Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u0P_SilhWj-A1zjpsjzmG0myFxo.roa
File: u0P_SilhWj-A1zjpsjzmG0myFxo.roa (raw, json)
Hash identifier: ITmx+N5MoWqfCN/AXO0gE0fbEsoQe3I4wdAZ2ErXX5M=
Subject key identifier: BB:43:FF:4A:29:61:5A:3F:80:D7:38:E9:B2:3C:E6:1B:49:B2:17:1A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AE1A995107D5FF7B0B1E47C3B1375
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u0P_SilhWj-A1zjpsjzmG0myFxo.roa
Signing time: Tue 24 Jan 2023 16:09:45 +0000
ROA not before: Tue 24 Jan 2023 16:09:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208753
IP address blocks: 2a0e:b107:380::/48 maxlen: 48
2a0e:b107:382::/48 maxlen: 48
2a0e:b107:384::/48 maxlen: 48
2a0e:b107:383::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:e1:a9:95:10:7d:5f:f7:b0:b1:e4:7c:3b:13:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb43ff4a29615a3f80d738e9b23ce61b49b2171a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:f5:12:02:92:d3:73:68:0f:e5:17:5b:03:
2b:15:64:0f:92:68:c7:f7:f9:54:5e:87:c7:ad:e5:
84:e1:aa:ac:ea:83:10:a7:82:1a:0a:bc:11:26:d9:
7c:71:76:92:a4:b7:43:6c:63:c6:3e:ce:22:df:fa:
84:b3:ad:7f:da:1a:47:d4:bb:85:ff:46:46:d8:0d:
10:a9:d9:fa:c6:6e:d3:6d:ed:56:c6:66:c3:22:0e:
6a:82:7e:22:2e:61:1d:5e:10:32:a9:23:06:87:8a:
63:03:30:5a:61:fe:9d:b3:b4:2d:66:76:a1:12:23:
9f:9c:ef:34:64:a5:28:e4:4d:e7:53:60:05:65:65:
2b:1a:91:bf:42:18:4d:a5:f7:ee:a9:fe:76:c8:1a:
ca:a1:b9:35:b8:9f:ae:cd:44:88:87:9e:5b:66:5a:
3c:45:50:7c:bc:3f:da:98:0b:0d:9a:63:ac:6e:e2:
da:cd:f7:e9:c4:10:90:bd:29:0c:2b:59:b9:8f:d4:
d0:53:a8:db:6f:c2:76:10:68:1a:d1:26:6e:95:82:
c2:25:8c:d5:4c:e1:c2:1f:87:36:54:87:dc:50:df:
29:77:ba:bf:37:07:57:41:95:fe:4d:79:f5:83:b9:
6a:24:b3:f1:31:1d:16:11:25:6d:ff:ad:e8:db:db:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:FF:4A:29:61:5A:3F:80:D7:38:E9:B2:3C:E6:1B:49:B2:17:1A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u0P_SilhWj-A1zjpsjzmG0myFxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:380::/48
2a0e:b107:382::-2a0e:b107:384:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b6:98:0d:d7:76:d1:f4:33:cf:89:62:eb:1d:ab:56:9c:76:e9:
92:56:5d:ec:9a:ca:8e:1a:f6:e5:18:7f:10:4c:e5:3c:7f:d7:
46:6e:a1:b6:21:5a:c5:85:b5:69:4c:9e:d8:18:17:d1:23:bb:
ec:bd:38:26:8e:d7:39:f0:c4:c9:38:9a:18:89:21:33:f8:db:
7d:6b:bf:bc:53:fe:fa:9e:e1:a1:fa:b6:42:2b:b1:d7:e2:b2:
6e:f8:a6:2f:ba:dc:33:d1:ad:47:89:60:a1:21:4c:fc:29:20:
64:be:ca:39:73:57:94:c4:de:7f:35:55:f2:eb:a1:76:93:16:
f4:99:72:9e:97:b3:98:1b:2c:23:f9:38:1a:4c:00:f6:2d:23:
4a:e4:1e:48:3a:1b:e1:45:d7:65:cd:cb:46:89:a1:cf:bc:91:
50:72:3b:b8:0d:44:15:c1:9b:6b:f2:09:be:64:33:35:2c:0e:
a6:c4:62:9f:25:b7:8b:42:dd:3c:f5:fd:de:7c:b0:da:57:aa:
98:1b:fd:45:33:cb:55:c3:5c:15:09:fb:83:5d:95:b2:a2:95:
86:ff:a3:20:a8:78:a2:95:58:16:c8:34:d7:95:bc:19:ed:fd:
6d:1a:ca:9e:7f:15:e8:7c:5a:1f:f4:20:97:c2:4a:03:2f:39:
cb:0d:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:52 2024 by rpki-client on console-ams.rpki-client.org