Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ijevRUHM5PXuqj9uDgZGK9_L4Gc.roa
File: ijevRUHM5PXuqj9uDgZGK9_L4Gc.roa (raw, json)
Hash identifier: RHznRRQ6ou0pHx7M+8Ltctd5dyjOzKnHZ/Wqrqa7IQ0=
Subject key identifier: 8A:37:AF:45:41:CC:E4:F5:EE:AA:3F:6E:0E:06:46:2B:DF:CB:E0:67
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E8201116167DDD235B3625B524CF68
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ijevRUHM5PXuqj9uDgZGK9_L4Gc.roa
Signing time: Mon 02 Jan 2023 05:15:38 +0000
ROA not before: Mon 02 Jan 2023 05:15:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212904
IP address blocks: 2a10:2f00:141::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:20:11:16:16:7d:dd:23:5b:36:25:b5:24:cf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a37af4541cce4f5eeaa3f6e0e06462bdfcbe067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:b3:aa:a1:4d:41:57:7b:a7:53:73:a4:c4:
24:20:08:6c:fe:32:45:68:7a:f9:b6:ff:09:f4:6d:
4d:be:29:59:14:da:b2:94:f0:58:ff:cf:86:9c:0d:
02:7c:8f:fc:99:d6:b4:b7:90:88:66:84:85:72:1e:
02:8b:b7:b6:e2:3a:d1:89:d0:0f:6c:df:f6:54:44:
7b:83:35:ef:07:0d:b0:b3:b1:62:ee:db:96:e3:72:
88:21:46:78:8a:ce:c6:de:60:6e:53:57:32:3e:cd:
16:a9:77:cf:73:87:9a:29:c6:cf:05:e2:ce:a4:6a:
53:8e:16:d8:ae:d0:3f:99:df:16:6d:d9:b7:eb:28:
2c:d0:dd:88:45:16:02:cb:55:c4:db:8a:5b:4d:7e:
b9:3b:99:49:95:88:8a:10:72:21:0d:96:27:d8:2e:
79:b3:82:e5:c3:94:5a:f8:fe:f8:b8:ee:cc:e8:88:
e0:2c:a5:df:69:e6:3e:33:d7:4b:39:25:6f:13:44:
c6:b4:45:e3:96:92:73:78:fd:be:d7:e9:2c:de:2a:
da:2b:68:cb:e5:5c:5d:40:63:8a:f6:91:9a:a9:4f:
c6:ce:01:17:81:6e:3d:b2:ee:de:fd:fb:d9:8f:98:
7d:61:1f:52:81:8d:2e:31:d0:35:9e:90:e3:07:e9:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:37:AF:45:41:CC:E4:F5:EE:AA:3F:6E:0E:06:46:2B:DF:CB:E0:67
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ijevRUHM5PXuqj9uDgZGK9_L4Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:141::/48
Signature Algorithm: sha256WithRSAEncryption
9c:bf:15:90:f0:c2:28:f7:2e:bf:05:d1:9f:4f:0b:35:88:16:
7d:dd:89:79:bd:6f:fb:3c:8b:53:f6:7b:91:5d:62:72:c8:85:
14:ba:8c:f9:32:8d:66:a9:a8:11:cf:10:22:ab:ef:77:11:0a:
4c:dd:d3:ef:5b:c2:04:2b:05:3b:3b:5f:de:52:dd:26:94:ad:
e9:2a:e3:9f:0a:f9:5c:a8:01:9b:4a:44:9d:79:ac:99:68:1d:
2a:e6:cc:dd:2e:ba:31:6d:ad:a9:d8:e1:2c:1c:3d:df:c2:33:
f0:f2:c4:13:c6:7c:19:52:ce:d1:4b:d6:94:92:19:81:89:eb:
23:65:19:61:53:c3:67:81:db:36:fe:44:5e:27:b6:85:54:d3:
ed:d2:f8:11:24:b1:b5:c6:a5:64:c5:3a:01:85:93:02:8f:c0:
ed:c4:fd:27:25:6a:d2:32:c7:56:9f:50:5c:4b:ca:8e:65:2d:
29:c6:0a:5a:d8:83:70:05:b4:d7:dc:39:0a:96:49:d9:0f:0e:
63:0a:e0:ae:f8:48:17:6e:f2:11:41:bb:51:dd:53:8c:7c:99:
68:8a:b2:f9:67:06:57:da:74:a1:91:26:b8:64:45:cb:65:60:
17:fa:e7:83:03:8d:a1:7c:53:42:0e:50:87:53:da:2e:ae:50:
a3:e3:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org