Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dmLTCzJ_QqH4jfalaTfifOTEC3w.roa
File: dmLTCzJ_QqH4jfalaTfifOTEC3w.roa (raw, json)
Hash identifier: AJrjyjO04A3x9Rx4DsF7n1Hc8HSDXBfyVAjVxIlYtrA=
Subject key identifier: 76:62:D3:0B:32:7F:42:A1:F8:8D:F6:A5:69:37:E2:7C:E4:C4:0B:7C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C9D1DB5DF47CF27924B42AC667F31C4DC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dmLTCzJ_QqH4jfalaTfifOTEC3w.roa
Signing time: Sun 24 Dec 2023 18:36:59 +0000
ROA not before: Sun 24 Dec 2023 18:36:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:b107:19a0::/48 maxlen: 48
2a06:de00:10::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9d:1d:b5:df:47:cf:27:92:4b:42:ac:66:7f:31:c4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 24 18:36:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7662d30b327f42a1f88df6a56937e27ce4c40b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:6f:d2:b7:c7:e7:1a:1c:ee:e8:15:23:46:
42:b4:36:6d:16:ad:4c:ee:9a:77:e0:f8:2c:af:ba:
5f:d2:6f:de:b3:8b:fc:00:a1:2c:ea:09:f8:8d:dc:
00:2c:92:f9:7c:fe:e5:ca:aa:b8:00:2d:d8:b6:15:
f5:8b:24:e2:37:64:2e:74:41:d9:eb:25:cf:b6:7d:
29:6d:2f:4a:b7:d9:fb:84:cb:13:ae:a9:7d:46:db:
2f:16:da:27:62:c9:66:ab:7b:34:54:ed:75:d8:1d:
bb:78:7c:d7:a4:d7:57:dd:8e:74:f8:23:09:88:6c:
c3:11:37:6e:2c:13:83:d7:c7:8d:e8:4a:26:20:5b:
5a:0a:c0:fc:0d:bd:09:26:9b:fd:e4:d6:34:8d:af:
59:37:5c:eb:e8:79:f5:e5:9b:e8:23:71:12:db:76:
66:5f:1c:76:f8:61:c7:8f:57:e9:15:30:a6:0c:3a:
1a:94:a8:ef:af:a4:c2:36:e7:d9:c2:68:11:6b:b1:
e1:3b:21:4b:ac:d1:77:68:10:8b:a5:ec:46:0e:f5:
89:8e:9f:01:b6:ff:7f:b2:e6:d5:61:ee:ff:8c:40:
55:f0:67:b1:8a:3f:52:11:90:2e:d7:0e:5b:07:cb:
6f:a2:b3:9d:88:87:83:5d:5b:d8:79:99:f2:90:ed:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:62:D3:0B:32:7F:42:A1:F8:8D:F6:A5:69:37:E2:7C:E4:C4:0B:7C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dmLTCzJ_QqH4jfalaTfifOTEC3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:10::/48
2a0e:b107:19a0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:04:07:e6:ec:54:52:f4:e5:e1:9d:57:91:2f:d0:72:39:eb:
92:10:9d:2e:28:3e:12:ee:97:88:64:4c:bc:5a:3c:21:0d:40:
1e:43:e6:01:65:11:16:e8:4f:4d:07:f0:7e:3c:de:ca:c3:a7:
6c:bc:0a:8d:32:52:31:35:aa:a3:05:89:e3:34:77:0c:69:2f:
94:b1:be:2f:4a:45:40:3f:4b:48:dd:fe:16:6d:03:ee:dd:88:
86:e5:f0:27:17:61:87:73:c2:cd:5f:c0:db:6e:58:a1:b0:ef:
2c:b3:ae:96:4e:1d:0b:b7:fb:cc:2e:43:02:30:61:81:d5:98:
74:86:59:3e:99:f3:8c:4b:f0:d9:b2:0f:9d:02:8c:55:14:24:
9b:b2:86:47:14:8e:5f:69:30:bf:1a:0d:79:f0:5c:de:9b:37:
ad:7f:cf:83:a5:7a:0f:e6:59:6f:e5:36:1b:6f:e2:60:e1:98:
19:b6:d4:1e:77:36:e3:ab:c6:3a:fe:7c:73:30:89:6c:61:4d:
37:77:61:f4:5f:e8:80:d0:8b:3f:d5:c2:3c:37:61:fa:d5:9f:
45:74:7e:0f:36:21:20:78:3d:fb:c6:d9:89:55:04:d1:89:5b:
5b:88:4e:c0:d7:99:ad:53:18:a0:03:44:9e:39:0d:ec:9c:86:
d4:02:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:32 2024 by rpki-client on console-fra.rpki-client.org