Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tVz6Sr7Ee5HiGJJxK1K1NDJnPuk.roa
File: tVz6Sr7Ee5HiGJJxK1K1NDJnPuk.roa (raw, json)
Hash identifier: /e3s8BNG1+g7Ba3vQwJPcsmJ2SuP0FVxpPSM+XpQVwg=
Subject key identifier: B5:5C:FA:4A:BE:C4:7B:91:E2:18:92:71:2B:52:B5:34:32:67:3E:E9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CAEC86827DD77132F8A269770E641C0D1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tVz6Sr7Ee5HiGJJxK1K1NDJnPuk.roa
Signing time: Thu 28 Dec 2023 04:56:58 +0000
ROA not before: Thu 28 Dec 2023 04:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 262185
IP address blocks: 2a06:de01:500::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ae:c8:68:27:dd:77:13:2f:8a:26:97:70:e6:41:c0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 28 04:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b55cfa4abec47b91e21892712b52b53432673ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:51:e4:d3:e7:5c:35:8f:89:81:a5:f7:44:
2e:b5:73:46:61:1a:ba:52:1a:8b:10:b0:7c:83:02:
93:e7:0b:48:f5:eb:11:e1:66:91:a0:1f:a1:95:3b:
03:f9:ad:b9:29:bc:19:19:fe:de:f1:3e:34:7f:4f:
89:54:aa:5d:4e:5f:23:53:57:3d:62:e5:f4:a1:dd:
ee:a2:ab:e6:10:4c:eb:b1:33:bb:11:5e:f8:37:27:
b4:f6:3e:5a:a3:fd:38:d4:58:12:6a:e5:07:bd:53:
ac:f2:d3:06:b4:f2:d0:43:41:6b:0b:b2:b6:79:97:
db:3a:78:d8:ad:6b:63:a9:54:c8:0b:1d:70:4f:34:
ca:da:7c:08:91:8a:38:bd:b6:53:e8:05:6e:77:34:
d2:91:4a:d9:3d:f1:f7:39:0f:c2:24:09:b6:b9:53:
de:a1:1d:10:55:ec:3e:69:38:90:3b:a4:b9:bc:a4:
cf:76:0b:d2:53:3d:16:bf:35:82:1d:e6:0b:19:cf:
f4:0c:65:71:29:0f:de:44:25:88:1e:22:79:7d:cf:
e4:4c:4d:b5:a3:d6:fe:f4:22:3c:3a:43:43:2b:50:
be:90:f7:46:24:6d:92:69:b2:c4:66:b7:ef:1a:37:
c2:0a:97:ac:17:3a:ca:10:cc:e1:e7:94:c6:ec:1d:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:FA:4A:BE:C4:7B:91:E2:18:92:71:2B:52:B5:34:32:67:3E:E9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tVz6Sr7Ee5HiGJJxK1K1NDJnPuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:500::/48
Signature Algorithm: sha256WithRSAEncryption
9e:89:05:c6:72:85:05:6b:d7:bf:e9:84:52:90:3e:f7:89:cc:
a3:64:db:90:bc:6c:6d:86:3c:f6:a1:00:93:7d:d7:4f:92:f2:
d7:e2:7f:1d:79:04:d6:9d:64:69:1a:c0:46:84:1c:b9:6e:39:
9b:a6:4d:04:ef:b0:e9:95:bc:13:8f:9e:2a:03:12:c9:4d:ee:
e2:81:43:79:10:3c:4e:93:b5:7e:3d:df:f6:7c:0a:4b:3a:1d:
1c:a1:8f:6e:ee:3c:60:ab:85:67:91:40:df:f5:3d:01:71:3f:
9f:97:bc:cd:3f:7b:b1:db:e6:b6:85:b3:b8:e9:32:69:62:a5:
61:23:d7:63:6a:d1:bc:15:74:e4:aa:69:a9:f1:5f:3b:e6:2a:
39:d0:fc:e0:ac:33:85:b2:a7:b0:a6:02:6e:97:42:09:9e:e3:
36:9f:93:f8:bd:1d:ef:9c:45:18:dc:31:2d:83:cb:36:dd:61:
b5:7c:53:8a:d8:51:25:02:ca:22:48:88:05:89:7a:63:74:0c:
be:ac:74:fb:5c:64:52:73:0e:22:bd:cf:6c:0f:58:a4:60:f8:
20:d5:10:37:49:20:af:29:b3:82:78:48:d8:bd:9c:61:87:d9:
1f:4e:60:bf:5e:13:90:18:a7:cf:e5:ae:da:89:fb:9b:5c:7c:
1b:83:79:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org