Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bKAfSF6pB67JVy_AVzdXj00P42Y.roa
File: bKAfSF6pB67JVy_AVzdXj00P42Y.roa (raw, json)
Hash identifier: WZCLIUt76GfYn513DDuZns0P7/EO/B3ezIDyaiUV6ps=
Subject key identifier: 6C:A0:1F:48:5E:A9:07:AE:C9:57:2F:C0:57:37:57:8F:4D:0F:E3:66
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AC8170FE13E8CE552B616FE425CE5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bKAfSF6pB67JVy_AVzdXj00P42Y.roa
Signing time: Tue 24 Jan 2023 16:09:38 +0000
ROA not before: Tue 24 Jan 2023 16:09:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142130
IP address blocks: 2a0e:b107:1200::/48 maxlen: 48
2a0e:b107:1202::/48 maxlen: 48
2a0e:b107:120f::/48 maxlen: 48
2a0e:b107:1204::/48 maxlen: 48
2a0e:b107:1201::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:c8:17:0f:e1:3e:8c:e5:52:b6:16:fe:42:5c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ca01f485ea907aec9572fc05737578f4d0fe366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:67:bb:d5:d2:8e:fe:09:6f:60:d2:c5:24:
fb:97:a8:b3:ac:d8:ca:6b:08:7e:4f:a2:0e:2f:c9:
3f:68:09:50:e4:a9:a0:62:0a:80:bb:76:f8:ba:17:
1a:53:2d:b8:50:7c:da:ea:70:3e:b3:7a:cb:24:4b:
b2:62:0b:50:33:7d:dd:e4:44:b1:a2:b8:fd:56:d3:
ca:57:30:1c:0e:77:78:b2:1e:8b:55:9f:5d:d1:ea:
7b:d7:a7:97:50:45:81:72:b5:18:d5:19:50:a1:c3:
a3:eb:c1:01:72:be:71:ba:34:2d:dd:36:cc:a5:db:
6a:ce:83:f3:64:69:c1:c6:57:6d:a0:88:f3:98:74:
55:15:46:ee:a2:85:83:14:dc:c4:5e:b6:5f:18:8b:
cd:0e:3d:e6:47:8c:8c:0f:bb:81:c9:3c:ef:70:f0:
e7:40:ee:63:70:dd:31:97:b8:43:ad:90:f4:58:cb:
cc:97:81:f2:b5:7e:8f:0a:a4:9c:85:18:7d:6e:95:
67:73:9e:26:79:b4:61:6d:e1:f0:cd:b0:07:fd:0a:
f9:15:b6:85:17:14:2d:46:ee:c7:d9:88:ad:95:d7:
6a:e8:fc:52:ab:f3:b7:e8:50:62:e7:e3:1b:f9:aa:
34:5e:5f:1c:7e:78:73:b0:58:fc:76:3e:53:3b:97:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A0:1F:48:5E:A9:07:AE:C9:57:2F:C0:57:37:57:8F:4D:0F:E3:66
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bKAfSF6pB67JVy_AVzdXj00P42Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1200::-2a0e:b107:1202:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1204::/48
2a0e:b107:120f::/48
Signature Algorithm: sha256WithRSAEncryption
4a:3c:2b:33:9e:2f:c3:68:1f:18:14:9c:68:9d:13:f0:38:3c:
2d:03:15:ae:77:65:d9:09:ff:23:fe:79:c8:ca:15:25:3e:9b:
c1:71:08:01:7d:64:31:b3:04:ec:f4:68:81:7a:57:d9:ce:7b:
e9:39:cc:c3:43:fb:a9:ce:74:c8:41:21:33:85:92:70:b3:56:
6a:b0:6b:8f:09:5c:43:98:fd:4e:71:e3:86:99:e0:a3:c1:8c:
dd:f9:94:ce:0c:9f:33:37:81:23:77:64:43:fc:f3:5d:cc:cb:
1f:d4:c0:41:93:51:60:35:08:e5:e9:3e:dd:c6:ea:12:e9:4e:
b7:95:ad:50:99:9e:ee:7e:f0:27:ce:8b:e1:f4:f1:f1:17:45:
3a:63:be:39:7d:fd:49:ea:da:63:56:28:31:4e:63:e7:11:8c:
1c:3f:a0:b0:e8:34:e7:d1:bf:34:df:65:74:4c:42:63:89:de:
7c:a5:a1:65:70:4f:8a:05:5f:5b:9b:bf:2e:5f:23:36:4a:75:
06:f2:ed:e3:19:15:da:3d:cb:fd:af:24:33:b5:d7:b3:e4:dd:
b3:c7:27:41:87:bf:99:c6:aa:f2:8e:51:02:5f:3f:4d:76:d7:
b2:39:8a:18:c0:1e:4b:e2:b8:4d:74:af:79:2a:3d:21:27:7e:
30:0e:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:51 2024 by rpki-client on console-ams.rpki-client.org