Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c16oT5C32TzNDYzIAZlCdoHGXvc.roa
File: c16oT5C32TzNDYzIAZlCdoHGXvc.roa (raw, json)
Hash identifier: atEH2X99aNZ2yn/o9FnP4cZzJ+jSOozx0IdbYwTDbSg=
Subject key identifier: 73:5E:A8:4F:90:B7:D9:3C:CD:0D:8C:C8:01:99:42:76:81:C6:5E:F7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A321DFA42FAA32923E8C7E77B1FCBAFC8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c16oT5C32TzNDYzIAZlCdoHGXvc.roa
Signing time: Sat 26 Aug 2023 13:52:19 +0000
ROA not before: Sat 26 Aug 2023 13:52:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197634
IP address blocks: 2a0e:b107:2750::/48 maxlen: 48
2a0e:97c0:ce0::/44 maxlen: 48
2a0e:97c0:ce0::/48 maxlen: 48
2a0e:97c0:ce1::/48 maxlen: 48
2a0e:97c0:ce2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:32:1d:fa:42:fa:a3:29:23:e8:c7:e7:7b:1f:cb:af:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 26 13:52:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=735ea84f90b7d93ccd0d8cc80199427681c65ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:7b:3d:24:a2:3f:da:5d:8d:10:32:ae:c7:
99:c6:05:8d:30:ce:66:f6:90:9c:9d:e8:0a:63:4d:
64:95:d2:0d:81:19:d3:68:54:86:49:62:32:7d:dd:
3e:2d:2e:47:6d:d0:c1:2d:b9:4f:47:be:22:fe:76:
6d:ee:1c:07:23:0b:2c:80:e5:48:77:0a:f9:c5:f4:
af:20:ce:87:be:f8:48:d0:bb:b4:60:4b:7c:e2:83:
ee:25:18:26:0b:80:9f:58:25:01:1a:d1:49:51:7b:
e0:82:d5:6c:c7:57:fc:26:16:51:56:33:ef:bb:31:
be:14:2f:43:e0:25:d9:52:e1:7f:03:f1:6a:15:ac:
43:ce:9f:0b:8d:d2:54:f3:00:c2:39:53:99:7c:e3:
b4:1c:3f:1c:22:26:75:b9:e3:1b:85:cf:08:31:9f:
ab:65:17:f8:00:89:5b:cc:30:36:54:1b:59:3f:90:
b1:29:e4:91:20:27:0c:23:2e:cf:92:dc:d6:23:c8:
a1:0c:24:67:c3:53:5e:72:0f:08:61:92:40:75:bc:
63:19:3e:7a:93:53:d0:f6:5f:4b:da:ce:d1:36:e4:
9a:b4:61:26:7b:41:cf:d2:30:2b:0d:90:88:fe:91:
a1:ee:9d:9c:ea:40:a9:6d:e9:5d:ff:c4:1d:99:82:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5E:A8:4F:90:B7:D9:3C:CD:0D:8C:C8:01:99:42:76:81:C6:5E:F7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c16oT5C32TzNDYzIAZlCdoHGXvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:ce0::/44
2a0e:b107:2750::/48
Signature Algorithm: sha256WithRSAEncryption
3a:db:00:9d:7a:f4:3e:be:f9:41:77:4a:66:ce:a5:22:92:1d:
12:50:11:2b:78:2a:2d:b8:5a:86:ea:d4:95:50:c1:7a:da:fb:
0a:3f:6b:fd:06:57:85:88:47:8f:9e:c5:9e:5f:72:84:0f:35:
ab:09:58:4c:cc:da:f8:db:57:be:91:f8:7e:9c:66:2f:d4:47:
79:6d:ae:21:00:47:b5:10:e4:a9:d6:67:f5:e3:56:8f:b1:14:
a7:5c:2a:27:9e:e7:1c:0b:77:f1:c5:0d:9b:7f:31:e9:bb:23:
7c:c3:c8:7c:43:c4:78:ae:76:67:34:21:57:83:28:e8:25:6f:
79:39:96:fd:6d:a4:9a:cf:d2:a1:69:25:0f:b0:22:5d:c5:b7:
8e:01:a3:d8:c5:1d:5a:36:56:57:91:df:5d:37:7e:a4:ff:32:
21:c4:91:e5:31:ba:a2:c8:c2:3c:89:67:4e:85:12:01:42:c5:
70:2f:61:fc:8d:ec:f2:d1:85:7c:4f:1a:d9:d1:5f:fe:a0:5e:
43:94:56:7c:28:42:76:00:95:6e:48:f1:06:fd:3f:6d:36:e6:
63:ac:6d:de:01:93:93:2a:c2:8c:f9:a3:17:4b:46:16:46:e6:
57:fc:83:23:13:4b:08:08:5a:ac:d4:31:ae:5d:5a:b3:49:47:
b3:ae:1a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:35 2024 by rpki-client on console-fra.rpki-client.org