Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kdqWNkhbVpOrHjCo5Xi5vjNtADE.roa
File: kdqWNkhbVpOrHjCo5Xi5vjNtADE.roa (raw, json)
Hash identifier: EwCnObExex4CYmTbfdQyT4X14EoeUc8q3sRk8EvVL6E=
Subject key identifier: 91:DA:96:36:48:5B:56:93:AB:1E:30:A8:E5:78:B9:BE:33:6D:00:31
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185DE40B6450E64CA4BEA8F1081A532B73C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kdqWNkhbVpOrHjCo5Xi5vjNtADE.roa
Signing time: Mon 23 Jan 2023 10:51:00 +0000
ROA not before: Mon 23 Jan 2023 10:51:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212995
IP address blocks: 2a10:2f01:2a0::/44 maxlen: 48
2a10:cc44:180::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:40:b6:45:0e:64:ca:4b:ea:8f:10:81:a5:32:b7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 10:51:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91da9636485b5693ab1e30a8e578b9be336d0031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:f6:b7:31:cf:be:f4:61:56:cd:36:45:df:
30:70:ed:8d:f6:c1:c2:20:c5:3b:32:62:82:5d:14:
dd:a0:1e:0b:b1:6a:c0:1b:55:82:a2:5e:9e:35:af:
51:44:d7:0a:43:dd:e3:74:92:b3:10:a2:ed:6d:6a:
71:0b:40:ef:6d:b2:90:96:9f:39:30:bf:39:92:65:
78:41:7a:35:33:66:13:c4:4d:dd:0e:5d:bf:1d:a2:
3a:89:a8:8c:bb:09:42:47:ad:62:c6:19:48:5c:2d:
13:ab:bf:73:1f:d9:5a:e0:bd:59:8c:e6:2f:c1:d8:
f7:de:33:25:1d:e1:f3:6d:70:50:12:58:e4:4f:42:
3d:05:09:94:50:a0:2f:77:ac:91:ae:6f:b3:21:f1:
fe:78:9c:2e:d8:16:af:95:23:e8:6f:02:f4:0c:07:
61:83:82:06:24:22:c1:96:9b:6d:ce:26:0f:19:00:
45:db:ec:3f:df:c6:ed:17:27:a6:11:2d:e9:11:01:
b7:c2:a8:cb:f8:c7:be:38:09:0d:51:d9:b5:e5:d3:
b6:74:3d:46:56:ed:ea:4e:6d:3c:a6:e5:3c:54:9d:
3a:8b:f9:dc:a7:04:4c:95:5f:df:41:26:07:be:af:
8b:62:70:75:ef:b8:47:a6:66:89:38:98:3c:bc:ea:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DA:96:36:48:5B:56:93:AB:1E:30:A8:E5:78:B9:BE:33:6D:00:31
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kdqWNkhbVpOrHjCo5Xi5vjNtADE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f01:2a0::/44
2a10:cc44:180::/44
Signature Algorithm: sha256WithRSAEncryption
00:ab:42:34:92:d4:e9:c6:8b:66:eb:ca:b4:ae:50:60:bf:30:
2c:f2:08:99:24:06:d9:36:51:71:25:62:b2:c4:48:57:70:d9:
c4:c8:c5:08:97:84:e7:34:dd:46:3c:5d:06:00:b2:a6:a2:8a:
6c:ab:41:57:8f:5e:52:27:db:86:f2:87:85:43:a9:e0:6a:57:
4a:ad:b2:f5:65:96:29:31:69:44:43:47:04:7d:f7:11:b3:07:
24:1b:18:1d:68:ba:e9:9c:3d:7a:4d:94:52:7f:e7:35:51:aa:
6d:7e:42:29:b3:07:f2:3b:0f:ab:d6:dd:52:0d:e7:49:1d:e8:
6f:1e:e4:00:3d:23:73:ea:70:f6:cd:d3:c2:2e:28:db:76:e7:
e7:f0:82:fd:70:d0:9c:19:c0:3d:bb:12:91:e5:71:7b:b4:70:
17:69:d4:cb:ef:10:75:cb:8b:bd:0a:42:a9:c4:28:f2:cf:96:
82:bd:db:f8:a3:c1:ef:6a:44:30:0a:ca:01:ba:c5:e6:44:fa:
82:ac:42:47:a8:d2:e7:1d:95:31:72:05:80:d1:96:21:ad:cc:
3d:14:e7:e7:ad:33:2b:4b:58:2b:45:85:22:b4:15:1b:b7:e8:
23:c2:a1:74:98:c8:d3:bc:cd:19:16:5d:d1:e4:23:8b:32:42:
24:f1:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:03 2023 by rpki-client on console-ams.rpki-client.org