Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k_v_iMzMrU6NfuAfPDBYxyUyLTs.roa
File: k_v_iMzMrU6NfuAfPDBYxyUyLTs.roa (raw, json)
Hash identifier: IciNY4/Dp+zHZggJ2To+nyXinbF1zZ8Ju7kqtXRbgWQ=
Subject key identifier: 93:FB:FF:88:CC:CC:AD:4E:8D:7E:E0:1F:3C:30:58:C7:25:32:2D:3B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C9D1DB556980FB925F4087E1599014CCB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k_v_iMzMrU6NfuAfPDBYxyUyLTs.roa
Signing time: Sun 24 Dec 2023 18:36:58 +0000
ROA not before: Sun 24 Dec 2023 18:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a0e:b107:19a0::/48 maxlen: 48
2a06:de00:10::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9d:1d:b5:56:98:0f:b9:25:f4:08:7e:15:99:01:4c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 24 18:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93fbff88ccccad4e8d7ee01f3c3058c725322d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:88:08:b8:b6:00:3f:d9:ae:6d:c9:1c:af:46:
ae:18:60:3f:9d:b7:c4:91:f5:5d:f8:75:dc:cf:a1:
b3:e3:ee:0e:33:3c:5a:4f:a1:0c:7f:fe:d2:24:fb:
20:9e:f4:55:a3:cc:c9:d1:43:8a:8e:ba:ad:b2:38:
68:ec:7e:9f:88:77:7c:7a:ec:d0:f3:a6:1a:91:9e:
f1:5c:c7:f2:66:d2:c4:56:02:45:e3:16:c5:6f:89:
9a:7d:09:1c:bb:d1:bf:1d:38:26:ed:58:e9:f0:af:
18:92:db:5a:20:09:15:c4:c9:65:bf:e9:71:65:9e:
4b:21:89:2d:24:a8:e4:98:5b:bd:bc:55:67:12:f6:
d4:18:9f:4a:17:3b:50:e7:4e:36:8b:ac:9f:f6:4f:
bc:b2:a7:b1:e2:70:e4:d8:9b:90:04:5d:fa:53:c6:
9c:39:d7:82:0a:ec:29:a5:07:f3:34:ec:aa:10:f6:
d9:e0:da:b3:b5:88:2a:5a:98:47:8e:cf:b8:3f:0e:
a9:cb:e8:80:e5:cf:fc:90:cf:89:60:a1:8f:ca:db:
38:a7:a7:df:28:f6:15:cf:60:23:a3:39:67:3c:14:
60:e2:f5:cf:ae:a3:7e:9f:7e:90:56:cb:d6:64:81:
70:cf:32:6a:41:dc:ca:03:be:9a:9f:30:9d:4a:35:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FB:FF:88:CC:CC:AD:4E:8D:7E:E0:1F:3C:30:58:C7:25:32:2D:3B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k_v_iMzMrU6NfuAfPDBYxyUyLTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:10::/48
2a0e:b107:19a0::/48
Signature Algorithm: sha256WithRSAEncryption
06:ab:5d:eb:0a:6f:fb:2a:a8:c5:f9:c5:1b:91:ab:89:17:d1:
9b:fd:5e:da:a3:8b:60:fe:31:66:bb:0f:ce:ce:2b:54:b8:f0:
57:49:fe:17:12:70:14:fb:26:2a:dc:fb:90:ce:fa:ad:e9:5e:
0e:51:53:63:57:0b:48:f3:db:32:0e:07:29:4f:0c:8d:4a:c4:
40:be:03:22:ad:c4:84:8c:94:56:17:2a:8d:48:f3:d8:71:bc:
67:b5:c6:9a:2e:a6:15:a4:28:5e:d0:28:4c:0a:37:03:a3:ad:
dd:f7:a9:90:be:5f:eb:dc:71:33:4b:64:81:bf:de:8d:d8:74:
73:bc:7f:77:f3:de:03:2f:f4:a6:3b:94:d9:91:33:5d:53:af:
6c:f8:78:5a:01:fd:c2:7f:e6:1d:44:40:de:4c:53:76:fb:93:
52:25:4f:21:f9:18:c7:74:97:66:11:d1:98:2b:46:6d:2a:50:
ee:d1:d5:9d:7b:d9:53:af:29:c7:9c:11:85:a3:b3:31:03:9f:
0b:e5:c8:bb:00:14:05:56:7a:5e:c5:53:c5:b3:37:52:9b:11:
cc:c0:a2:d4:15:88:99:be:07:ba:cc:a8:45:12:ac:ab:72:9b:
0c:b6:cc:b1:fe:4c:44:35:e1:52:ae:51:c6:16:59:c8:6e:16:
49:68:15:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org