Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/djzj9CqAI_HtCUouvJa-UxrZxjU.roa
File: djzj9CqAI_HtCUouvJa-UxrZxjU.roa (raw, json)
Hash identifier: a+oYPOBvQ8jPIyZRwEECGL/qgnnfdWqhPLUNS1Q5WIc=
Subject key identifier: 76:3C:E3:F4:2A:80:23:F1:ED:09:4A:2E:BC:96:BE:53:1A:D9:C6:35
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188353898B5E8332F9D8841738BB5A6E02C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/djzj9CqAI_HtCUouvJa-UxrZxjU.roa
Signing time: Fri 19 May 2023 18:14:41 +0000
ROA not before: Fri 19 May 2023 18:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147016
IP address blocks: 2a0e:b107:b17::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:38:98:b5:e8:33:2f:9d:88:41:73:8b:b5:a6:e0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 19 18:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=763ce3f42a8023f1ed094a2ebc96be531ad9c635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9d:56:39:70:73:3e:32:6d:02:4b:9a:05:d7:
01:7f:56:0a:f3:11:61:80:ab:8e:f5:4d:60:d6:75:
71:62:f7:2a:0e:5f:98:da:df:db:df:1b:be:44:2c:
4e:02:f0:7b:62:a5:fe:38:2f:01:2b:14:c9:9b:f7:
fd:99:21:a6:d6:18:10:e0:cb:d1:d0:6b:59:10:a8:
71:31:9e:21:ba:f0:3c:65:95:ff:23:b4:d3:5a:ae:
25:5b:25:36:a0:7c:d6:ce:90:99:a0:4f:73:d5:0d:
5e:a0:55:7b:76:28:24:e0:d0:7d:fc:f8:b9:5f:46:
86:72:e6:a8:2e:7a:b8:2f:46:cc:65:35:54:af:60:
dc:51:bd:3d:8f:60:7a:62:57:bd:7e:99:a7:c6:50:
1f:11:51:e6:1c:1b:77:44:ca:30:4f:33:d0:09:3b:
ee:ac:64:f2:ea:af:f9:c8:0e:e0:94:72:17:59:f4:
46:6b:94:2a:63:42:7e:ef:d6:0d:9d:27:72:cf:cb:
07:5a:98:17:96:4e:e5:65:66:65:d5:66:92:f8:9f:
7a:63:69:7d:b5:10:fc:ca:e9:01:75:ff:ab:a5:2d:
57:b4:34:1a:05:27:a2:70:d4:87:54:ea:59:cc:f6:
e8:42:ed:9a:65:7b:23:d3:a7:19:bf:28:23:77:fa:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3C:E3:F4:2A:80:23:F1:ED:09:4A:2E:BC:96:BE:53:1A:D9:C6:35
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/djzj9CqAI_HtCUouvJa-UxrZxjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:b17::/48
Signature Algorithm: sha256WithRSAEncryption
bd:da:8a:ae:16:f5:26:0a:94:74:2b:ec:f3:5c:8e:4b:d6:5e:
ab:95:cc:97:22:66:7c:4e:11:bf:0b:8e:ba:0a:da:2c:48:74:
d4:c2:4a:25:09:a7:60:ea:4f:48:63:04:76:fd:15:4d:c3:16:
4a:49:1d:0a:e4:fb:5e:cd:a2:29:51:3f:1b:a7:d8:d1:3b:d8:
2e:50:f0:93:39:d8:b8:1a:f8:b9:dc:de:a0:d6:af:d0:bc:95:
df:54:2a:8b:dd:f4:83:c1:c6:60:6d:59:70:4b:4e:bc:37:83:
b8:83:92:a2:6c:f3:97:d6:54:6a:a3:0c:5c:0b:b8:f0:de:d5:
56:1c:13:45:38:4f:f2:12:8e:1e:5c:1c:f7:5c:64:eb:1e:92:
14:a1:35:0f:09:5c:1d:d7:2d:ce:d1:7c:b9:7c:8f:7a:f8:d5:
1c:46:a5:b9:ce:c8:03:7c:26:4b:f4:6a:d2:98:1a:6b:fa:a7:
e8:80:db:96:33:db:eb:98:36:69:76:fc:68:f1:52:6c:2d:01:
f0:b9:d5:37:6f:54:bb:95:48:dc:b9:74:50:50:21:db:b1:56:
8c:9c:2b:a6:ea:7b:a6:97:3a:3c:ae:0f:ca:ee:5a:b3:85:40:
06:3a:5b:91:60:48:a9:36:3e:be:4e:c0:22:cb:b6:e7:4c:3a:
ba:75:97:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:32 2024 by rpki-client on console-fra.rpki-client.org