Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sKzaL1YROUeFDqiFGl2DrFZVZl0.roa
File: sKzaL1YROUeFDqiFGl2DrFZVZl0.roa (raw, json)
Hash identifier: yty7regdFnEojb64Wf0W4uRO0jdjKMNU+NTg779x2JY=
Subject key identifier: B0:AC:DA:2F:56:11:39:47:85:0E:A8:85:1A:5D:83:AC:56:55:66:5D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189B030FCAD23A5EAC5C66EE70542B39D6B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sKzaL1YROUeFDqiFGl2DrFZVZl0.roa
Signing time: Tue 01 Aug 2023 08:22:27 +0000
ROA not before: Tue 01 Aug 2023 08:22:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:b107:5d0::/44 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc3:ccca::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a10:ccc3:ccca::/47 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:30:fc:ad:23:a5:ea:c5:c6:6e:e7:05:42:b3:9d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 1 08:22:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0acda2f56113947850ea8851a5d83ac5655665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:33:9e:7a:75:44:3e:01:d0:33:92:1d:31:
9a:58:7d:9a:7f:42:fe:f0:90:56:20:0e:f5:9e:23:
15:70:1b:9d:76:7f:e1:0f:a9:d9:33:ea:ae:2c:7c:
30:98:73:bc:66:ec:b1:c2:13:56:6e:46:5b:93:9b:
3d:c0:04:d6:db:ef:7e:07:1e:f3:2e:82:c4:72:7c:
aa:c7:2c:a6:8b:de:ba:1b:30:09:a5:d1:c8:5f:8b:
50:05:c3:dc:e0:c5:ef:5b:46:77:17:d9:3d:06:b7:
24:9d:ae:e2:26:3f:31:40:c2:f5:f7:c4:81:46:24:
c5:0c:05:e0:18:d4:b8:b1:41:0b:99:b9:17:5e:bc:
a6:5c:af:cb:13:45:86:f9:23:7f:45:45:c0:fc:6d:
87:ed:c1:7a:20:dd:9a:62:74:f0:87:2f:10:c5:8a:
ec:85:fd:7d:39:dd:f7:de:69:a4:c4:2c:ab:9f:40:
2b:d4:d5:cb:db:6a:ff:29:a9:35:ba:82:10:02:09:
cc:d5:fd:75:e9:97:fc:9e:b3:26:ff:ae:71:7c:8b:
d1:9b:30:ea:55:24:8e:98:31:cd:54:8e:da:f4:30:
81:e9:6c:08:1a:f9:7a:13:f3:81:94:96:c4:87:fc:
98:e3:86:3e:a7:05:36:fb:48:17:7d:49:b4:fa:9a:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:DA:2F:56:11:39:47:85:0E:A8:85:1A:5D:83:AC:56:55:66:5D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sKzaL1YROUeFDqiFGl2DrFZVZl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:5d0::/44
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a10:ccc3:ccca::/47
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
cc:75:0b:61:73:aa:70:ca:df:f0:f0:36:3f:c0:54:4c:02:80:
c0:23:09:87:12:75:5e:1b:59:b3:af:c2:22:ee:d8:a2:f5:f2:
17:55:e3:ac:f0:3f:90:2a:0e:6b:2d:3d:22:04:f3:e3:0d:11:
a1:bb:1e:c0:5d:e2:10:70:e7:3c:86:cb:59:ad:f0:f1:9c:f5:
ab:7c:82:47:d6:c4:5a:8f:b8:52:28:e0:e5:25:bb:21:69:2c:
94:28:56:2e:ff:43:8f:ea:ae:2c:6d:6f:01:c3:c1:a4:81:22:
2c:cc:da:e0:03:ff:5f:de:93:19:09:01:91:b3:55:40:09:bc:
90:e7:83:dd:78:1e:d1:bb:19:60:02:3b:c6:c4:96:83:1e:ae:
2b:88:6a:37:f5:01:ee:71:e6:4e:54:85:a5:75:21:f9:76:8b:
d1:60:6c:ea:12:20:39:43:2a:7b:30:a4:03:d7:f5:14:7a:50:
14:e9:0d:b2:f3:82:84:27:98:e2:7b:e6:0e:01:8a:56:d9:e3:
bd:68:d6:7e:61:a0:ef:85:28:b3:e2:ac:f8:f3:cc:94:27:ec:
c8:c9:5d:6d:3a:9a:5c:83:cc:03:53:f5:5b:d2:e5:c3:89:81:
c3:2b:bc:ee:6f:36:b7:10:f8:7e:b4:9d:b1:81:81:8d:81:89:
9e:ec:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 16:53:11 2023 by rpki-client on console-fra.rpki-client.org