Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/reIu7PS3EY9EzrkHl9io4bPNb1Y.roa
File: reIu7PS3EY9EzrkHl9io4bPNb1Y.roa (raw, json)
Hash identifier: qUvCU3eUIGOd3biLdg33ZBm9HocxIlorVOxnnaes/sw=
Subject key identifier: AD:E2:2E:EC:F4:B7:11:8F:44:CE:B9:07:97:D8:A8:E1:B3:CD:6F:56
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7F47A92F7BD17533332E3253D3306
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/reIu7PS3EY9EzrkHl9io4bPNb1Y.roa
Signing time: Mon 02 Jan 2023 05:15:27 +0000
ROA not before: Mon 02 Jan 2023 05:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210903
IP address blocks: 2a10:cc44:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:f4:7a:92:f7:bd:17:53:33:32:e3:25:3d:33:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ade22eecf4b7118f44ceb90797d8a8e1b3cd6f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:fa:74:bf:e5:a8:ab:f7:05:67:19:c6:0c:
4d:3b:19:eb:a8:0f:7c:7c:66:37:05:ea:e2:53:4d:
a2:ff:85:a8:94:30:a7:1d:b6:2d:e3:f7:29:ea:c8:
46:d7:ca:99:e2:29:71:c4:89:bb:b0:ae:89:8d:c7:
d7:ca:b6:26:33:73:e6:85:97:39:b8:a4:83:85:a2:
93:ce:c9:cf:40:46:9f:52:f4:41:75:59:64:e5:60:
92:c2:7d:cb:a9:24:79:6f:4e:65:b6:d2:34:d4:52:
88:af:54:3e:d9:4b:21:b0:7a:60:ad:db:da:27:8f:
8f:0d:91:c3:dd:5a:8d:45:ff:80:ee:3b:f7:d6:bb:
42:4d:b3:18:8c:7b:08:ab:9e:f1:71:e1:42:c1:aa:
7e:5d:4a:ad:6e:94:dc:bd:35:27:94:a5:18:3f:d6:
bf:0c:4c:54:6a:ba:50:fe:8b:b7:d7:8a:2c:c5:fc:
50:cd:7a:6d:8b:ce:b9:f1:c5:02:c4:0c:c4:d0:92:
34:2f:ca:33:d0:ce:17:41:30:f9:d1:28:22:06:5d:
17:07:b5:ab:65:8e:fc:11:b0:5e:5d:25:52:0d:c0:
fd:ae:ee:c5:a1:96:0a:1d:4f:70:5b:d1:15:83:1c:
20:2a:8c:5d:b7:af:4e:03:73:e0:72:05:d9:c4:b3:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E2:2E:EC:F4:B7:11:8F:44:CE:B9:07:97:D8:A8:E1:B3:CD:6F:56
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/reIu7PS3EY9EzrkHl9io4bPNb1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:100::/44
Signature Algorithm: sha256WithRSAEncryption
29:15:50:26:16:81:34:d3:96:ef:79:ed:c3:28:b7:6d:3e:9a:
3f:55:a3:d4:fb:65:c6:58:3c:89:4f:e2:10:af:9c:8e:9e:04:
32:ef:1b:0b:2b:0c:b9:2c:a8:6e:1e:4f:58:62:22:78:b9:dc:
cf:41:30:67:39:6f:b5:d3:0c:36:20:f6:9a:c1:57:7f:54:09:
84:2a:e8:12:85:61:b1:99:54:e8:91:bf:d4:39:15:1c:17:24:
ef:9b:f9:60:3f:03:ac:ab:65:e8:24:88:48:7a:9c:02:d2:8e:
fe:26:be:8d:b8:ee:a6:c8:89:ae:ec:76:17:c2:0c:1e:43:c4:
46:a2:80:86:66:eb:ae:b1:99:bb:44:07:dc:9c:dc:29:d7:fe:
e8:7f:d9:09:2f:ec:47:a6:02:0f:a9:07:6d:5d:05:9c:a9:28:
67:5a:47:8e:f2:de:2a:22:7c:4e:81:07:85:9b:d1:d2:2d:56:
2e:6f:66:1a:01:1d:a0:66:b2:6c:53:7c:d5:b7:21:5a:4d:66:
1e:43:b1:0d:b0:55:40:30:4f:4d:9c:8b:9a:e5:b7:e9:78:3b:
fd:77:f5:34:34:54:52:1f:84:ee:71:90:fb:80:11:b8:0d:5d:
3b:6e:38:0a:cd:dd:cd:2e:5d:10:00:b6:d0:b7:da:53:6d:cb:
75:26:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org