Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ngoeJaPPAegkQlve6CYXgleiYx4.roa
File: ngoeJaPPAegkQlve6CYXgleiYx4.roa (raw, json)
Hash identifier: M1Oqn92f/4/CJwblvL/CzprmamsaS8bXSOCQJnS/N8w=
Subject key identifier: 9E:0A:1E:25:A3:CF:01:E8:24:42:5B:DE:E8:26:17:82:57:A2:63:1E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189F63F428409D5905820AD55CD042EE56A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ngoeJaPPAegkQlve6CYXgleiYx4.roa
Signing time: Mon 14 Aug 2023 22:51:28 +0000
ROA not before: Mon 14 Aug 2023 22:51:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24312
IP address blocks: 2a0e:97c0:600::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f6:3f:42:84:09:d5:90:58:20:ad:55:cd:04:2e:e5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 14 22:51:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e0a1e25a3cf01e824425bdee826178257a2631e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:fd:f8:da:c7:51:33:78:22:52:ec:47:05:
5a:d1:82:28:73:9d:9c:64:5c:b6:78:66:9d:dd:96:
5d:49:7a:c4:27:fd:98:01:a3:f7:6d:82:de:89:4b:
3f:85:3f:1e:76:88:54:a0:48:44:df:40:94:53:ae:
3f:03:f7:8e:66:47:1d:d1:3c:d5:5e:c2:14:12:8b:
76:9e:4c:3a:60:12:93:12:ce:d0:db:9a:26:28:6e:
74:cd:6d:a1:e2:ae:01:a7:c6:a9:f8:b6:a6:00:b1:
6b:89:58:b4:84:e1:ac:de:ae:12:80:0b:19:07:ff:
74:73:62:37:c4:6f:df:04:54:ce:7c:66:c0:af:9f:
6b:86:db:e7:db:ae:ab:6d:49:d3:af:68:05:2a:01:
8f:6b:0c:e7:d7:8e:d9:f2:6e:5b:b8:2e:89:81:9f:
eb:dd:3b:1d:17:6a:66:eb:62:04:77:bf:de:87:41:
48:ae:1a:59:f7:ed:f9:6c:99:51:71:f6:da:a5:cd:
aa:6a:85:ac:cf:4c:9b:b1:d2:d9:da:04:74:50:0b:
ed:d0:69:88:11:8b:6d:2a:02:91:a8:c5:3c:b6:af:
b6:3d:44:71:87:9a:bd:af:32:c3:08:df:89:b1:fe:
33:1f:fb:94:8b:73:08:5e:56:bd:b9:46:75:34:03:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:1E:25:A3:CF:01:E8:24:42:5B:DE:E8:26:17:82:57:A2:63:1E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ngoeJaPPAegkQlve6CYXgleiYx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:600::/44
Signature Algorithm: sha256WithRSAEncryption
02:ab:33:f9:8b:b0:2e:0c:e7:0e:22:33:bf:19:a9:99:ec:64:
c5:4c:d3:36:11:e0:e6:4d:6d:2a:85:3c:7f:da:94:a9:2c:fd:
f1:c5:8b:35:dc:26:ed:1d:f2:2b:6c:0b:19:08:96:5d:70:6f:
7c:66:37:47:ed:b6:c4:39:60:d6:2f:77:bd:9f:be:23:b4:18:
7f:f7:18:de:2c:9d:f1:f9:7a:db:c5:8b:24:71:07:eb:13:e4:
5f:de:b3:e8:9c:a1:c8:6c:6d:b9:45:39:cc:66:be:b9:fc:ae:
49:a9:5e:8d:a3:7a:72:6d:fd:11:5f:23:20:ce:60:01:a4:e6:
f9:be:65:ac:8e:0c:ae:5d:c8:ea:16:18:19:00:64:1b:35:cf:
c6:0a:24:e4:e3:14:a3:6f:6c:03:b3:50:cd:2c:8b:86:eb:db:
ef:c9:cd:c5:29:83:7a:88:04:15:59:4c:f1:73:d0:0d:23:72:
98:d6:a7:5d:05:c4:9b:36:ea:d7:df:2c:57:c3:dc:0b:f8:45:
4a:bc:00:97:32:ce:04:ef:6a:78:23:a6:d1:ac:94:84:73:b3:
ca:7a:14:b4:79:ae:32:77:8a:51:9a:41:91:d5:b9:c0:f1:b5:
76:21:e9:fc:12:f8:9a:bf:0e:1e:1a:49:c1:92:a0:d5:fe:c9:
da:92:4f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org