Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cHamEbJYepSL0lW3KVdOwFymE6Q.roa
File: cHamEbJYepSL0lW3KVdOwFymE6Q.roa (raw, json)
Hash identifier: mAIQWFT3ULrdYDCqG6HkdA+SRMdyvkw7pcbgaouOORE=
Subject key identifier: 70:76:A6:11:B2:58:7A:94:8B:D2:55:B7:29:57:4E:C0:5C:A6:13:A4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01893762D6C356883FCBFF302ED925D0C0B4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cHamEbJYepSL0lW3KVdOwFymE6Q.roa
Signing time: Sat 08 Jul 2023 21:22:51 +0000
ROA not before: Sat 08 Jul 2023 21:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207252
IP address blocks: 2a10:cc40:270::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:37:62:d6:c3:56:88:3f:cb:ff:30:2e:d9:25:d0:c0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 8 21:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7076a611b2587a948bd255b729574ec05ca613a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:26:1a:19:f3:55:5e:9c:fa:b9:59:17:9e:
46:bb:07:21:f8:04:19:fb:a4:de:93:e8:d6:22:37:
5d:19:f2:0f:11:b0:7d:ef:f5:96:68:d8:87:be:9a:
6c:94:cd:06:df:13:68:14:77:da:74:15:46:4a:7f:
22:ee:11:08:b5:fd:5e:54:e8:f9:a8:4d:00:67:2e:
c2:3f:3c:0b:69:a6:dd:86:01:6f:77:54:eb:e4:9d:
a3:bd:36:2a:73:88:0a:d1:95:a0:9c:bb:13:16:f5:
f2:eb:f7:67:fb:e1:d7:c4:6b:9b:34:b3:3c:75:6e:
54:64:e9:c2:23:31:34:26:f2:e2:ee:0e:90:f6:73:
f1:1c:57:1c:1b:91:48:d1:a8:1e:11:54:2b:01:86:
e7:52:10:2e:80:2c:08:82:2e:6b:06:03:e0:30:ed:
0f:0d:89:fa:11:9a:05:2e:ab:4e:b6:ee:e9:41:61:
27:02:04:b6:61:9c:a5:c9:09:85:7f:cb:ef:d1:b8:
57:a8:da:5f:8b:d5:c6:48:fe:8e:b1:7c:b3:d7:09:
41:5a:b9:48:75:c6:84:a0:cd:e9:23:ae:ed:d6:7e:
7d:39:77:27:61:28:66:d5:fd:cb:fb:48:97:4e:4a:
d6:dc:a8:c5:84:3a:9c:c2:0f:78:3a:ab:a5:5f:9b:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:76:A6:11:B2:58:7A:94:8B:D2:55:B7:29:57:4E:C0:5C:A6:13:A4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cHamEbJYepSL0lW3KVdOwFymE6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:270::/44
Signature Algorithm: sha256WithRSAEncryption
a6:f4:34:b3:fd:b2:1c:97:53:b2:46:ce:c1:30:75:83:8a:ed:
b1:a3:0b:90:78:8d:8b:bd:8a:28:4a:ae:ba:50:02:cd:90:57:
3e:51:a5:e4:24:3d:9f:b7:cf:6a:e2:8f:f8:16:e8:fa:aa:b3:
a3:82:a6:1f:45:a4:fe:c5:8e:2b:b7:32:dc:27:a9:8d:91:21:
7c:fd:af:29:8f:2f:79:28:f3:0f:42:e4:97:4f:aa:db:a1:65:
65:17:74:6b:e6:6c:5e:11:57:94:36:4f:f4:c3:48:45:ba:87:
ca:93:40:63:f6:98:58:f3:24:02:7f:7b:91:4f:f9:a7:c2:09:
42:ce:4f:4d:e4:5e:84:e9:f1:2d:40:88:38:6c:84:cb:95:60:
c7:e7:89:ab:f4:03:12:bb:a2:18:b1:16:48:ff:91:1e:56:48:
55:67:a6:81:99:71:fe:56:15:bb:b2:5f:c2:eb:cb:af:c2:2b:
81:2f:64:98:5d:b5:b0:b3:d7:b1:e0:3c:94:93:8b:aa:1a:43:
d5:46:3e:c7:3e:8b:dd:e0:d1:ed:f5:27:e0:2f:07:56:5b:3a:
82:40:f4:37:d7:32:bb:64:74:36:dd:5a:b6:cc:2f:ad:42:ee:
3c:ef:b9:44:6f:d5:dc:5f:2a:b7:ee:df:4b:e8:d5:29:0a:2d:
97:a9:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 16:31:02 2023 by rpki-client on console-fra.rpki-client.org