Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pSdKPA8qQCcm-ownpOLmvWv8sjs.roa
File: pSdKPA8qQCcm-ownpOLmvWv8sjs.roa (raw, json)
Hash identifier: zqA4GoTft6CC9LEusANJH9Db3GxBTu82uv2EyVyn4pQ=
Subject key identifier: A5:27:4A:3C:0F:2A:40:27:26:FA:8C:27:A4:E2:E6:BD:6B:FC:B2:3B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AE7A126C4B26E70E3DA703BE3B573
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pSdKPA8qQCcm-ownpOLmvWv8sjs.roa
Signing time: Tue 24 Jan 2023 16:09:46 +0000
ROA not before: Tue 24 Jan 2023 16:09:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209606
IP address blocks: 2a0e:b107:a50::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:e7:a1:26:c4:b2:6e:70:e3:da:70:3b:e3:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5274a3c0f2a402726fa8c27a4e2e6bd6bfcb23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:de:78:f0:ad:7f:87:0d:0a:7b:9b:e0:59:7f:
a9:52:b8:01:dc:10:d2:65:72:92:47:f9:e6:24:84:
f4:f7:00:a5:0f:97:dd:80:84:17:41:d7:ec:4c:3d:
bc:fc:34:2f:92:b5:2b:f3:8b:23:92:a9:dc:73:03:
d9:36:35:49:3d:0c:1e:5f:3c:81:32:6f:ea:b7:ff:
99:ab:5d:28:77:ca:ca:cf:a6:fa:f9:16:71:3c:70:
1a:7d:ce:21:86:7a:a8:19:23:8e:63:fa:74:62:63:
ba:88:b9:f8:67:23:78:d4:42:a8:b5:1b:7e:25:b7:
50:24:37:e7:5f:9f:e2:e9:da:29:16:9d:74:44:11:
41:e2:d0:b6:3d:84:91:30:44:a6:b5:8c:dd:cd:71:
dc:fe:46:f8:bf:56:77:a4:61:19:0f:0d:08:8e:a9:
88:16:46:e3:42:db:dc:4d:e6:fc:d4:70:2b:3c:4b:
1f:c7:68:bf:8d:31:1a:fa:a2:ea:fe:b5:66:35:0e:
09:7f:e4:e1:36:54:db:cf:0a:30:24:0e:19:63:2a:
72:88:6b:cb:6d:f7:89:97:d9:c8:ea:27:6f:95:97:
ca:f5:2f:50:9f:39:40:74:ec:b8:22:82:d2:90:22:
76:1f:32:be:2d:ea:05:e1:6e:c7:1f:db:c2:18:9c:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:27:4A:3C:0F:2A:40:27:26:FA:8C:27:A4:E2:E6:BD:6B:FC:B2:3B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pSdKPA8qQCcm-ownpOLmvWv8sjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:a50::/44
Signature Algorithm: sha256WithRSAEncryption
65:1b:4c:d0:b5:c5:cb:69:16:cb:c7:6c:5a:29:77:3c:c0:4f:
15:75:53:5c:ec:61:58:66:8b:a1:12:87:b4:6e:9d:50:c3:30:
ef:8f:f3:63:36:a5:be:62:9c:46:17:b7:67:ae:a6:ea:37:36:
59:7d:52:32:ae:64:3c:c5:4b:db:af:0d:4b:b6:95:4f:f9:c9:
18:1e:9d:16:94:c6:20:76:ce:2a:ac:4a:db:a9:f7:0f:03:5f:
c9:8a:fc:c6:00:65:42:9f:1e:f7:53:8b:c2:bf:16:fa:3f:1e:
ab:b5:3f:a4:d7:fb:09:c8:1e:47:49:7c:0d:4d:56:5c:73:28:
0f:d7:be:b6:48:d7:4b:e4:29:db:be:0e:a8:40:5e:d9:ba:82:
a8:56:4a:b2:fa:a8:94:9b:41:59:b3:53:95:e5:5c:34:0d:90:
8e:eb:7d:e2:30:6e:aa:00:96:6a:42:0f:5e:b6:21:e4:72:6a:
6e:0b:d9:b9:4a:7a:a1:6d:37:b3:11:87:25:1c:2d:2f:5f:ba:
77:12:1e:8f:2b:3e:7f:0b:0b:33:aa:d9:97:b7:54:8a:79:67:
d6:e1:60:a1:25:8e:fe:83:55:1a:37:a6:42:95:f8:f5:86:e3:
d7:d3:6a:82:5b:88:0e:1f:7e:66:10:2e:e7:e7:c4:dc:f6:a6:
82:0c:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org