Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sasU0SYT890O8IvnSKattmv6xg0.roa
File: sasU0SYT890O8IvnSKattmv6xg0.roa (raw, json)
Hash identifier: Wn9SOhbxsJeZQLpKXqpvIAw0tKbOC7+FeJowrxkL+7c=
Subject key identifier: B1:AB:14:D1:26:13:F3:DD:0E:F0:8B:E7:48:A6:AD:B6:6B:FA:C6:0D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E80A49EF7980E955B39215FB5AF832
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sasU0SYT890O8IvnSKattmv6xg0.roa
Signing time: Mon 02 Jan 2023 05:15:33 +0000
ROA not before: Mon 02 Jan 2023 05:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211622
IP address blocks: 2a0e:b107:1070::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:0a:49:ef:79:80:e9:55:b3:92:15:fb:5a:f8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1ab14d12613f3dd0ef08be748a6adb66bfac60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:22:9c:2e:b6:a2:81:1b:a1:e3:e5:47:2d:
d2:11:d7:48:bd:8e:e2:ee:31:06:51:d5:15:c3:0b:
f2:3d:35:98:2b:38:ff:fc:de:88:62:e0:e8:a7:46:
91:ea:0c:db:2b:29:4a:af:47:f5:41:d5:1e:b6:60:
14:b1:e1:f4:97:41:cd:18:1b:25:88:d8:1b:42:53:
46:7b:be:70:7f:f4:ab:04:29:ba:7b:e5:65:9a:4e:
75:3c:80:4f:ff:42:80:5d:05:da:f2:e7:5c:92:bf:
8e:6b:63:da:ac:b1:44:1a:52:a4:24:0b:ac:e0:f0:
b2:1f:65:ae:4b:2a:4c:25:e7:24:2d:29:41:c9:dd:
a1:e3:2b:fa:f7:ae:76:9b:6b:d4:2e:59:f6:23:d1:
c5:c0:b3:10:13:fa:f9:43:8d:15:1f:f2:47:fe:15:
77:f3:4f:dc:18:e6:8c:cb:ef:16:20:71:9d:2b:23:
0a:a3:ae:2c:54:19:08:05:65:8f:85:cd:6c:38:ed:
03:d7:c2:fc:a4:cf:ab:7d:80:ba:30:3e:15:48:e5:
14:c4:fd:23:d7:eb:50:71:6f:36:4d:9d:07:23:b6:
fb:47:d9:c8:e8:f9:9c:a6:e9:1c:14:2e:cd:b2:21:
05:28:b8:a9:9a:32:8b:57:72:ec:da:1f:0f:50:4c:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AB:14:D1:26:13:F3:DD:0E:F0:8B:E7:48:A6:AD:B6:6B:FA:C6:0D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sasU0SYT890O8IvnSKattmv6xg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1070::/44
Signature Algorithm: sha256WithRSAEncryption
7e:95:b9:41:16:15:fc:aa:86:74:a5:dd:79:61:eb:71:a9:a0:
a3:80:0d:bc:0f:a8:73:50:d1:27:12:4c:3a:41:51:8b:3e:c7:
17:b6:6a:87:1e:3b:8e:90:35:46:77:fb:52:87:df:85:8a:db:
a0:50:d4:1c:f7:54:b4:48:dc:44:f3:68:38:98:4c:4d:36:6d:
dd:69:2e:1b:f0:d9:93:83:5a:06:87:7e:35:41:f6:24:8e:e6:
4e:a4:63:77:59:6c:c9:db:08:2c:09:8d:9f:60:10:7f:aa:1e:
cf:ac:6a:05:2f:54:9e:d3:84:c5:0d:b5:72:51:fe:f5:00:3b:
6c:4c:72:30:64:89:27:9b:42:c3:94:d4:3a:53:c0:fd:39:8f:
21:76:f9:82:5a:f1:20:6a:84:a6:56:f2:f7:30:28:b2:89:d5:
d2:13:80:b4:a2:9a:ea:0b:da:ca:58:a3:a5:ba:9e:b6:8c:58:
28:dc:e2:5c:ef:c4:21:4e:40:8d:8d:35:76:0a:31:1b:bb:c6:
e8:6f:6a:65:bc:32:53:c4:01:ba:02:2d:9b:e9:7f:fa:78:6b:
97:b8:7e:27:c2:97:1a:72:49:29:13:6c:00:50:50:af:3d:60:
ab:13:94:c7:3e:5e:53:5f:ea:fb:80:9b:4a:7e:60:c8:0e:64:
9b:4a:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-fra.rpki-client.org