Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/impnBTwvSm4fGmJdvS2YriZYdOY.roa
File: impnBTwvSm4fGmJdvS2YriZYdOY.roa (raw, json)
Hash identifier: UBPprgQjzruTsiirsn+IAORiOPoGGvIP9NoPTMBlUlY=
Subject key identifier: 8A:6A:67:05:3C:2F:4A:6E:1F:1A:62:5D:BD:2D:98:AE:26:58:74:E6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7D001E7B3EE806F455AA59244C133
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/impnBTwvSm4fGmJdvS2YriZYdOY.roa
Signing time: Mon 02 Jan 2023 05:15:18 +0000
ROA not before: Mon 02 Jan 2023 05:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207716
IP address blocks: 2a0e:97c0:7bd::/48 maxlen: 48
2a0e:97c0:7b0::/44 maxlen: 48
2a0e:97c0:7be::/48 maxlen: 48
2a0e:97c0:7bf::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:d0:01:e7:b3:ee:80:6f:45:5a:a5:92:44:c1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a6a67053c2f4a6e1f1a625dbd2d98ae265874e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:c3:79:f3:a2:02:9e:56:f5:5e:ef:42:c2:
d3:97:d3:cb:b6:aa:95:32:23:0f:bd:34:c1:c0:1a:
36:7a:98:eb:e5:81:c2:a4:05:25:cb:66:db:8d:94:
ae:8a:ae:73:9c:d9:15:f0:5a:f3:65:ca:d0:26:9f:
cc:b2:ce:c8:90:8a:e9:dc:71:54:a9:84:4a:c6:86:
91:bf:e3:f3:dc:64:ca:66:a5:7d:e2:94:c7:9e:bc:
2e:d5:bd:32:ba:0d:97:dd:85:e0:5b:9e:bd:63:c9:
d1:36:bf:02:f4:4d:3b:84:ae:fd:65:fc:86:e4:56:
30:fb:ee:2a:2d:c2:d0:45:f7:a1:26:f8:98:80:d2:
e9:60:0a:46:59:b9:52:d1:4c:34:9d:bc:83:9d:e5:
8d:e5:a3:a8:7f:d3:24:1c:84:13:c6:65:dd:0f:29:
be:8e:f4:80:9d:05:c6:aa:ba:1b:80:2d:c6:d5:f4:
b7:cd:9f:d0:ae:17:27:4d:7e:2a:b4:c2:94:8c:9e:
82:83:f3:32:49:1e:58:c2:83:c8:e4:28:10:f3:02:
ee:8f:e4:17:fc:cd:ca:1f:44:a8:a2:de:6e:13:f9:
ef:e1:57:42:01:f6:3c:25:42:15:46:87:a4:4e:34:
33:a8:08:fa:fd:93:75:25:a0:dc:23:b2:be:cb:90:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6A:67:05:3C:2F:4A:6E:1F:1A:62:5D:BD:2D:98:AE:26:58:74:E6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/impnBTwvSm4fGmJdvS2YriZYdOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:7b0::/44
Signature Algorithm: sha256WithRSAEncryption
1f:e2:09:25:be:f9:fc:1a:58:49:e8:39:fb:18:06:eb:36:6e:
0f:42:a2:19:7f:b3:3e:6a:8a:60:d0:77:c6:eb:6a:18:21:9f:
38:49:35:97:aa:0c:44:73:e1:4a:11:9b:4d:1b:10:f9:b5:2f:
4c:58:89:fa:92:ca:e5:35:37:98:15:5c:15:2d:1b:3b:67:c9:
7f:7f:c0:81:f4:3c:c4:ab:a6:66:04:2a:25:61:19:5e:22:f9:
b8:07:78:de:44:ea:c8:de:52:c9:72:f6:3c:11:f1:d2:62:ee:
24:5c:d5:ec:f1:0b:19:69:4b:81:28:65:48:00:9a:b2:80:77:
ab:bc:34:71:65:c7:2f:ff:73:4d:b0:29:ee:f9:69:62:b1:11:
ce:6c:fc:b4:80:3e:02:b2:b6:18:87:9c:74:dc:67:b0:1e:e7:
df:48:f5:85:84:6b:b0:e5:41:12:b9:8d:36:2a:5f:49:47:87:
5c:e2:28:26:b6:6b:ef:12:8f:88:97:52:ea:03:84:fb:fc:db:
c7:42:67:e6:a3:c5:b0:1a:fd:88:93:2f:05:08:e3:f4:a4:4d:
ef:03:1b:e8:bf:17:7c:0f:77:97:64:f8:c5:4f:47:1f:10:34:
23:f9:5a:db:f2:3f:4b:bd:28:bf:a2:7c:b9:b7:f1:ce:94:8e:
13:3d:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org