Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uq-T_w6CG75RIieJ8emDHqa88Rk.roa
File: uq-T_w6CG75RIieJ8emDHqa88Rk.roa (raw, json)
Hash identifier: ji+cCHHc+mLbLLx91buPd+LzZB+L0OP3DtHB70U69Zk=
Subject key identifier: BA:AF:93:FF:0E:82:1B:BE:51:22:27:89:F1:E9:83:1E:A6:BC:F1:19
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AC2E2E284C57007A975F679C40D24
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uq-T_w6CG75RIieJ8emDHqa88Rk.roa
Signing time: Tue 24 Jan 2023 16:09:37 +0000
ROA not before: Tue 24 Jan 2023 16:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137256
IP address blocks: 2a0e:b107:c10::/48 maxlen: 48
2a0e:b107:c11::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:c2:e2:e2:84:c5:70:07:a9:75:f6:79:c4:0d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baaf93ff0e821bbe51222789f1e9831ea6bcf119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:66:3c:1b:6d:0c:4f:18:14:00:dd:bf:c9:
a3:1c:04:b6:7f:d1:0b:50:4d:4d:5a:82:d1:af:26:
18:7f:3a:31:65:b6:d2:27:77:6c:21:ee:d3:c1:44:
a2:d7:d2:81:41:bf:93:1e:5c:66:99:d8:5a:e4:eb:
56:e0:d6:09:20:86:5e:ed:32:f6:9c:85:a7:8f:3c:
8e:ff:16:93:b1:2d:c8:7a:64:43:e4:9f:14:9e:04:
10:bc:7d:fc:50:3b:79:cf:fa:26:25:f2:24:48:88:
7a:53:6f:03:5a:24:c7:87:00:e7:26:5d:25:73:68:
c4:db:62:e5:dd:16:4d:42:7d:7d:2d:bd:a0:14:7b:
6f:28:41:65:db:1c:ae:32:34:12:ea:6f:e4:af:19:
74:1a:99:46:df:1d:dc:8c:1d:8e:79:12:25:75:94:
6a:c2:d6:c9:79:86:45:ac:d5:29:4c:bf:e0:a1:b7:
9c:91:60:9f:8c:85:a1:5a:aa:d3:d0:2e:ad:b1:3d:
d4:06:42:4a:22:55:23:ff:c6:c3:df:15:d8:06:e2:
36:8f:46:61:fa:80:e1:86:66:e2:be:08:a2:f3:f0:
6b:25:64:28:84:fa:bb:9b:24:cd:0e:17:af:37:2a:
03:41:7e:51:56:59:cc:57:1a:08:62:67:c8:35:3d:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AF:93:FF:0E:82:1B:BE:51:22:27:89:F1:E9:83:1E:A6:BC:F1:19
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uq-T_w6CG75RIieJ8emDHqa88Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:c10::/47
Signature Algorithm: sha256WithRSAEncryption
26:b2:4d:76:78:f3:ba:c3:2b:29:9e:2c:f2:69:1c:db:6b:0a:
57:6b:a0:e1:02:d5:da:b0:28:c1:7e:13:74:af:93:db:d8:f2:
40:cb:92:fe:4d:da:59:6d:9c:df:bc:12:35:56:de:6a:b2:82:
05:44:7a:1b:ed:33:06:76:b9:9a:9e:ab:03:ce:ae:e6:31:e8:
cb:a1:40:c3:af:67:ec:4e:d6:da:58:d1:dd:93:d4:ab:85:ac:
41:e9:bc:25:fc:f5:0d:5d:8e:b4:05:28:8d:80:5b:e9:a2:47:
ce:94:23:2a:e0:1e:3b:2e:4b:7c:37:88:8f:ed:fc:c6:c5:d6:
c5:b9:43:91:d9:6d:57:f3:32:2c:a5:82:1d:f4:fa:0b:d5:58:
cb:a6:be:45:36:fe:b7:4d:ba:b9:d6:76:b5:6e:d4:41:fa:15:
4a:74:c5:60:71:16:c9:ae:6e:63:e0:6b:29:6a:ee:05:3e:62:
c6:9f:f8:0e:2f:2b:d9:b6:79:e3:b0:4f:48:6b:9c:23:ea:99:
5f:71:39:5c:ab:02:f0:e2:19:68:d5:1a:12:8b:a0:1c:2b:19:
71:30:41:59:7e:44:8c:6a:fb:71:29:52:8c:c2:49:f7:6b:2d:
e8:d1:25:9b:00:56:04:1c:fa:84:e0:b9:05:b0:e1:15:7a:5a:
bc:a1:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:52 2024 by rpki-client on console-ams.rpki-client.org