Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vp8XjXf6ysJG-Z6k03nKBHu6ADY.roa
File: vp8XjXf6ysJG-Z6k03nKBHu6ADY.roa (raw, json)
Hash identifier: k1YpXotVCmPiANR707nfik+dGxXfICIHnXmMrt07jAg=
Subject key identifier: BE:9F:17:8D:77:FA:CA:C2:46:F9:9E:A4:D3:79:CA:04:7B:BA:00:36
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186DBA870667AF0D9ADB446B58364AA260E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vp8XjXf6ysJG-Z6k03nKBHu6ADY.roa
Signing time: Mon 13 Mar 2023 15:48:14 +0000
ROA not before: Mon 13 Mar 2023 15:48:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200581
IP address blocks: 2a0e:b107:1d90::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:a8:70:66:7a:f0:d9:ad:b4:46:b5:83:64:aa:26:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 13 15:48:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be9f178d77facac246f99ea4d379ca047bba0036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:d7:50:08:2e:30:4d:62:b4:42:a4:4c:59:
e0:2e:21:a4:3d:19:28:63:4c:7c:b0:8a:65:48:78:
ba:82:bb:7c:9b:53:b4:fe:a3:a0:d8:3d:df:eb:ee:
74:81:a1:06:e9:06:55:42:b2:06:46:6a:b6:e1:08:
6c:c2:7f:23:a2:93:ab:13:55:26:8f:f9:7b:6e:f1:
fa:38:26:b7:85:5e:25:62:6a:7e:4a:4e:6a:dc:6e:
16:a6:e7:06:32:17:6d:6f:42:eb:09:07:98:33:54:
4a:ea:be:74:20:e9:74:d7:b8:db:69:35:62:c7:b3:
a0:e8:3c:67:8e:97:ad:6f:cc:d6:38:4e:7b:9e:68:
37:ab:8a:ec:30:22:48:fc:83:6f:86:0b:81:3b:77:
69:a1:90:b6:9f:78:ef:b2:54:9c:66:b5:f6:be:24:
79:16:0c:a4:28:cc:de:a1:f0:a6:94:40:3b:95:05:
37:1b:01:80:e6:3a:16:ef:55:6c:be:5c:91:87:2d:
e7:ad:be:56:5d:6b:7a:d4:9e:b2:ab:b8:39:c6:93:
7a:1a:7f:c7:ad:28:33:09:9e:2c:a6:35:37:20:a2:
59:30:9a:0c:f7:11:e0:42:6d:88:03:40:ed:c2:93:
33:fd:46:08:f5:55:b0:61:ca:04:dc:fe:a3:ed:99:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9F:17:8D:77:FA:CA:C2:46:F9:9E:A4:D3:79:CA:04:7B:BA:00:36
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vp8XjXf6ysJG-Z6k03nKBHu6ADY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d90::/48
Signature Algorithm: sha256WithRSAEncryption
12:60:66:29:c5:70:d2:7a:87:18:84:ad:de:a2:89:0f:d2:96:
44:e5:ff:0d:a6:7b:4b:73:a1:09:71:a7:bf:9a:37:b6:d2:6b:
c4:5b:5b:17:55:30:82:27:0b:ba:97:c0:1d:57:5f:b5:f4:74:
89:4c:45:de:41:5d:58:8f:e0:b7:68:0d:35:50:3d:16:08:21:
9e:78:cb:66:72:85:26:e0:a7:25:9d:58:6d:ba:ef:7d:7d:ba:
ef:ad:a4:cf:7a:82:22:a3:44:f2:0f:ce:08:57:47:c6:f9:9e:
51:63:45:47:e2:b2:ff:1f:10:c0:69:78:f0:81:75:9b:ce:2c:
a6:5b:0c:14:6a:a4:31:d6:6f:11:af:d3:22:5b:9b:6d:c5:8b:
7b:1c:be:11:b4:d1:c3:15:8d:10:fb:84:a8:8c:98:89:1e:4c:
38:71:c0:f6:2b:94:2e:60:aa:2e:27:af:98:b3:bb:fe:56:6b:
c8:41:5d:b3:46:b6:5e:11:0a:b8:6c:35:1d:54:b8:5a:b1:a0:
fb:93:5d:60:38:9e:c9:0d:dd:bc:2d:3e:41:6c:a1:d0:b5:38:
61:08:ba:5d:9f:b8:b7:c8:2a:9c:82:1d:c6:d7:1d:c5:b1:fd:
b3:cf:26:c0:a9:87:e4:ee:dc:69:37:4d:8f:ee:c0:8c:1f:36:
e0:ee:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:52 2024 by rpki-client on console-ams.rpki-client.org