Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e4jDAV9OhShXh7beMLWL5ve6L9Q.roa
File: e4jDAV9OhShXh7beMLWL5ve6L9Q.roa (raw, json)
Hash identifier: ocT9r5SFCDJSLqrlwvnrrtVuoT37BcY9/NnKBIO9s7c=
Subject key identifier: 7B:88:C3:01:5F:4E:85:28:57:87:B6:DE:30:B5:8B:E6:F7:BA:2F:D4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7DEED7BB2B7BA7BCFAE384C073C1C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e4jDAV9OhShXh7beMLWL5ve6L9Q.roa
Signing time: Mon 02 Jan 2023 05:15:22 +0000
ROA not before: Mon 02 Jan 2023 05:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209606
IP address blocks: 2a0e:b107:a50::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:de:ed:7b:b2:b7:ba:7b:cf:ae:38:4c:07:3c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b88c3015f4e85285787b6de30b58be6f7ba2fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:0a:f9:1b:79:7d:d2:e1:7c:c8:80:e0:22:
df:6a:58:33:5c:a9:2a:23:de:76:d9:c8:8e:fd:00:
69:39:c1:98:8c:ca:63:59:6b:42:68:51:54:a9:1b:
05:7a:4d:6d:4d:1d:77:c1:86:7c:d4:36:e2:d3:26:
b7:e5:c8:c3:09:bf:fd:9e:fa:49:b5:99:ed:cc:a0:
c1:25:ff:06:83:23:c5:90:24:02:9b:70:3c:3f:41:
97:65:5b:d3:50:cf:58:5b:29:97:ea:51:39:76:a1:
ac:44:cb:8b:2e:68:da:ea:a6:9b:2d:33:f5:cb:36:
ce:83:de:f5:d2:9c:28:46:49:e7:1b:a0:c1:fc:ff:
d8:63:1d:30:29:39:8d:05:45:6d:98:a1:0d:05:db:
55:c4:33:25:6f:ca:41:cf:46:da:bf:2b:4b:1f:17:
31:de:9a:9f:19:68:fc:b5:36:3e:13:7e:b3:00:96:
c8:60:59:7c:47:0d:e0:80:e5:d1:af:01:28:dd:ce:
f9:38:92:f7:6f:d3:03:68:12:84:38:b8:5b:01:a0:
fa:7b:49:76:a6:38:8b:8a:74:0c:a7:fa:2f:e7:d0:
90:ea:fb:df:5a:17:97:88:b5:68:7f:da:dd:a7:37:
72:ea:cd:a4:4e:32:be:9d:93:6b:a7:8d:c7:5b:54:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:88:C3:01:5F:4E:85:28:57:87:B6:DE:30:B5:8B:E6:F7:BA:2F:D4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e4jDAV9OhShXh7beMLWL5ve6L9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:a50::/44
Signature Algorithm: sha256WithRSAEncryption
c7:29:7c:21:96:5b:4a:7a:aa:18:a0:6d:64:bc:2c:3e:2d:24:
b8:56:1f:1d:cc:df:8f:99:df:66:45:d6:50:90:b6:4b:de:a3:
4a:d1:77:8a:58:4e:fe:57:02:eb:a1:ab:dd:ce:bc:2c:0d:93:
2d:4a:38:ad:84:6c:81:dc:34:db:f6:5d:7b:19:08:ef:6e:6a:
fa:f8:33:79:a9:59:64:0e:5b:94:2c:df:f0:2f:ca:eb:d1:5f:
18:10:be:94:0e:ab:30:2d:7d:40:8c:94:82:20:fe:cb:de:80:
98:aa:0d:8a:11:5f:3c:42:6e:05:15:32:d8:31:10:a9:1b:0a:
9f:ff:95:ca:d7:f3:bb:ae:de:57:65:eb:d5:25:41:2c:4f:d3:
19:d9:4d:ed:3b:7b:d6:8b:9d:9e:17:d9:90:4b:ba:a0:22:31:
9f:c6:d6:ad:2d:f2:02:aa:0f:de:3e:78:de:4a:42:50:d1:aa:
c1:52:fa:5a:5e:79:2b:47:ef:c0:98:b6:c6:9b:f5:bf:cd:2c:
a9:f9:d7:cf:27:65:5f:95:13:18:cd:c2:3e:74:72:9a:9c:b9:
a7:79:39:ae:21:9f:84:ec:10:24:83:fe:3e:fd:61:bd:1b:17:
e4:ef:b7:15:ba:2f:57:09:60:d8:5f:d1:80:2a:87:f9:b6:96:
45:d7:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-fra.rpki-client.org