Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jDlw2I7uu-SZkIfUDNEiRa2ZHTk.roa
File: jDlw2I7uu-SZkIfUDNEiRa2ZHTk.roa (raw, json)
Hash identifier: SpTLKgTQ1OJNpUxA297+YYaozYg67XLmMZliUeSaYwo=
Subject key identifier: 8C:39:70:D8:8E:EE:BB:E4:99:90:87:D4:0C:D1:22:45:AD:99:1D:39
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AFEBB26B49F09D446D9A343858FA2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jDlw2I7uu-SZkIfUDNEiRa2ZHTk.roa
Signing time: Tue 24 Jan 2023 16:09:52 +0000
ROA not before: Tue 24 Jan 2023 16:09:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212129
IP address blocks: 2a0e:b107:ef0::/44 maxlen: 48
2a10:2f00:160::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:fe:bb:26:b4:9f:09:d4:46:d9:a3:43:85:8f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c3970d88eeebbe4999087d40cd12245ad991d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:41:7b:77:af:ba:d4:20:87:55:dd:60:3a:
5c:67:ba:30:ac:09:da:03:be:bc:1e:84:d2:10:ed:
02:a6:3e:de:58:2f:f7:1f:d5:fd:e5:f7:92:7c:3a:
8f:6b:74:91:f2:28:c1:f2:cf:2e:19:37:80:18:98:
73:44:c3:20:2b:be:60:20:87:64:12:65:1f:0c:15:
00:d1:da:2f:b9:61:74:9a:84:b4:af:4c:d5:c9:52:
9c:6d:e8:93:2c:02:ac:2e:4c:9c:17:35:70:53:3f:
18:52:63:fe:a7:85:b4:51:aa:c3:86:92:31:54:bb:
a8:26:e0:af:24:63:d7:8f:da:14:02:d5:ab:19:26:
6f:84:7e:bd:f2:54:c0:c1:89:40:1a:78:1a:2e:ea:
f5:f1:b7:95:c3:78:3a:10:aa:8c:c0:22:38:74:3f:
7b:d5:31:cf:da:03:55:13:77:8a:a9:be:1e:74:03:
51:f0:98:94:84:90:ce:bc:ec:d4:29:1a:3b:ba:fc:
98:7d:49:cb:22:c1:1d:1f:6c:6c:8f:e3:d0:f8:cc:
69:4d:d6:6d:63:f0:88:41:c8:35:e0:4f:80:fa:c4:
e9:ef:bd:d5:4a:dc:2e:92:04:21:ed:3f:08:1e:46:
ed:44:a9:fe:30:b0:fe:20:32:1c:df:13:73:50:e1:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:39:70:D8:8E:EE:BB:E4:99:90:87:D4:0C:D1:22:45:AD:99:1D:39
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jDlw2I7uu-SZkIfUDNEiRa2ZHTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ef0::/44
2a10:2f00:160::/48
Signature Algorithm: sha256WithRSAEncryption
13:df:7d:a1:81:ea:19:4e:bd:d5:43:27:85:1b:82:d5:cc:5d:
88:59:a5:b6:20:2b:ef:81:8b:03:df:54:0e:9b:05:f8:94:21:
0f:91:fa:47:e3:3b:39:8b:c0:94:15:e1:09:f4:2a:23:08:96:
33:dc:33:7b:2c:22:42:b6:9c:34:28:50:68:26:85:40:03:d4:
4d:c0:8d:55:df:37:9e:4a:bc:2e:ef:66:af:48:47:1c:cb:cf:
3d:e7:8c:2c:4b:62:df:67:0a:f3:51:4a:4b:a1:63:76:b7:d7:
72:87:07:d7:32:a1:10:cd:51:4b:38:33:b5:55:7c:d9:89:f9:
38:2b:36:74:b6:bb:93:80:26:8e:8d:ab:97:0a:4c:72:46:e1:
ec:10:a1:b6:31:e0:f7:0d:f9:b8:26:55:19:3f:4d:8e:df:c9:
e3:45:07:e4:d8:5a:d9:7d:58:49:0a:41:ba:50:d0:5c:a0:cc:
56:bd:b3:3e:53:2f:cb:f1:5f:a0:1a:cb:23:89:77:88:00:f9:
03:0d:b5:e2:5b:1c:0c:88:8e:49:72:ca:71:aa:d4:d2:19:a2:
8c:6e:cc:d9:eb:dc:87:cd:ba:6a:be:b1:4c:e2:3d:90:b6:2b:
c9:1d:88:7f:2b:d0:dd:b3:87:04:a5:2b:cc:cc:81:14:2c:5a:
0d:ff:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org