Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rtm266Itb4qSMxNGroxnzUr_t68.roa
File: rtm266Itb4qSMxNGroxnzUr_t68.roa (raw, json)
Hash identifier: z8QvDEyygzFmoH3zNTyzoh2W8oiQYgpQ7NFVDSVPM2Q=
Subject key identifier: AE:D9:B6:EB:A2:2D:6F:8A:92:33:13:46:AE:8C:67:CD:4A:FF:B7:AF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48B11F7DBA082F8303A608125753C99
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rtm266Itb4qSMxNGroxnzUr_t68.roa
Signing time: Tue 24 Jan 2023 16:09:57 +0000
ROA not before: Tue 24 Jan 2023 16:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213366
IP address blocks: 2a0e:b107:5c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8b:11:f7:db:a0:82:f8:30:3a:60:81:25:75:3c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aed9b6eba22d6f8a92331346ae8c67cd4affb7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:d6:a3:ac:63:d9:2f:81:3e:72:d8:87:6a:
e1:23:88:ec:49:ed:2f:1d:b3:6e:ae:1b:75:a5:e3:
3c:05:e2:9f:ce:67:a7:47:54:0c:ec:86:fa:1b:52:
46:95:28:c5:6b:d6:1a:ba:26:bb:bb:f7:b8:67:32:
50:b2:fc:cd:4e:20:7f:ab:ee:ef:6c:38:b2:14:a8:
81:10:80:fc:e7:df:79:ce:45:a5:2b:99:a3:a8:6b:
dd:38:69:80:b9:09:6c:86:88:53:55:5f:06:9d:94:
4d:5e:17:57:72:51:5e:08:10:e1:35:15:04:b5:43:
77:3b:55:bd:66:97:dd:0a:72:95:a5:ff:0f:35:04:
6d:05:de:a9:3b:2a:7a:60:82:a8:cc:17:1c:32:5d:
3a:d2:cd:30:1b:f6:0e:bd:8d:20:01:2b:78:4c:66:
f3:be:a4:dd:14:0f:a1:68:14:e0:0a:f5:18:7e:5d:
b0:f2:f4:55:1c:53:65:17:0b:27:b1:ca:95:15:a3:
5f:d2:b0:41:d1:70:7c:26:fc:4b:31:52:79:e8:4b:
40:a3:ee:ea:db:76:bb:69:dd:92:d4:77:75:54:e7:
48:98:b5:71:d7:59:cb:6d:41:2a:e7:6b:a5:29:32:
12:ad:a1:e5:99:43:57:5d:a1:e0:50:ef:ae:b7:9d:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D9:B6:EB:A2:2D:6F:8A:92:33:13:46:AE:8C:67:CD:4A:FF:B7:AF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rtm266Itb4qSMxNGroxnzUr_t68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:5c0::/48
Signature Algorithm: sha256WithRSAEncryption
46:45:b3:ee:c2:86:5c:ab:9e:ab:60:19:61:7f:6e:73:d7:9b:
91:4c:24:b6:14:a9:98:fc:6f:45:42:cc:64:34:d9:16:77:d3:
2e:77:55:78:01:a8:80:c9:42:f7:81:1a:b3:a8:e6:95:a0:dc:
4c:3b:d3:38:50:ac:ef:21:0e:8a:72:00:1c:80:23:cd:48:ca:
cc:ba:01:01:98:f9:dd:a3:de:25:b1:28:e6:1f:c3:a9:42:e2:
dd:7b:ea:9c:5c:75:69:8b:8b:7e:33:57:83:4c:c6:2c:ac:cf:
ce:93:1e:11:81:9b:6b:ef:8c:5f:ee:a5:1f:3d:37:96:11:c2:
c9:b0:03:7f:73:35:4b:b7:f4:99:a6:bb:76:62:05:8e:6d:ed:
26:f5:45:b4:88:1a:94:81:8d:80:ef:5b:d0:ee:54:25:e7:8d:
50:8d:83:b4:30:77:9c:d6:37:a9:ff:a6:6d:25:79:d8:44:62:
29:1f:6f:a8:3a:01:e8:2d:e7:ff:e8:05:78:c2:74:f4:41:04:
11:61:79:6b:88:0a:28:77:20:9f:c8:ff:d5:1a:95:f5:65:e5:
fa:1d:75:2a:30:ee:59:c0:70:d0:bf:03:41:bb:61:d2:21:f7:
0f:e2:25:45:2b:17:69:bd:0c:ca:e2:1b:da:91:17:43:50:b4:
c6:f1:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:52 2024 by rpki-client on console-ams.rpki-client.org