Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/irGWPFSekEyHlBQEzJm071dTZWo.roa
File: irGWPFSekEyHlBQEzJm071dTZWo.roa (raw, json)
Hash identifier: uu/ZZ1w2SQh9rB8t194dG0XmaS9AtzrQTYSCz/WTpIg=
Subject key identifier: 8A:B1:96:3C:54:9E:90:4C:87:94:14:04:CC:99:B4:EF:57:53:65:6A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185F5B663CB6DC6CF9CCA1F6E18FDF5669A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/irGWPFSekEyHlBQEzJm071dTZWo.roa
Signing time: Sat 28 Jan 2023 00:10:48 +0000
ROA not before: Sat 28 Jan 2023 00:10:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142055
IP address blocks: 2a0e:b107:1170::/48 maxlen: 48
2a0e:b107:df5::/48 maxlen: 48
2a0e:b107:1172::/48 maxlen: 48
2a0e:b107:1171::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f5:b6:63:cb:6d:c6:cf:9c:ca:1f:6e:18:fd:f5:66:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 28 00:10:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ab1963c549e904c87941404cc99b4ef5753656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:c9:fb:73:3d:47:9b:d9:92:fd:55:34:57:
1c:eb:2c:dc:05:ee:e8:bf:de:ac:fa:fe:4f:ee:0c:
05:bc:b3:5b:15:1c:af:26:dc:8e:b8:ff:9e:28:b3:
e6:0a:89:3e:1f:19:a9:6e:b9:bc:42:16:a1:6a:15:
6a:f0:db:62:05:9d:e1:59:c5:c9:e8:af:e9:4b:09:
a2:c7:dc:3f:27:ae:e2:51:f6:89:40:cb:fe:f2:86:
fb:d8:dc:57:06:98:f9:3a:c0:db:2e:53:77:38:47:
37:91:92:d2:cd:c9:7d:5f:b7:df:88:80:8f:46:20:
b8:ad:a0:0b:bb:d5:26:2c:61:79:d0:5a:87:c9:8d:
47:16:e8:4d:a3:3b:43:03:56:0c:10:52:76:21:9d:
af:dc:36:0b:3c:dc:51:8d:3a:57:5a:a0:3a:52:b9:
36:1d:e4:60:2c:72:9d:44:52:2c:33:92:4f:f6:75:
14:66:84:c3:5c:e0:a0:bf:c0:5c:5c:3a:e0:da:99:
b2:d9:f1:5b:21:66:b9:aa:4d:61:1c:de:2f:fb:0d:
9a:08:c6:12:66:9f:b6:f1:05:68:a2:85:05:a2:0d:
b1:e2:27:ed:25:f4:10:c9:74:55:e6:73:7c:9e:a5:
ab:18:a5:f3:6a:73:11:8d:39:84:39:7b:10:28:5c:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B1:96:3C:54:9E:90:4C:87:94:14:04:CC:99:B4:EF:57:53:65:6A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/irGWPFSekEyHlBQEzJm071dTZWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:df5::/48
2a0e:b107:1170::-2a0e:b107:1172:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b6:73:1f:8a:94:dd:19:09:6e:62:68:42:80:66:39:e3:24:6d:
ac:11:82:3a:c2:da:e2:4b:b1:4e:4a:dc:91:3f:10:87:e9:6b:
0d:c6:7d:dc:50:41:d7:8f:66:1d:6f:9a:32:a1:4e:18:ed:df:
6b:bd:9d:83:b8:d9:db:b3:1a:e7:89:57:bf:2f:ef:d6:e6:76:
f0:0b:88:dc:81:0b:a7:fb:e6:93:57:02:1a:24:5a:92:0c:f7:
e8:de:8c:22:bb:a5:17:66:61:81:b5:58:ae:8f:8b:c4:ca:33:
b3:22:9c:20:84:22:3f:e5:a3:54:cb:50:66:a4:99:cd:d3:fa:
53:84:d6:89:f2:ab:da:db:f5:49:e0:0e:93:49:81:99:68:9c:
94:a9:8a:e5:d6:ec:ed:e4:41:ec:98:2f:e9:c1:7c:ed:b1:be:
0f:da:7a:50:ee:0e:20:32:22:23:58:d9:6e:44:5a:01:bc:d1:
5a:43:56:2b:36:1c:ec:f3:da:20:52:5d:0e:d2:f6:1e:9a:d9:
b5:db:c1:32:6f:25:b7:30:f9:64:4b:e3:2b:01:1f:42:4f:da:
f7:01:89:df:7c:1d:77:ad:a6:b4:9c:01:90:1c:1c:35:c3:cb:
03:11:89:fb:12:87:25:cc:e0:92:d1:34:67:67:30:24:59:1d:
9b:56:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org