Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/izO5fFD4zearItTUdz-c704OcBc.roa
File: izO5fFD4zearItTUdz-c704OcBc.roa (raw, json)
Hash identifier: srwmxysN1eM+j9FWwW09FMHxS8NKjQjPqh2u2pPjsYQ=
Subject key identifier: 8B:33:B9:7C:50:F8:CD:E6:AB:22:D4:D4:77:3F:9C:EF:4E:0E:70:17
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187EB8F578ADC2B924A836A221736E29904
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/izO5fFD4zearItTUdz-c704OcBc.roa
Signing time: Fri 05 May 2023 10:57:32 +0000
ROA not before: Fri 05 May 2023 10:57:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61112
IP address blocks: 2a0e:97c0:7d0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:8f:57:8a:dc:2b:92:4a:83:6a:22:17:36:e2:99:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 5 10:57:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b33b97c50f8cde6ab22d4d4773f9cef4e0e7017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:d7:71:f6:40:d9:b7:25:54:a9:53:e8:de:
6f:c0:67:90:dd:b5:73:31:de:d9:bb:94:54:9a:ba:
a4:37:f6:97:49:4c:c8:f5:57:fd:c9:ce:b5:0e:72:
28:1d:5a:42:9b:24:98:ab:8d:5d:35:e2:32:37:b3:
32:a6:94:4e:56:38:6d:d0:ee:b7:e3:b8:d6:cd:21:
b2:34:bb:fb:6b:dc:27:88:63:f4:71:3f:36:8a:b1:
72:92:f8:3c:c0:3e:9f:0d:76:6c:91:54:e5:e7:28:
c3:d2:9e:e2:c5:95:83:cf:ac:af:37:db:d8:16:aa:
b7:6f:e9:2a:ac:ee:f6:25:46:2b:a0:d6:a5:51:65:
d5:80:84:e6:cb:e5:16:2e:ce:14:28:1c:84:23:dd:
64:f3:e5:55:14:2d:99:7d:8a:c5:05:70:c1:73:a4:
c1:02:a5:45:80:c4:ba:ac:74:cf:1d:08:6b:8d:0b:
f6:ee:2b:0d:3d:35:7b:c8:ad:bd:8f:ee:a1:c1:58:
e5:23:f3:67:f1:b0:3b:ee:ae:3b:62:8f:06:c9:76:
ee:8c:95:75:77:7e:e9:ea:01:a0:bb:37:2a:53:7f:
a6:b4:ed:f3:b2:88:ee:9b:13:e7:3e:e4:1e:8c:9a:
66:d6:11:e2:44:8d:5e:6f:ac:1b:58:d2:66:53:0f:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:33:B9:7C:50:F8:CD:E6:AB:22:D4:D4:77:3F:9C:EF:4E:0E:70:17
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/izO5fFD4zearItTUdz-c704OcBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:7d0::/44
Signature Algorithm: sha256WithRSAEncryption
61:34:b3:5d:52:cd:21:f5:79:47:4b:6e:23:71:b3:6c:84:1e:
04:ce:89:15:d0:e5:97:eb:cd:b1:f1:c5:63:d3:fb:83:d2:3b:
3f:00:b9:42:1c:04:6e:67:12:92:e2:c1:80:3d:c9:4b:64:8d:
f7:72:11:bf:b5:8e:7b:2a:3e:cf:ba:35:69:30:da:9a:33:f4:
52:0a:81:3e:fb:ac:70:c7:af:bf:11:ac:78:9a:e4:b0:fa:04:
b6:49:69:0f:0d:f9:e2:59:f3:0f:13:61:ea:98:30:55:ba:17:
63:36:76:ee:f2:aa:1f:77:80:94:91:73:30:bf:66:f6:10:f2:
0c:96:d5:47:ff:fb:6b:5f:0f:ce:48:e0:4a:6a:91:6d:a4:bc:
d0:c2:1b:d0:e0:34:76:4d:71:f3:a7:cb:31:12:b5:ed:76:d0:
aa:74:e4:b9:f1:e0:ca:6d:ce:5a:82:34:d8:a8:06:b0:3f:3d:
65:13:0e:a8:87:8d:7a:1e:3f:c2:09:24:e1:d1:cb:8e:5a:78:
15:85:a3:22:68:20:70:00:9a:f7:4d:b8:4d:0b:d9:3a:3e:60:
08:26:5e:74:6d:f9:c9:1a:e3:c5:0c:ab:75:ed:c1:dc:30:b6:
c3:92:88:ad:cf:45:c2:24:de:0a:ed:8c:c1:4b:33:ca:23:0c:
9f:c6:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org