Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tqbxjBpG47VxCy9027ytew-o-ec.roa
File: tqbxjBpG47VxCy9027ytew-o-ec.roa (raw, json)
Hash identifier: +oMl5TRSTsFEIYApEMom41Vgb84RoM5RiAU8xhmv19s=
Subject key identifier: B6:A6:F1:8C:1A:46:E3:B5:71:0B:2F:74:DB:BC:AD:7B:0F:A8:F9:E7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01868E950363221D3A0978E544E932025085
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tqbxjBpG47VxCy9027ytew-o-ec.roa
Signing time: Sun 26 Feb 2023 16:36:15 +0000
ROA not before: Sun 26 Feb 2023 16:36:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210738
IP address blocks: 2a0e:b107:1c81::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8e:95:03:63:22:1d:3a:09:78:e5:44:e9:32:02:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 26 16:36:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6a6f18c1a46e3b5710b2f74dbbcad7b0fa8f9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:ff:91:4d:f2:15:80:54:56:6f:dd:c0:ae:
63:a5:3c:4f:93:bf:32:2c:49:5f:0a:5c:6d:11:ed:
94:33:8c:c3:48:ff:81:79:58:b2:2e:f4:a6:ea:9c:
c1:fe:70:7d:53:34:e3:ad:15:c2:7e:57:2d:ac:62:
15:64:50:1f:77:7e:04:6d:a9:f2:6e:e5:09:8e:ba:
29:3a:6e:8f:f6:34:6b:70:de:9f:3d:f6:67:1b:6e:
87:64:a1:33:eb:a9:c7:7c:3f:50:b5:cb:f8:01:20:
19:df:71:29:e2:a3:c6:1d:01:b7:4f:6c:66:d1:98:
81:f7:fa:44:ba:78:ae:bc:4f:9a:33:8c:62:ba:69:
bb:65:26:25:d3:5b:4a:d6:95:fa:0a:e3:10:92:86:
bf:55:78:44:82:2a:27:0e:bb:95:69:7b:67:b4:76:
db:e2:d3:20:25:29:ed:1d:48:6a:2e:74:d6:08:2a:
b4:6a:3a:8b:55:41:60:bb:4d:4d:0f:7a:d7:74:91:
b3:1f:3b:a3:cb:3b:26:7f:b5:44:21:66:1b:c1:06:
7c:18:e7:0a:99:1a:5e:a1:31:9f:65:ff:e5:6e:2d:
c9:fe:a6:65:aa:6b:c6:65:db:19:ea:e0:e0:03:9b:
47:ab:db:a6:58:4c:d1:0b:ac:b0:1d:e5:e1:16:56:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A6:F1:8C:1A:46:E3:B5:71:0B:2F:74:DB:BC:AD:7B:0F:A8:F9:E7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tqbxjBpG47VxCy9027ytew-o-ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c81::/48
Signature Algorithm: sha256WithRSAEncryption
38:29:58:e0:cc:58:69:aa:ea:9d:b6:33:c4:bc:fa:f6:62:72:
8d:23:d1:ef:13:81:a8:35:96:e3:ae:bc:d1:e4:61:b2:ad:12:
ee:51:e4:6a:0e:a6:8a:a3:db:01:f0:83:ca:16:d4:4f:dd:54:
18:a6:5f:61:0c:76:61:d5:45:e8:43:f7:52:a6:42:bf:68:11:
22:94:e0:a1:20:41:a2:47:c9:e0:0f:8c:ae:9e:fc:59:38:7b:
19:96:24:94:38:cc:5c:28:e1:91:bc:46:3c:93:89:5e:e0:e7:
71:57:f6:71:29:c7:bd:89:1d:36:bc:66:ae:18:47:a5:02:bd:
64:8e:2d:98:7c:92:8f:c4:ed:9c:b7:24:60:6a:88:45:5b:c0:
a0:a9:da:60:69:44:c2:fa:b0:f4:7b:51:2a:b6:f3:7e:b1:48:
0b:1b:58:24:e8:3a:6f:95:e7:7d:b6:6f:4f:12:c7:c7:8e:f5:
b9:ac:1a:8d:3d:8c:8d:9a:9e:54:fd:e3:97:10:4e:be:94:95:
e9:15:dd:25:43:36:00:60:2c:94:6e:8b:4b:37:fc:5c:d1:b8:
85:79:17:dd:09:91:73:49:b5:56:66:73:f0:d3:e2:3d:01:61:
e5:bb:7e:4a:ed:dc:f5:f5:cb:74:fd:7c:c6:04:5e:25:c1:ad:
6d:93:5e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org