Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k79z41H_26XWVKqClF4Vk76DGMk.roa
File: k79z41H_26XWVKqClF4Vk76DGMk.roa (raw, json)
Hash identifier: fEzLU7svrHH9jJIDvbKkU1MV0GT+zAHAbOUTXVkxbfk=
Subject key identifier: 93:BF:73:E3:51:FF:DB:A5:D6:54:AA:82:94:5E:15:93:BE:83:18:C9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C020BDFF2E91F7E79CC3A97551D1C2DD8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k79z41H_26XWVKqClF4Vk76DGMk.roa
Signing time: Fri 24 Nov 2023 15:56:21 +0000
ROA not before: Fri 24 Nov 2023 15:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216026
IP address blocks: 2a0e:97c0:585::/48 maxlen: 48
2a0e:97c0:580::/48 maxlen: 48
2a0e:97c0:583::/48 maxlen: 48
2a0e:97c0:581::/48 maxlen: 48
2a0e:97c0:584::/48 maxlen: 48
2a0e:97c0:582::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:0b:df:f2:e9:1f:7e:79:cc:3a:97:55:1d:1c:2d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 24 15:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93bf73e351ffdba5d654aa82945e1593be8318c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:43:ab:bb:b8:76:9e:1c:6d:9e:73:2e:e7:
64:06:2a:dd:cd:f6:19:8e:68:fc:e0:84:9b:78:e3:
51:e9:75:5f:aa:fa:8c:11:e2:cb:32:13:71:8b:62:
ce:88:bf:93:11:14:af:46:34:f8:05:a7:a6:e8:91:
0f:d9:da:d7:8f:de:ff:96:e3:59:f0:74:95:66:95:
b8:f9:c6:a9:46:28:6a:14:c6:d2:7d:08:3c:09:4c:
ed:18:7e:cd:8a:47:d6:ae:b1:b2:b2:d7:bb:58:43:
df:93:2e:39:80:78:c9:93:32:f9:e9:4b:6f:67:4a:
11:4d:1e:e2:41:cc:80:af:83:76:e3:47:12:99:69:
a4:81:d1:3d:7d:05:f3:d1:f7:30:b3:27:5e:cb:cd:
7d:dd:b9:cd:5e:d7:20:e3:76:a8:7f:3b:1a:af:15:
21:86:e7:b4:4a:d5:23:89:94:4f:ac:5b:ba:29:d9:
18:96:4d:c1:42:50:4f:fa:7e:4e:f0:b4:b4:e3:14:
89:15:ff:42:4d:5d:f1:0d:e5:6f:65:f9:cc:23:98:
fc:98:b2:b7:a8:8d:4d:8d:ed:8b:57:40:e5:f7:61:
ad:70:b5:1e:49:93:3c:f8:c9:d3:fb:f8:55:05:ab:
77:91:1f:42:eb:24:66:24:35:b8:54:64:38:dc:98:
ab:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BF:73:E3:51:FF:DB:A5:D6:54:AA:82:94:5E:15:93:BE:83:18:C9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k79z41H_26XWVKqClF4Vk76DGMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:580::-2a0e:97c0:585:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:51:4f:fd:f4:02:9a:3c:b8:44:c4:0b:5e:63:cf:76:b1:32:
26:03:70:91:2d:85:31:8a:c3:2e:a4:96:92:74:ef:07:6f:94:
cf:f0:fb:c0:56:3f:51:32:04:c2:1c:4a:42:71:76:a3:8d:de:
b5:74:da:78:c5:87:c0:f9:18:07:ae:21:03:8f:c9:0f:44:ff:
62:af:d1:53:97:49:4a:c4:60:72:1f:cf:d1:8b:b2:e4:c8:ce:
73:6b:9f:37:95:47:e2:0e:c4:7d:39:41:db:f6:c0:56:de:6f:
a9:51:7c:75:ea:67:05:ea:3d:11:bc:02:51:45:80:fb:c1:c3:
60:d7:44:ec:78:f3:ec:5b:6b:24:98:93:8d:8f:98:99:09:ed:
3b:86:d2:58:cf:0b:1e:f5:e3:2c:23:32:02:c5:cc:e3:f9:f4:
3c:70:43:53:fd:48:ba:04:93:fc:a7:19:87:b7:27:03:2d:99:
61:9a:2d:d9:eb:fe:fa:8d:f8:3c:23:f6:46:3f:55:84:3f:f5:
f3:90:a6:ef:3e:02:52:21:54:bc:6f:b7:72:9e:4e:f6:69:1a:
cf:ed:25:31:db:75:6c:28:8a:da:e0:87:43:fb:06:d9:f7:af:
02:a9:e0:d3:75:9f:aa:80:44:96:ee:23:d9:b9:00:bc:1d:09:
6b:19:3b:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:51 2024 by rpki-client on console-ams.rpki-client.org