Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rYdAvrbuGIB5ZnmDfhz-gw5eKiY.roa
File: rYdAvrbuGIB5ZnmDfhz-gw5eKiY.roa (raw, json)
Hash identifier: 49ypCmg8FBzkhCjq1jLeO0plC6szfa2zOmf58g4ukpw=
Subject key identifier: AD:87:40:BE:B6:EE:18:80:79:66:79:83:7E:1C:FE:83:0E:5E:2A:26
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7C3BC9A7588A56DE09B1684AC4AF8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rYdAvrbuGIB5ZnmDfhz-gw5eKiY.roa
Signing time: Mon 02 Jan 2023 05:15:15 +0000
ROA not before: Mon 02 Jan 2023 05:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205152
IP address blocks: 2a0e:b107:e0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:c3:bc:9a:75:88:a5:6d:e0:9b:16:84:ac:4a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad8740beb6ee1880796679837e1cfe830e5e2a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c5:b0:16:77:8b:bc:58:63:a4:76:1b:61:be:
3e:3b:c1:10:d0:b5:70:86:37:7e:38:54:8c:98:87:
40:ae:4b:e6:ff:5f:6f:27:3f:82:63:78:ca:e6:7c:
ef:5d:95:c9:18:bd:6c:7b:1c:2a:f7:48:0b:e2:61:
f9:7e:86:a9:d1:15:48:a3:e0:69:31:39:ea:e0:ba:
66:30:aa:e0:10:f8:2f:51:50:fd:55:76:4d:b7:ab:
8e:e8:0b:b8:55:ea:bd:63:5a:35:a6:07:86:24:e8:
8b:43:37:c7:ca:c8:8f:ee:23:03:2d:98:cf:df:23:
66:16:c0:09:d8:a6:b6:70:74:50:47:3a:a6:63:fc:
e7:74:42:ee:1d:fe:90:ff:41:69:2b:08:cd:b8:74:
68:b3:06:7d:c2:7a:b1:8f:1a:3f:03:cc:49:be:8f:
25:6f:00:f7:8b:ba:01:6e:c1:5d:bc:5e:56:c2:e1:
98:a5:4e:74:0b:77:0e:8e:4b:73:e3:c5:78:26:27:
de:8a:37:20:24:ef:2f:9c:a4:32:40:9b:0b:7c:16:
b8:c4:02:42:88:e5:9b:3b:6c:46:52:fb:e1:8f:66:
8e:40:51:5a:c3:06:38:9b:cc:7a:f0:62:7a:12:15:
86:8f:b5:b0:b8:e5:65:04:ef:74:02:d0:75:77:cb:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:40:BE:B6:EE:18:80:79:66:79:83:7E:1C:FE:83:0E:5E:2A:26
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rYdAvrbuGIB5ZnmDfhz-gw5eKiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:e0::/44
Signature Algorithm: sha256WithRSAEncryption
7a:d2:7b:d6:2b:80:44:5b:e4:91:49:6d:4f:6b:ca:0f:17:7e:
ce:be:24:d0:92:c9:0c:44:44:79:d0:86:6f:96:d0:02:54:e1:
82:eb:05:00:19:dd:02:63:95:d6:98:97:42:6c:18:bb:05:ab:
cf:e0:34:31:41:52:10:d7:57:03:a5:67:a6:d9:de:05:f9:e1:
dc:b0:84:0d:48:ac:a0:cb:bf:6e:ff:88:4c:e8:89:1d:7b:85:
b2:5f:e8:ab:38:c9:d7:65:63:81:19:4e:7f:ee:99:fb:a1:44:
83:68:13:48:d9:a9:33:36:19:f3:59:d3:be:d5:3d:25:0d:dc:
d1:19:36:f8:ea:e6:75:28:27:f6:3b:a0:27:b8:07:d0:cc:b2:
aa:b1:af:87:71:7e:9b:38:04:35:be:40:2e:ad:a1:db:4e:6a:
f7:d9:57:49:b9:53:60:80:7f:b2:78:4b:b6:6c:bd:03:b0:0c:
03:8d:93:9f:ca:9a:81:2e:c4:ad:01:47:12:45:1c:95:58:50:
ef:40:f2:a3:cf:8d:8a:d7:fe:fe:4e:81:40:e9:30:6e:7d:87:
f9:5f:b6:88:e0:8f:aa:90:07:07:3c:51:ee:70:52:78:ca:6a:
1c:07:c8:33:8a:12:97:32:93:38:e1:e8:84:05:1b:61:e8:e9:
5b:96:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-fra.rpki-client.org