Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oismhQyB52EmAqj76ZF5jXeNcTY.roa
File: oismhQyB52EmAqj76ZF5jXeNcTY.roa (raw, json)
Hash identifier: ql2isYmqnNUaD2g70LwbdfYhQ/Ut4LbeX5aZ0VsHK7E=
Subject key identifier: A2:2B:26:85:0C:81:E7:61:26:02:A8:FB:E9:91:79:8D:77:8D:71:36
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BE0EF01C62D79BC06B13AA42924237CE1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oismhQyB52EmAqj76ZF5jXeNcTY.roa
Signing time: Sat 18 Nov 2023 05:37:21 +0000
ROA not before: Sat 18 Nov 2023 05:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215980
IP address blocks: 2a0e:97c0:e30::/44 maxlen: 48
2a10:ccc0:3000::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e0:ef:01:c6:2d:79:bc:06:b1:3a:a4:29:24:23:7c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 18 05:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a22b26850c81e7612602a8fbe991798d778d7136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:5a:f0:a9:56:6f:30:d5:cc:63:7f:d5:0e:
2d:45:fd:f2:79:10:58:51:bc:30:f2:e0:2d:f2:94:
e9:48:26:22:31:3e:c8:79:a1:5c:a6:d4:8e:bb:f2:
c8:3b:1a:c9:24:1d:8c:6f:1d:bb:d7:13:a5:a3:3a:
2a:24:0b:e3:c3:65:d5:96:c4:ac:e7:1b:bc:f3:fb:
29:3a:ac:37:a2:65:a4:e3:e2:b0:28:d2:ec:8b:a5:
4f:03:e1:c0:54:f8:b1:22:37:56:f3:9c:d1:88:f3:
78:fa:c7:e7:d6:52:cd:f3:1d:73:ec:01:4a:d1:52:
0f:4d:db:d9:2b:e8:7a:44:bd:6e:56:c9:d8:06:2a:
f0:ca:f3:24:c2:f3:b9:fa:b6:b6:e8:49:fd:bd:63:
e5:f7:77:2f:0b:c5:4c:9a:64:d4:f2:78:5e:95:a0:
fe:47:cc:21:ca:f8:7a:5a:19:5e:9c:98:50:9c:8e:
5d:49:2f:4d:39:85:ed:7b:40:bb:13:a2:16:65:6b:
d8:f9:c9:90:01:16:bc:a7:ca:b2:d4:3e:91:ff:26:
a6:67:cf:ae:fc:50:d9:54:24:d3:0c:32:bb:7a:6e:
ac:85:31:a6:48:5c:66:93:92:b8:09:1f:ae:ea:87:
65:af:c3:2a:c4:c3:6e:b9:47:c2:d6:fc:d7:73:3d:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:26:85:0C:81:E7:61:26:02:A8:FB:E9:91:79:8D:77:8D:71:36
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oismhQyB52EmAqj76ZF5jXeNcTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:e30::/44
2a10:ccc0:3000::/44
Signature Algorithm: sha256WithRSAEncryption
8d:35:11:63:ab:f1:7e:1e:95:f8:dd:9a:1d:05:e9:7b:a0:bd:
2c:83:bf:39:88:09:4f:25:eb:a9:57:40:b5:97:db:37:48:cf:
2e:25:91:96:d0:24:a8:41:4c:db:6f:83:b5:3c:14:1a:77:c5:
38:fc:ff:67:fa:ef:0a:f1:99:26:60:7f:74:d6:03:7b:95:10:
e7:97:a2:0a:68:f1:9a:9d:a6:11:5d:8f:8d:66:52:d8:99:b8:
ff:02:eb:68:51:c4:66:ab:9c:41:84:34:47:61:e7:7d:08:ce:
9e:9b:51:20:de:65:19:e8:8f:e7:50:1c:47:82:28:77:16:f6:
a5:eb:e2:19:43:44:4e:1d:1d:b6:9b:c9:fc:3c:0b:12:bf:37:
d0:2b:4b:bb:93:2c:5e:3c:b5:9c:83:b8:8a:bd:c0:af:a9:5b:
18:c0:21:d6:40:31:ae:5c:1a:89:39:22:bf:f8:a8:7d:ae:24:
a7:92:8f:b1:14:40:84:86:fe:7f:ba:71:67:8f:15:2c:bb:36:
7d:b6:26:90:c2:90:30:6a:84:8d:8b:f1:b4:52:e5:fa:24:b0:
0c:8e:dd:84:43:96:6b:30:11:b8:7d:b6:db:2f:0f:90:29:85:
11:50:83:96:66:86:9d:4d:55:58:ca:7a:bb:67:12:13:7b:f3:
cb:08:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 19 01:49:55 2023 by rpki-client on console-fra.rpki-client.org