Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bevGRV4lhhCuK4lW1eBuIWGnliE.roa
File: bevGRV4lhhCuK4lW1eBuIWGnliE.roa (raw, json)
Hash identifier: nHbvRDCku67qPbpgaX7lkD8SPb4UHGP+tiaZPttxoj0=
Subject key identifier: 6D:EB:C6:45:5E:25:86:10:AE:2B:89:56:D5:E0:6E:21:61:A7:96:21
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48B018C2B0569D7C9E14DBF51320840
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bevGRV4lhhCuK4lW1eBuIWGnliE.roa
Signing time: Tue 24 Jan 2023 16:09:53 +0000
ROA not before: Tue 24 Jan 2023 16:09:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212227
IP address blocks: 2a0e:b107:139::/48 maxlen: 48
2a10:2f00:15e::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8b:01:8c:2b:05:69:d7:c9:e1:4d:bf:51:32:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6debc6455e258610ae2b8956d5e06e2161a79621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:20:4b:15:05:78:33:9a:a8:f8:6c:8a:68:
25:ae:da:22:4b:61:98:52:0b:33:25:ea:e6:7b:c3:
05:6f:50:05:68:90:5f:e1:e7:56:bf:77:1a:73:6d:
bc:7d:83:24:42:34:6e:5a:4b:57:37:51:5e:ab:14:
72:93:f2:aa:38:f6:6e:ef:66:d6:34:f7:f8:fc:9d:
33:e5:ae:15:f0:7f:95:94:8b:8a:c9:2d:05:27:3f:
58:8b:8c:ab:14:68:9e:e7:83:ac:f0:29:da:6b:21:
9e:93:bd:c4:42:d2:ca:e5:05:63:51:a9:ac:f3:54:
1d:6c:96:33:f8:86:b9:7f:2a:36:9a:23:c2:e5:7f:
c8:e2:57:c0:a1:52:7b:10:03:0a:18:f1:5b:5c:0c:
71:22:73:97:40:53:7f:95:c9:25:41:7e:68:76:25:
ce:56:84:d5:9a:ed:dd:a1:c7:b4:49:52:1f:85:25:
3d:46:0a:b3:90:b2:58:00:53:6c:42:47:7f:0c:ab:
8b:9d:a8:b5:7d:50:91:91:4a:f1:bd:11:bd:43:12:
36:a6:5c:27:bf:b6:5d:7b:27:34:ea:13:33:5d:91:
6e:4e:20:18:b2:28:b2:e9:16:18:b4:91:2b:6c:38:
bd:17:d3:38:1f:26:3b:b7:df:a3:7a:3b:51:bc:5d:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:C6:45:5E:25:86:10:AE:2B:89:56:D5:E0:6E:21:61:A7:96:21
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bevGRV4lhhCuK4lW1eBuIWGnliE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:139::/48
2a10:2f00:15e::/48
Signature Algorithm: sha256WithRSAEncryption
18:c9:3d:50:fd:cb:1d:ab:06:1a:52:6a:d7:2b:5a:1f:ba:ec:
b3:5a:be:63:25:9f:63:c8:bd:9a:90:cc:01:f0:09:0f:33:49:
0c:72:87:a0:8c:65:04:cd:09:27:5c:e1:cf:53:1c:f3:03:d2:
92:c9:64:5c:52:4d:f6:f6:8b:c0:4e:35:dd:27:da:12:7e:6a:
8a:68:61:5a:6b:88:4a:9a:af:02:db:7e:2e:a0:6d:35:0a:e6:
7b:0e:da:2a:35:56:d5:67:11:e9:a7:1d:df:f9:7d:95:28:b3:
67:ec:d5:d0:f2:dd:1a:67:ba:f0:08:bf:f7:e4:69:34:1d:13:
99:f6:f6:c7:0c:25:b9:10:c5:86:91:3b:11:79:4a:7b:bf:73:
06:e5:09:50:6d:71:9e:ca:1e:9e:18:94:7f:a0:7f:25:ed:b5:
18:0e:64:e0:88:2a:48:7a:56:a0:20:7f:06:14:41:be:14:78:
80:8b:8e:9d:fa:b5:b7:d3:e5:b0:30:95:25:e8:33:6d:a3:59:
c6:de:ce:e1:ca:8b:bb:8f:3f:7f:0a:c9:12:84:89:63:3c:b4:
1e:24:52:7d:34:b1:13:db:53:45:1c:53:ea:1f:27:ef:c8:6b:
89:35:ed:13:5a:ef:de:ee:ed:c3:5a:4b:bf:38:97:a0:78:5c:
a5:4d:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:32 2024 by rpki-client on console-fra.rpki-client.org