Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v-3TjLFfAgg0fh7eFRGLQQxn4h4.roa
File: v-3TjLFfAgg0fh7eFRGLQQxn4h4.roa (raw, json)
Hash identifier: nzQa6OOio0w+/a7Z5kDfHotNTXLuLImTmNsYZ1/NGPg=
Subject key identifier: BF:ED:D3:8C:B1:5F:02:08:34:7E:1E:DE:15:11:8B:41:0C:67:E2:1E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AFBAFA07895FCC0A0BA0024490889
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v-3TjLFfAgg0fh7eFRGLQQxn4h4.roa
Signing time: Tue 24 Jan 2023 16:09:51 +0000
ROA not before: Tue 24 Jan 2023 16:09:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211972
IP address blocks: 2a0e:97c0:130::/44 maxlen: 48
2a0e:b107:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:fb:af:a0:78:95:fc:c0:a0:ba:00:24:49:08:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfedd38cb15f0208347e1ede15118b410c67e21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:26:6d:87:35:87:b6:99:f5:fc:4e:19:ae:
df:0a:ac:0c:ac:9e:5c:b8:36:93:8d:78:9b:1f:9f:
e7:f5:ab:35:1d:7b:07:d0:1c:57:6a:54:c6:3d:87:
63:fc:6b:e5:e8:33:62:91:c3:d1:56:4d:b5:61:b0:
73:77:3e:6e:82:dc:ab:98:58:cb:41:4a:d1:ab:6c:
03:40:1a:bd:5b:53:0d:8f:31:12:0e:f8:54:9d:aa:
94:b7:58:85:3a:27:2b:16:34:be:1c:63:35:fb:4f:
cb:b5:ad:ac:ab:e4:fb:d3:14:92:26:b6:b2:79:0f:
01:5b:13:b6:f9:3c:00:cf:20:9d:fa:cd:de:b8:f1:
0e:0f:cd:b3:88:f3:d2:73:34:3c:93:f0:d5:fe:39:
56:07:12:21:4d:4c:c2:a6:42:23:39:1c:f2:b4:aa:
98:1d:49:5c:f6:cd:57:06:83:b9:b4:54:97:ee:cc:
39:20:05:03:af:35:c4:da:54:c2:26:8b:82:34:96:
71:11:c8:a7:95:3e:95:fc:bd:b1:01:0d:0e:da:c4:
57:d4:5e:10:c3:6d:3d:df:f2:c1:b1:76:5e:e7:7a:
8c:d5:cd:39:4b:75:53:4c:f7:b0:89:b0:2a:d4:cd:
a9:b4:be:00:21:c2:ae:8a:ac:33:a8:49:7a:c9:8b:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:ED:D3:8C:B1:5F:02:08:34:7E:1E:DE:15:11:8B:41:0C:67:E2:1E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v-3TjLFfAgg0fh7eFRGLQQxn4h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:130::/44
2a0e:b107:100::/44
Signature Algorithm: sha256WithRSAEncryption
a8:4f:66:2f:bf:b3:b3:c1:26:74:cf:43:03:1e:52:8b:75:68:
04:40:4a:11:0d:4b:a9:70:2f:8e:05:cd:99:8c:5e:e7:6c:c8:
6d:17:d2:f9:22:8a:82:c0:85:44:89:6c:a9:36:48:c9:4b:1a:
8b:41:a7:ce:01:09:75:d3:1c:58:4d:24:b7:ea:4e:e1:cf:fb:
2c:19:80:f7:e9:25:6e:2a:16:e9:9e:97:9e:29:8c:0f:34:9b:
bb:08:e1:b0:99:03:41:cd:8c:6a:2b:40:a0:75:9e:40:95:a9:
b6:cd:d7:3b:3e:0e:43:cc:e4:14:af:46:f8:3c:1a:9d:f8:d6:
00:ff:78:b4:2c:e6:37:f6:52:b0:bf:78:a1:74:54:2e:20:26:
0e:8d:2d:46:8e:b5:d5:9a:bc:ea:1e:7b:80:d1:a4:0a:47:aa:
7b:ff:75:a7:78:08:b0:e0:b1:17:23:fb:4a:8e:93:04:a6:5e:
14:ce:14:17:83:5a:ef:71:36:69:36:c5:5d:f8:38:1e:10:a8:
7a:ea:2b:0a:15:4d:e0:e2:6f:f9:b3:81:e0:4f:5c:c0:86:18:
07:42:91:68:f2:10:f7:4e:07:be:0e:15:b1:0e:ca:4f:17:2c:
4b:e0:ee:87:f3:e2:ee:3d:45:80:4b:5a:fd:1f:5f:0f:f3:c6:
cf:4f:79:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:52 2024 by rpki-client on console-ams.rpki-client.org