Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oEEsDMveytBz-NZfEaVQnP6712s.roa
File: oEEsDMveytBz-NZfEaVQnP6712s.roa (raw, json)
Hash identifier: rKx7jhq7aAzsNVlEqJgFBPiO0ohfS1XS/5Ta2cA34UU=
Subject key identifier: A0:41:2C:0C:CB:DE:CA:D0:73:F8:D6:5F:11:A5:50:9C:FE:BB:D7:6B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48B00795ADFE736AF0CFB8D259075F2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oEEsDMveytBz-NZfEaVQnP6712s.roa
Signing time: Tue 24 Jan 2023 16:09:52 +0000
ROA not before: Tue 24 Jan 2023 16:09:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212164
IP address blocks: 2a0e:b107:1d20::/48 maxlen: 48
2a0e:b107:1d25::/48 maxlen: 48
2a0e:b107:1d22::/48 maxlen: 48
2a0e:b107:1d2a::/48 maxlen: 48
2a0e:b107:1d24::/48 maxlen: 48
2a0e:b107:1d21::/48 maxlen: 48
2a0e:b107:1d23::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8b:00:79:5a:df:e7:36:af:0c:fb:8d:25:90:75:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0412c0ccbdecad073f8d65f11a5509cfebbd76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:38:e9:d8:60:c3:2e:ff:3a:91:f2:81:de:
06:06:fe:3b:31:65:c6:6f:00:d6:ae:26:c0:4b:8f:
02:69:18:f0:02:6e:e6:97:9e:2e:fe:73:ee:1c:75:
5f:98:36:9f:a0:87:fe:32:81:22:2e:1b:c8:81:e7:
b5:2b:29:82:69:91:a3:a3:3f:b8:14:c0:8f:3c:c5:
34:db:df:de:1d:d7:e4:c4:4f:9c:77:94:1f:f6:e8:
3d:ab:fd:5b:14:e0:66:7a:85:9f:83:d6:0a:7c:d5:
a1:7a:b8:b6:9f:64:78:37:65:3e:0e:00:0b:78:f7:
e6:28:c9:67:f1:d4:1e:ab:eb:ff:21:27:26:31:fd:
dc:12:b6:61:f5:49:7e:2f:83:2f:00:a6:0b:7f:95:
a3:6d:c1:67:f3:ee:f7:72:2b:3b:03:fe:21:7f:ff:
d6:1c:3a:d6:17:02:d4:8c:e0:b9:9a:66:e3:c1:1c:
3a:ce:8b:85:8e:ad:c9:e3:5d:ae:c3:bf:a9:00:fb:
92:5b:c1:d9:09:df:38:92:fc:14:7a:00:03:58:0d:
01:41:1a:99:ce:a6:ef:ae:40:9c:5c:17:86:9b:42:
3f:84:66:23:e2:7d:51:e9:0f:ca:1a:6c:1d:aa:55:
f9:f4:a7:c6:5c:cb:d9:5d:12:f6:8b:89:0f:19:f2:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:41:2C:0C:CB:DE:CA:D0:73:F8:D6:5F:11:A5:50:9C:FE:BB:D7:6B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oEEsDMveytBz-NZfEaVQnP6712s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d20::-2a0e:b107:1d25:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1d2a::/48
Signature Algorithm: sha256WithRSAEncryption
6e:8d:55:01:5e:27:34:39:75:7f:61:52:68:a1:bb:1c:ec:4d:
eb:1a:75:f3:12:d8:e1:e6:be:72:99:c6:9a:39:ad:eb:4a:0e:
ce:fc:e3:ba:1d:3c:6c:c3:5d:ba:cf:2e:a4:c4:64:a7:88:26:
ae:ee:5d:35:89:80:a5:7b:38:47:5a:47:5f:53:c7:1c:92:7e:
71:25:62:32:75:b3:06:56:81:b4:f9:0c:f2:1b:16:dc:66:9c:
01:6b:52:59:02:22:da:b1:68:fc:f8:b4:5e:db:74:68:c0:33:
fe:aa:2b:73:5f:b8:03:0d:1d:39:07:6e:a2:d6:2b:6c:1c:ed:
40:2f:60:f0:2d:fc:72:26:fd:0b:43:6a:80:9e:b5:94:b7:41:
ee:13:21:49:82:d4:f4:7e:2e:0c:f7:86:fb:2b:1c:f7:d6:88:
36:10:23:8b:3e:be:31:a0:f7:79:a6:d7:e6:ce:f2:96:91:88:
db:5d:f1:a4:fb:01:c5:01:8b:6b:c5:29:6d:e1:70:80:48:6a:
54:3b:c7:10:59:c0:ea:44:74:02:49:75:27:d5:1b:33:5c:83:
52:8b:5d:3a:f0:80:2d:46:7d:aa:18:ab:a9:49:b5:e4:06:68:
49:a6:e5:36:80:8d:45:42:7e:06:6b:e7:71:f2:7c:eb:da:c7:
47:59:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org