Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ccSlpyCCs3WTDkFvhxLQCXradKw.roa
File: ccSlpyCCs3WTDkFvhxLQCXradKw.roa (raw, json)
Hash identifier: gnwc1wMqYOGVf3nXDTnOTnnUgPwt4c0ZfQw41G68A68=
Subject key identifier: 71:C4:A5:A7:20:82:B3:75:93:0E:41:6F:87:12:D0:09:7A:DA:74:AC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48ACF63021624E2D060ED06BE15A32A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ccSlpyCCs3WTDkFvhxLQCXradKw.roa
Signing time: Tue 24 Jan 2023 16:09:40 +0000
ROA not before: Tue 24 Jan 2023 16:09:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202000
IP address blocks: 2a0e:97c0:c50::/44 maxlen: 48
2a0e:b107:1ca0::/44 maxlen: 48
2a0e:b107:1c20::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:cf:63:02:16:24:e2:d0:60:ed:06:be:15:a3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71c4a5a72082b375930e416f8712d0097ada74ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:80:dd:64:95:45:af:6d:a5:cc:41:44:85:b7:
62:1f:b4:07:27:70:bf:20:a2:8d:82:39:2b:65:f8:
33:d4:ef:87:fe:68:51:5d:87:f8:15:ac:42:25:47:
f2:1b:e8:f4:d6:e7:29:54:04:39:b4:8f:03:a9:20:
36:d8:6f:c5:c6:b9:fa:82:cd:44:f3:c3:51:10:ba:
df:db:0c:fd:a9:a3:5f:57:11:54:ee:ee:f3:1b:1e:
c5:ee:9b:9c:ec:88:0d:3d:5d:77:d0:63:ff:d3:98:
d2:b2:92:57:8b:60:38:92:50:f6:ae:d4:c8:f7:9e:
42:88:09:2d:96:2f:b5:ee:dd:cc:a1:fe:14:34:92:
94:1a:ae:e4:27:94:cd:6a:40:81:ee:97:ce:b3:d9:
88:d8:92:29:e6:19:8e:8a:d1:fc:e6:c9:e1:d8:46:
e8:f7:bd:85:ff:02:28:40:97:08:cd:42:13:61:9b:
ed:fb:d7:88:64:11:a9:7e:ea:ba:2c:2f:4c:18:6e:
02:4b:da:c0:f4:94:e2:33:60:54:b6:33:36:31:d5:
43:90:e5:5a:e3:ac:70:1e:8c:3b:f3:cb:6c:40:98:
02:91:86:d0:65:1f:ed:e8:88:fe:86:ac:95:e1:0e:
53:4a:b1:e1:a7:80:31:07:96:48:ab:59:c0:d6:25:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:A5:A7:20:82:B3:75:93:0E:41:6F:87:12:D0:09:7A:DA:74:AC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ccSlpyCCs3WTDkFvhxLQCXradKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c50::/44
2a0e:b107:1c20::/44
2a0e:b107:1ca0::/44
Signature Algorithm: sha256WithRSAEncryption
61:59:02:ed:57:fd:92:34:23:99:61:04:f6:d0:cc:99:96:3a:
25:a0:79:88:09:f2:21:bd:16:86:b2:a4:b1:a5:b2:94:43:13:
7a:b0:ef:e6:eb:67:2a:65:f4:2a:39:11:bf:2a:c8:51:bb:66:
36:f3:a1:bb:15:d5:46:00:2b:4b:93:3e:3b:30:f2:b4:6a:56:
0c:c0:ec:30:56:e3:9b:2e:7d:7e:ea:47:fb:b2:aa:d8:04:de:
9a:f9:6d:d5:b7:0c:9c:5a:8c:93:64:2a:66:d7:96:f7:7f:28:
ba:85:21:69:ff:87:fa:1d:a2:01:98:99:b8:1f:cc:56:a9:4a:
87:f6:44:c4:8b:b5:06:a3:26:c4:2f:9d:18:60:ab:19:20:49:
02:59:b4:8e:c7:27:2d:0a:b7:74:11:7b:80:ac:bf:cc:fc:27:
0e:bf:4c:6f:4a:85:c7:b2:7c:57:98:fc:8d:06:11:e1:83:c0:
6b:3b:4c:e1:80:15:30:64:94:ba:7b:4b:20:88:a0:ba:32:0f:
bd:d3:0f:80:8f:67:e1:17:b4:14:33:62:9e:15:2f:b3:b5:33:
73:e8:ee:e5:fe:7b:66:03:42:16:c2:99:6d:56:93:96:60:ae:
c6:12:6f:13:0c:e5:47:6e:62:11:83:8f:8d:b3:7e:8d:3a:fe:
d9:4b:82:f4
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 5 00:17:31 2023 by rpki-client on console-fra.rpki-client.org