Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w0603fMf0XMOY9V9AuFWidiu1YM.roa
File: w0603fMf0XMOY9V9AuFWidiu1YM.roa (raw, json)
Hash identifier: f1yEKCnQ3wGP2DwOed7yyLgc4MXadGWenGlE312RL08=
Subject key identifier: C3:4E:B4:DD:F3:1F:D1:73:0E:63:D5:7D:02:E1:56:89:D8:AE:D5:83
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018878238090BEC66485856FE7CC315883BF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w0603fMf0XMOY9V9AuFWidiu1YM.roa
Signing time: Thu 01 Jun 2023 18:06:12 +0000
ROA not before: Thu 01 Jun 2023 18:06:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200605
IP address blocks: 2a0e:97c0:370::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:23:80:90:be:c6:64:85:85:6f:e7:cc:31:58:83:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 1 18:06:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c34eb4ddf31fd1730e63d57d02e15689d8aed583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:7a:06:77:c1:9f:f9:ce:b7:3a:e0:2c:48:
cc:05:e9:20:13:35:bf:ab:e6:ed:03:fb:04:cc:27:
b6:6b:32:82:e4:c2:a7:07:93:3b:2a:bb:a2:ab:cd:
c6:69:7c:c6:eb:54:d1:d9:93:f8:a7:81:1d:3b:13:
20:9c:c4:af:0c:fd:a3:67:c3:e9:86:e9:c6:cc:43:
b1:ab:fc:d1:c5:ce:d5:d4:fb:a8:35:84:4d:04:e8:
10:cd:99:3e:bd:ae:e9:02:3f:04:9f:db:23:ae:42:
08:8e:3f:03:c4:26:5f:a0:aa:eb:bf:92:34:de:d2:
45:dd:bd:cd:22:20:78:fa:1b:7c:08:fa:5e:27:93:
3c:a0:c7:7d:07:17:69:95:5e:9f:b9:b6:40:49:ca:
af:ce:db:13:fd:b3:26:72:79:a0:e1:6f:3f:b2:32:
d2:a6:2c:19:f8:7b:71:47:57:44:00:b8:0a:e7:28:
af:ad:6c:e8:10:f9:5a:ae:a4:73:72:1b:1a:15:67:
ae:77:e4:0a:58:18:16:34:88:e0:b6:76:2d:e3:24:
25:6f:0a:74:17:13:f6:ff:27:6a:f1:4a:e6:05:00:
f0:d9:c5:59:34:e4:cb:fe:4e:4f:3e:7d:7e:d9:b7:
a7:a4:20:1a:32:ed:33:5e:8a:63:ae:0d:4d:f1:29:
6d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:B4:DD:F3:1F:D1:73:0E:63:D5:7D:02:E1:56:89:D8:AE:D5:83
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w0603fMf0XMOY9V9AuFWidiu1YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:370::/44
Signature Algorithm: sha256WithRSAEncryption
35:69:7d:04:c8:53:cf:31:9b:be:b1:9e:fc:cb:8e:1f:05:a1:
f2:ff:68:e3:3f:39:c7:67:12:5a:a9:2e:61:87:fa:61:ad:70:
8e:8b:f8:ca:af:ab:02:ef:eb:41:66:88:90:b1:e2:36:37:88:
20:1f:e6:62:f2:bb:a1:9a:06:1b:6c:7f:88:dc:14:63:c3:aa:
05:da:c3:a5:8c:d2:8f:09:97:99:fb:4d:4a:11:75:65:99:df:
83:85:73:9e:35:15:4d:a7:96:cc:34:f0:1d:1e:10:a6:a2:1a:
d7:0f:71:2e:71:54:31:24:08:47:c6:d2:32:79:16:b3:99:86:
a3:46:49:b9:5a:26:9d:bf:40:b6:22:40:0d:0f:40:ec:96:99:
a5:2a:23:f9:21:fb:f4:ec:2f:c0:86:8b:e7:39:64:86:11:52:
61:bf:7b:69:c3:81:d3:70:83:e5:fe:76:e4:4e:34:11:b2:c8:
9d:7c:40:ce:6c:d6:27:00:d9:38:98:12:13:6b:d2:3e:0c:89:
68:d0:4b:71:f9:13:f2:88:d3:aa:d3:d7:c2:a2:50:48:07:e1:
1e:2f:e1:eb:00:fb:5f:70:20:31:dd:cf:77:ad:88:79:9a:3d:
92:95:ff:1e:56:ef:bd:e6:d0:62:73:1c:c4:5f:eb:f5:20:10:
db:90:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-fra.rpki-client.org