d:14:a7:2a:a7:
7f:6e:fa:12:54:7e:fe:7e:d4:86:8c:fb:db:07:ea:ac:6e:79:
5c:dc:9f:b9:0e:8b:fe:2b:f4:fb:40:6e:6e:54:33:68:35:3e:
62:22:3b:51:e9:fc:ff:47:5c:0e:9d:83:a7:9c:88:46:53:8e:
41:c3:2c:da:aa:0d:97:09:07:2e:06:84:cd:5d:c7:26:1e:e3:
ec:aa:93:cc:2b:4a:aa:ec:bb:5f:fb:d9:f7:93:8c:77:25:06:
da:35:bc:6f:5c:3e:23:f9:c6:77:dd:e1:54:31:07:fd:3b:39:
19:90:44:56:e8:ea:33:6e:c8:68:81:24:d7:fb:a5:70:95:7c:
20:54:f8:69:ca:84:ab:e2:ff:4a:1a:f5:42:9a:15:b2:57:23:
ea:5d:06:6b:1f:45:f6:e7:b8:1a:54:10:e4:01:f5:93:69:8a:
1a:c0:fc:20:24:3d:87:c2:4e:8a:39:76:8c:40:83:c3:12:b2:
1f:46:8c:7d:34:fc:7e:2c:b8:57:6d:8f:21:fa:7a:e0:6f:2e:
6d:4c:6e:78:01:93:61:d4:2b:6a:7b:d3:9e:56:39:cf:d7:05:
22:b6:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 13 09:34:38 2023 by rpki-client on console-fra.rpki-client.org