Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ar75l9LinITinhfnP_kSHK4kH3Y.roa
File: ar75l9LinITinhfnP_kSHK4kH3Y.roa (raw, json)
Hash identifier: ZnOcP+/rWzISTvavyOIxzwTmkj+gRLEzdwrojM8bydU=
Subject key identifier: 6A:BE:F9:97:D2:E2:9C:84:E2:9E:17:E7:3F:F9:12:1C:AE:24:1F:76
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018997C4D8E920346F1FB9C2209D1B3F052F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ar75l9LinITinhfnP_kSHK4kH3Y.roa
Signing time: Thu 27 Jul 2023 14:33:27 +0000
ROA not before: Thu 27 Jul 2023 14:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197601
IP address blocks: 2a06:de07:10::/47 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:c4:d8:e9:20:34:6f:1f:b9:c2:20:9d:1b:3f:05:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 27 14:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6abef997d2e29c84e29e17e73ff9121cae241f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c5:8d:6f:c1:6e:89:d4:04:61:21:1d:86:47:
10:6a:a6:43:c2:c9:f0:c0:f6:3c:0b:ed:0a:80:09:
d3:65:2d:fa:29:82:4e:37:ae:c2:d3:3d:c8:c6:3a:
36:dd:ef:d4:75:92:4d:34:fc:fc:8f:a6:a9:1d:cd:
4d:a6:bf:02:fb:40:6f:25:ab:68:cd:98:48:f6:49:
36:93:6c:61:7f:85:63:92:91:9a:8e:f0:fd:12:cb:
1c:a6:49:31:69:f5:88:a2:92:86:ca:a0:4f:c5:aa:
1a:54:a0:c5:b9:7c:df:97:ca:19:c1:cb:01:10:53:
4e:57:00:04:18:11:40:a7:65:2f:b8:a0:e8:3d:d6:
ae:f1:ed:c9:1c:1f:03:7c:b1:2a:f6:18:25:a5:fc:
e5:5e:f0:2f:1b:f9:3c:74:69:98:cd:5e:78:f4:83:
90:c4:c0:e5:30:b4:99:7c:4a:0d:4b:4f:89:09:69:
e7:aa:58:03:4d:5b:ba:bf:c7:bb:41:e6:42:6d:04:
1b:b7:b8:d4:70:e4:91:6a:35:5b:82:ce:82:31:80:
da:bf:6d:2c:52:eb:bf:37:d7:31:2f:e1:e8:71:ee:
20:dd:09:14:4c:a7:ce:de:22:58:45:a5:1e:a5:91:
32:b7:56:81:fa:11:eb:5e:78:c5:88:85:00:2f:55:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:F9:97:D2:E2:9C:84:E2:9E:17:E7:3F:F9:12:1C:AE:24:1F:76
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ar75l9LinITinhfnP_kSHK4kH3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de07:10::/47
Signature Algorithm: sha256WithRSAEncryption
a4:82:31:e6:41:c8:c6:6b:6f:da:3a:da:60:98:d9:59:90:bd:
7f:e3:9c:b0:b9:bb:7a:e8:8f:e9:ce:a2:9d:eb:e0:72:1e:43:
31:20:06:1a:64:88:d1:2b:12:19:21:50:e8:e3:76:fd:b6:6f:
41:4b:2e:96:ab:88:12:55:10:00:6a:7a:bd:02:10:87:2a:76:
55:5a:3a:7e:93:f1:21:5c:f4:5b:6a:60:8d:da:ae:e6:15:64:
50:eb:34:2e:b9:0d:da:20:54:8f:f3:4a:29:dc:9e:f5:78:d5:
65:3b:ec:72:0c:ff:a0:7a:76:33:5f:a4:7a:53:88:b8:25:90:
ef:e9:9e:ee:ff:54:c4:43:b8:3d:85:b9:7f:73:68:1a:33:c2:
b5:12:70:81:d8:d9:3a:eb:4b:a3:a6:d9:bf:f3:d6:dc:b6:5f:
71:e7:30:b8:04:6a:6b:77:06:5f:02:7a:0e:9e:3b:37:89:49:
44:6f:c3:4f:27:ba:65:c8:53:83:57:dc:a5:9b:01:7f:91:db:
28:ec:33:1a:dd:8e:2f:1d:67:f2:f2:32:c3:88:12:9a:31:42:
2d:c3:90:23:76:bc:8d:98:24:fb:37:7e:e3:82:b2:e2:f0:3b:
7f:77:6f:4b:5a:dd:56:4f:7f:de:6e:bb:c4:86:49:1a:bb:08:
f7:8c:bd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:32 2024 by rpki-client on console-fra.rpki-client.org