Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/te0l1ZZz6AF_6644qZtsUEmi6BQ.roa
File: te0l1ZZz6AF_6644qZtsUEmi6BQ.roa (raw, json)
Hash identifier: f/wVtHJxdxxtraBaHNGD898+aag/263K7aBfpN5OOhg=
Subject key identifier: B5:ED:25:D5:96:73:E8:01:7F:EB:AE:38:A9:9B:6C:50:49:A2:E8:14
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185D32C10D12BDD2F56B26A17F480F81E57
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/te0l1ZZz6AF_6644qZtsUEmi6BQ.roa
Signing time: Sat 21 Jan 2023 07:12:38 +0000
ROA not before: Sat 21 Jan 2023 07:12:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213367
IP address blocks: 2a0e:97c0:6e0::/48 maxlen: 48
2a0e:97c0:6ee::/47 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:2c:10:d1:2b:dd:2f:56:b2:6a:17:f4:80:f8:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 21 07:12:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5ed25d59673e8017febae38a99b6c5049a2e814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c2:80:5d:35:6c:a6:67:54:12:5f:c1:9f:bd:
d0:51:42:c4:79:63:29:e9:1d:4c:42:e4:0e:0d:ac:
13:e6:3b:e8:27:0f:b4:79:dc:5a:2e:05:cf:7e:7e:
fd:a6:a7:90:25:ad:67:dd:3d:65:cf:0e:94:61:10:
d0:e8:40:0d:2c:0e:39:2b:79:95:f4:85:cd:ae:b8:
d8:7f:43:5e:1c:13:f5:fe:1c:06:40:3c:61:8d:f0:
b2:4d:26:b1:9b:48:1d:42:0b:73:b3:aa:e1:6f:19:
6c:6f:21:f9:19:4e:c1:5a:2d:0c:e1:13:32:ca:84:
89:70:6a:02:00:9a:26:3a:4e:e1:a4:9a:ea:7c:c1:
ad:33:91:a5:ab:87:32:e6:c0:94:a9:6b:35:b7:c2:
3f:0b:4b:af:15:41:9c:8c:15:ae:06:fb:2b:ee:d2:
bb:c4:04:eb:82:2a:d7:7e:ca:3f:dc:31:58:72:fa:
47:9e:43:42:e0:db:1f:58:81:21:b1:3d:16:76:ee:
4f:f8:73:e0:fe:dc:f1:58:1c:40:3d:38:f7:89:54:
e3:b8:3d:ce:76:61:b2:5d:bc:08:bc:08:1b:ab:c3:
32:48:c5:e7:c0:15:8e:8b:8e:01:db:8c:d6:b8:11:
b9:0c:7f:c0:de:7a:8e:be:5c:c3:54:7e:23:cc:81:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:ED:25:D5:96:73:E8:01:7F:EB:AE:38:A9:9B:6C:50:49:A2:E8:14
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/te0l1ZZz6AF_6644qZtsUEmi6BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:6e0::/48
2a0e:97c0:6ee::/47
Signature Algorithm: sha256WithRSAEncryption
a6:99:f6:6e:09:42:13:9f:49:31:1b:ae:d5:69:9d:96:b3:5d:
7c:7b:bc:26:bd:1c:f2:1f:74:21:8c:47:23:3f:89:19:16:99:
3c:31:97:fd:77:f8:6b:bb:f9:1c:8c:77:29:49:22:1b:fb:89:
21:b8:99:b2:e4:c4:3d:0e:11:b7:6e:a2:75:44:fd:d0:2a:26:
08:58:79:08:a8:3c:da:ed:25:c3:30:de:a2:1f:13:7a:86:a1:
b5:0f:e4:5f:de:6c:08:79:02:06:51:54:0e:47:8e:1f:fc:0b:
e5:30:74:28:21:d8:37:0f:21:37:dc:61:1a:07:98:6c:32:f7:
95:30:50:0e:68:fd:62:60:c3:70:b9:42:96:cb:ee:c8:87:85:
ce:88:61:b4:f8:5d:1c:51:cb:d0:32:02:f4:54:27:01:dd:bb:
50:8c:30:90:38:75:4d:09:70:6c:3d:69:64:09:8f:27:86:1d:
6b:c8:ef:c7:40:1a:0a:20:65:5b:2b:38:c0:6d:65:c3:84:0e:
0d:06:ff:06:44:f8:53:85:ea:f3:fc:95:0d:fa:ee:17:8b:8c:
15:d7:f4:d0:75:bd:0a:bc:dc:eb:8f:78:63:49:9a:0a:da:e9:
71:9d:1f:60:d7:10:3e:2f:6a:f0:de:f7:a7:56:e9:45:e6:54:
ba:ff:00:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:52 2024 by rpki-client on console-ams.rpki-client.org