Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qO0loYrtxp01AIo9csIVWhznOVQ.roa
File: qO0loYrtxp01AIo9csIVWhznOVQ.roa (raw, json)
Hash identifier: STf+Lyzd00Rd54E49rk/MbSF5Cwe3vpwI2F3O/nuUxA=
Subject key identifier: A8:ED:25:A1:8A:ED:C6:9D:35:00:8A:3D:72:C2:15:5A:1C:E7:39:54
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48ACC1634296B6EA97790CF71F82B95
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qO0loYrtxp01AIo9csIVWhznOVQ.roa
Signing time: Tue 24 Jan 2023 16:09:39 +0000
ROA not before: Tue 24 Jan 2023 16:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142597
IP address blocks: 2a0e:b107:15aa::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:cc:16:34:29:6b:6e:a9:77:90:cf:71:f8:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8ed25a18aedc69d35008a3d72c2155a1ce73954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:c0:b6:8b:ce:5f:5e:dc:eb:aa:da:25:ad:
3c:f3:cc:3b:cd:b8:cf:7a:71:ef:ec:46:07:58:d0:
a4:60:fe:c5:fe:43:b6:2e:65:30:90:f1:98:12:c0:
90:b3:84:75:1c:01:4c:25:14:12:07:d3:9c:ae:df:
e9:60:e8:4e:7c:13:b6:ca:0d:54:bd:5a:f6:63:5d:
d6:61:7b:fd:95:5d:25:ff:d4:c2:5b:d4:2e:9a:30:
5c:12:d9:f7:8f:d9:9d:60:2a:3f:95:f0:6b:07:4d:
7d:f7:36:31:dc:89:16:9d:62:2a:55:f4:bf:fd:fb:
b9:a6:14:91:89:d3:0a:40:df:ac:00:f7:67:39:7a:
69:59:5e:c0:77:17:85:2c:62:91:d1:9c:be:53:77:
5c:b8:55:ee:86:d6:7d:bb:03:e6:88:7b:23:d2:1d:
14:83:62:5d:d2:cc:17:bb:aa:4d:dc:f2:b8:26:ad:
63:52:50:e3:30:7c:7c:f3:c3:16:d0:22:7a:89:45:
5f:a0:c4:ba:4e:9a:39:03:e0:24:62:79:2e:76:48:
9d:33:f8:fe:91:4d:a1:0e:49:01:5a:a4:14:36:19:
6f:fe:75:b6:22:a5:89:36:1b:2c:12:04:79:67:ec:
fc:87:82:39:31:79:9f:12:53:81:cf:72:3b:dd:ff:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:25:A1:8A:ED:C6:9D:35:00:8A:3D:72:C2:15:5A:1C:E7:39:54
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qO0loYrtxp01AIo9csIVWhznOVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:15aa::/48
Signature Algorithm: sha256WithRSAEncryption
9d:f9:0e:55:7a:60:8f:c3:43:ff:68:12:55:72:0d:f2:80:36:
d9:de:17:e2:72:c6:ed:0b:cb:4b:f2:1b:bf:71:d9:f6:1c:d6:
4e:73:df:1c:d5:78:f7:e7:60:b2:de:c4:87:d4:09:89:3e:c8:
c8:0f:1f:13:84:20:0b:16:3d:35:27:83:f7:7c:cc:03:ea:9d:
64:7b:4f:a6:36:fc:b9:70:99:6b:b3:f4:9e:a0:81:3f:f9:58:
10:a2:76:a9:30:64:a2:cd:5a:03:a9:7c:88:ed:f9:fc:0c:3a:
95:d7:08:56:93:2b:e6:5b:c8:ed:2f:41:32:2b:35:2d:e8:67:
eb:70:f3:16:57:32:5d:e8:0e:15:87:dd:67:ad:b3:77:ce:48:
a6:f2:b1:59:d4:37:4b:70:10:7d:fb:c1:59:6e:0c:da:b4:05:
9b:8e:d7:46:65:c9:78:db:56:84:87:df:a5:fe:e7:c5:cf:6b:
c7:c6:37:7e:0c:55:51:6e:20:0a:5b:0e:c0:10:d4:05:51:4e:
52:74:e8:dd:f8:a4:82:01:a3:5f:1b:9d:58:17:ac:47:61:04:
0a:4f:d9:f5:e7:3a:02:b3:2b:9b:45:bc:f3:c8:73:de:f4:db:
5a:02:b1:81:02:fa:d6:24:c0:5a:f3:53:f6:ac:35:37:e0:cd:
8c:18:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org