Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sgVWf_IebvrwaWvkQTpRUYCYKFM.roa
File: sgVWf_IebvrwaWvkQTpRUYCYKFM.roa (raw, json)
Hash identifier: /51AcYBSGX825e4qi58C7hGyHIdptXT+r1LNEzIOwGg=
Subject key identifier: B2:05:56:7F:F2:1E:6E:FA:F0:69:6B:E4:41:3A:51:51:80:98:28:53
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7A553895139F0193D01E1550811BA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sgVWf_IebvrwaWvkQTpRUYCYKFM.roa
Signing time: Mon 02 Jan 2023 05:15:07 +0000
ROA not before: Mon 02 Jan 2023 05:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201412
IP address blocks: 2a0e:97c0:c70::/44 maxlen: 48
2a0e:b107:1cf0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:a5:53:89:51:39:f0:19:3d:01:e1:55:08:11:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b205567ff21e6efaf0696be4413a515180982853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:32:01:00:60:48:06:ad:75:6a:75:7a:04:
9f:64:de:a1:45:79:36:cb:1e:fb:03:5d:b5:fc:5c:
aa:be:46:a2:f0:a8:98:ce:89:72:78:ed:d2:be:b3:
8f:79:32:d8:8d:e2:93:e3:0b:73:ea:97:11:4f:f2:
95:f0:5c:89:00:bc:83:c0:00:a2:ea:da:d7:06:89:
67:5a:2d:b3:ca:2e:77:94:49:35:c9:3c:70:58:65:
d1:20:c4:80:8a:32:94:d7:7a:bd:0c:17:dc:46:dc:
5e:ea:19:ff:41:bf:9b:22:91:e8:af:ff:ac:71:ab:
43:96:10:1c:01:10:3a:cc:6c:52:78:2e:c6:5b:3d:
03:c3:d9:51:9a:cc:2f:5b:b4:20:2d:4e:1f:ac:7f:
d9:55:9f:3c:41:f8:f0:5a:46:80:25:43:e7:34:eb:
1d:0a:8f:1c:63:87:de:ae:ca:33:68:59:c2:55:ac:
3b:c0:01:6c:9a:d5:f3:e1:45:fd:72:a3:0d:8f:44:
07:de:5a:37:76:ce:2e:d2:2e:c2:bb:1d:f1:64:3c:
10:6f:da:cd:01:d4:75:b6:32:f0:8f:8c:2f:2e:c0:
53:51:20:d5:e5:41:2d:82:18:5a:98:60:5b:54:63:
a4:c9:f2:bc:a7:03:d6:5f:c9:13:fe:34:98:59:57:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:05:56:7F:F2:1E:6E:FA:F0:69:6B:E4:41:3A:51:51:80:98:28:53
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sgVWf_IebvrwaWvkQTpRUYCYKFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c70::/44
2a0e:b107:1cf0::/44
Signature Algorithm: sha256WithRSAEncryption
51:12:12:81:f8:18:e0:75:0a:41:e1:87:8a:db:88:ba:fb:f2:
ee:29:ea:d9:47:3b:9a:78:2e:99:fc:58:a2:82:b9:b0:87:34:
83:7c:28:9b:5b:ad:20:84:5c:8e:02:94:d5:71:e0:15:61:8b:
b6:5f:ee:c6:e9:f7:fb:d1:67:02:f6:5b:3e:4b:a1:da:2e:6d:
1a:09:1e:e1:39:59:0d:6f:6d:d3:8f:ee:d3:fe:af:8d:67:f0:
e6:80:8f:4f:f0:8f:f1:da:38:14:f1:fc:ae:cc:fe:5f:f6:12:
99:c1:ea:66:02:63:3d:33:ea:d3:96:c8:8b:a1:c6:94:7a:c9:
92:ab:46:f0:b1:67:c0:f1:20:3c:8b:85:5a:3e:c3:7b:11:52:
e3:79:f7:68:84:80:dd:d0:81:53:0f:c1:ea:cc:50:79:6c:0d:
6d:35:05:05:d6:fa:54:3e:05:79:7e:02:12:58:af:e2:74:86:
fc:1b:50:a1:c5:5e:fa:c3:70:f6:f2:e6:26:88:19:5d:9d:13:
7d:9d:1b:b6:2d:1e:d4:f4:b1:89:80:e0:d9:a5:bb:8c:ff:92:
e3:42:e1:71:1b:92:99:e4:c6:43:c8:c6:32:6f:f1:29:a6:89:
30:fa:09:ac:b4:b3:2c:43:35:21:0b:0b:c1:da:1c:1b:04:09:
ed:d8:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:04 2023 by rpki-client on console-ams.rpki-client.org