Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pdUEMeh1euA7JY5hOgB0YZS9DpI.roa
File: pdUEMeh1euA7JY5hOgB0YZS9DpI.roa (raw, json)
Hash identifier: PTkndaQdz+hp/Yl2LJl1OTNREvb+kZS4qPtC9Ec70GE=
Subject key identifier: A5:D5:04:31:E8:75:7A:E0:3B:25:8E:61:3A:00:74:61:94:BD:0E:92
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AF338479FAEFDB6CE961A0C9F917A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pdUEMeh1euA7JY5hOgB0YZS9DpI.roa
Signing time: Tue 24 Jan 2023 16:09:49 +0000
ROA not before: Tue 24 Jan 2023 16:09:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211231
IP address blocks: 2a0e:b107:1390::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:f3:38:47:9f:ae:fd:b6:ce:96:1a:0c:9f:91:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5d50431e8757ae03b258e613a00746194bd0e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:00:dc:85:20:19:be:45:97:49:0d:fd:f9:
64:0c:86:5a:4d:50:2c:9f:d6:ae:72:a2:92:b2:19:
ae:54:6c:bf:54:49:34:14:49:00:ad:cc:83:70:30:
ec:31:0f:84:ef:98:d1:96:69:a4:4c:f3:b0:1a:03:
b6:f6:03:71:76:fb:86:36:0c:52:f0:f0:1d:9c:69:
5f:db:42:c2:93:6b:13:ea:ec:66:24:8b:e8:5c:8c:
6b:fe:69:62:bc:53:73:18:74:26:a7:fb:ee:57:65:
17:e1:c7:94:11:af:0f:33:ed:a3:ce:17:a0:48:5e:
13:ee:6f:7d:fa:da:00:30:6e:58:43:9b:15:d2:16:
5b:66:60:0e:d3:77:95:f1:cd:d0:1a:8f:ea:47:f2:
e7:49:a2:0d:01:e4:70:97:97:6c:b0:d8:cf:cf:3b:
c2:7c:64:11:9a:11:d7:96:bf:ad:40:56:79:16:41:
66:14:87:c4:ea:06:96:f6:ce:85:ec:8a:c4:04:92:
ba:cb:80:84:c4:8d:1f:74:7b:93:02:4f:f3:43:0b:
52:e9:dc:35:84:25:5a:87:62:cf:1f:4b:92:81:de:
18:59:d6:50:9a:66:26:75:69:db:01:29:e9:20:43:
bf:96:73:c8:4f:eb:e7:99:fd:ab:d0:3f:77:68:e4:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D5:04:31:E8:75:7A:E0:3B:25:8E:61:3A:00:74:61:94:BD:0E:92
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pdUEMeh1euA7JY5hOgB0YZS9DpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1390::/44
Signature Algorithm: sha256WithRSAEncryption
19:a5:9b:af:98:e7:37:f5:dc:3a:9e:1d:10:da:2f:f5:ce:e3:
e3:9e:ef:9e:59:fe:e2:46:64:0f:c5:9d:b6:d9:12:f4:8a:ba:
73:29:bd:4f:40:ae:d6:14:ed:ca:84:30:1d:82:fa:e4:de:38:
f1:57:95:79:da:39:00:e9:96:c6:f2:ea:49:15:74:85:d2:70:
c8:e5:c1:61:24:1c:15:bc:9d:19:19:7f:01:ba:7d:54:e7:5a:
56:18:eb:72:2a:f2:23:fe:c1:c7:4b:5e:02:4d:c5:9b:97:b1:
d2:d3:a8:3c:81:58:20:b1:ca:ec:f1:a6:5a:32:03:1e:69:47:
cb:1a:0e:24:1c:b0:13:12:97:a4:1f:1e:de:05:97:0e:4e:6b:
a2:72:24:95:a9:65:20:ac:e1:fa:7a:d2:f4:72:f0:76:1e:4b:
77:7f:42:1e:c5:4d:1d:4e:13:d3:24:3b:8a:aa:d3:0c:e9:a8:
12:4a:93:ae:50:8e:31:95:af:8f:5e:49:1c:a0:03:ea:e6:be:
fd:22:4f:3c:fa:90:ac:e1:f9:89:28:75:c8:5d:2b:49:58:a3:
63:64:0b:4b:22:71:f2:4b:0d:be:6f:4e:d7:fe:bd:08:22:83:
89:b3:b0:33:0d:0a:cd:34:dd:34:b5:ee:ed:00:2c:e2:a6:24:
33:56:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org