Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iQWaqWxHBz7viVHp64JQiRDOhxk.roa
File: iQWaqWxHBz7viVHp64JQiRDOhxk.roa (raw, json)
Hash identifier: 6yexypHis2N9P6MYM22IYMVTR6CvgWVyd05P4/dIBN0=
Subject key identifier: 89:05:9A:A9:6C:47:07:3E:EF:89:51:E9:EB:82:50:89:10:CE:87:19
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AE73B07318AB18136889007432007
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iQWaqWxHBz7viVHp64JQiRDOhxk.roa
Signing time: Tue 24 Jan 2023 16:09:46 +0000
ROA not before: Tue 24 Jan 2023 16:09:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209556
IP address blocks: 2a0e:b107:30f::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:e7:3b:07:31:8a:b1:81:36:88:90:07:43:20:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89059aa96c47073eef8951e9eb82508910ce8719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:e7:67:2c:2d:8a:37:da:db:ca:72:0b:11:
6c:10:83:a6:27:40:92:55:e8:3e:fd:b9:79:ac:34:
c5:17:67:7d:a3:28:b1:f3:7b:2a:77:7b:82:bf:a0:
b3:f2:f2:e4:df:86:e0:ed:81:05:a8:87:a2:70:f3:
a8:90:b1:0b:e6:21:b5:02:34:eb:20:7d:25:f3:20:
10:0b:88:75:29:d6:ad:16:fb:3d:7f:b7:82:3e:c7:
06:7d:76:34:cc:83:0a:c6:07:c9:1b:f1:65:5a:0a:
b0:ed:54:97:fb:cf:71:a3:98:77:92:e4:9c:e0:1c:
a7:4d:77:75:be:91:10:40:2a:2b:a0:ad:85:13:ff:
b6:fd:0a:20:42:32:98:25:df:3a:f2:7b:7a:14:0c:
6c:94:ea:c4:2f:cc:92:55:e3:19:88:c4:a3:5e:2e:
16:4c:96:1b:23:18:d6:72:01:a6:36:a9:d8:6a:4e:
a6:99:1b:df:df:b4:aa:fd:25:ec:a8:93:04:00:13:
64:97:9a:ed:63:5c:08:31:b9:bb:2c:14:07:06:fe:
30:de:74:f2:de:13:f0:e7:31:0d:eb:66:37:5b:cc:
c2:62:6d:49:3a:4c:6a:8c:d0:89:2c:ec:6e:b9:52:
ab:8c:69:9b:fd:85:27:e2:f8:03:bd:4a:2c:2d:cd:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:9A:A9:6C:47:07:3E:EF:89:51:E9:EB:82:50:89:10:CE:87:19
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iQWaqWxHBz7viVHp64JQiRDOhxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:30f::/48
Signature Algorithm: sha256WithRSAEncryption
c0:93:eb:07:e6:e7:0b:a5:8c:51:21:78:4c:15:e5:26:19:f4:
f2:fe:4e:a3:b5:7c:92:59:49:2d:46:f4:35:ca:a8:6d:53:5f:
11:4a:ca:9b:37:58:a5:13:2b:80:b9:a6:db:95:0e:87:ae:f6:
86:0c:66:3d:b9:de:15:6c:61:7a:d6:5e:0e:3a:3b:b2:ca:d7:
90:e5:95:b8:71:c4:d3:f1:9a:83:c4:b6:80:7f:cc:17:b5:c4:
75:f7:ff:cd:41:ce:9c:bb:97:0b:7a:5e:0d:18:57:cd:9a:48:
27:14:67:af:f2:3f:60:0b:13:3a:d7:7d:a3:bc:24:66:62:36:
42:02:08:4e:71:97:be:ce:94:b3:4c:16:2c:00:42:4a:cf:6f:
c7:83:68:72:04:f0:0d:b1:79:5b:49:fd:0d:3b:86:9f:b8:29:
76:ed:ce:42:b4:3d:7f:89:13:35:fc:a5:46:60:29:b0:58:c8:
08:53:50:75:1d:70:78:23:08:fd:6c:18:ac:ed:19:93:bb:bb:
1d:db:9f:c9:e7:fb:24:6b:ff:0a:97:cc:63:9f:40:f8:2b:b9:
c8:d1:82:0e:dd:07:c0:f0:32:ee:a1:10:e3:2f:4a:85:e9:7b:
b4:0f:3c:fa:26:e7:5f:20:95:3a:4b:fd:7c:96:64:f4:f1:fe:
47:0b:ee:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org