Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wPnrqyqVC2ZACXfy78C8ykD36dc.roa
File: wPnrqyqVC2ZACXfy78C8ykD36dc.roa (raw, json)
Hash identifier: 5xAjdWDSKOWEUc73AeBj5bcCL5FKyyV4/wx9wJOhobo=
Subject key identifier: C0:F9:EB:AB:2A:95:0B:66:40:09:77:F2:EF:C0:BC:CA:40:F7:E9:D7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AD8EDE0A363B79D8012E5762A1F41
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wPnrqyqVC2ZACXfy78C8ykD36dc.roa
Signing time: Tue 24 Jan 2023 16:09:42 +0000
ROA not before: Tue 24 Jan 2023 16:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205398
IP address blocks: 2a0e:b107:19c8::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:d8:ed:e0:a3:63:b7:9d:80:12:e5:76:2a:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0f9ebab2a950b66400977f2efc0bcca40f7e9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:60:31:b9:7e:49:ca:61:0c:f5:d2:3f:58:
86:62:ad:cc:eb:bb:5f:39:9d:44:3a:c2:49:34:0f:
1e:ed:ba:3a:16:c6:69:07:30:1e:04:3b:fc:d7:98:
1b:bd:eb:8d:e3:b9:13:7f:19:0a:91:ea:49:37:12:
0d:8a:52:22:b3:dc:b8:82:bb:77:10:c3:72:f0:34:
40:a7:2c:c9:74:bf:20:df:5c:2d:92:ad:6e:e4:67:
81:5c:29:c2:a3:26:80:57:7a:b5:c4:bf:37:05:5c:
0d:57:db:56:db:3c:0b:91:b1:be:dd:c1:5c:39:46:
cf:22:80:31:c8:86:51:24:fd:ac:bd:bd:06:12:15:
ce:0a:ef:17:cb:65:78:90:53:1d:83:68:0c:01:a8:
0e:39:38:a3:b0:67:0e:dc:68:82:5e:0c:bf:5f:34:
83:12:dd:6a:e0:80:ca:1f:b3:f1:f6:02:2f:dc:99:
f2:27:1b:6f:aa:34:16:f5:8c:3e:f0:d9:4d:ac:8e:
c6:10:02:f6:9d:e0:66:ff:bb:5f:58:c6:31:9d:b6:
3b:94:f4:c7:c4:fa:5f:2c:c7:5b:5e:78:9c:a6:55:
79:55:78:91:8c:cf:f8:8d:23:f1:9b:58:3d:48:a9:
7d:8a:e9:c2:0a:5e:36:41:51:e5:c8:29:f7:4c:e1:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F9:EB:AB:2A:95:0B:66:40:09:77:F2:EF:C0:BC:CA:40:F7:E9:D7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wPnrqyqVC2ZACXfy78C8ykD36dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19c8::/48
Signature Algorithm: sha256WithRSAEncryption
12:46:80:34:5b:74:91:42:af:ca:2f:28:f5:1b:0a:3a:8f:00:
cf:fd:27:f5:0c:f7:81:ea:91:02:a0:e5:2e:db:c4:1e:d1:8f:
d8:87:6c:32:e5:fe:79:0b:ba:dc:b7:9a:96:13:8e:c9:92:27:
0a:11:5e:af:c3:e5:20:c1:f0:b7:27:07:48:ab:8b:c3:5c:ae:
db:de:1f:03:7c:67:02:72:a2:d3:69:a5:7e:59:a6:6d:19:a9:
c4:7b:af:5d:96:42:2c:31:34:96:ae:07:e6:7c:a2:83:1f:4b:
87:0a:17:a8:e4:7f:fe:b9:cc:77:23:05:72:ce:05:a6:36:72:
d2:a4:b7:be:2c:5f:ed:91:02:e9:23:c2:2c:67:0e:ba:13:8e:
89:d8:cd:35:c0:83:f9:cf:24:38:b4:91:0b:a9:3a:ca:d9:b5:
fd:6e:52:3e:93:3e:55:41:b0:ee:95:af:f4:cd:f0:a6:ec:dc:
10:86:83:ac:50:61:80:10:49:6d:88:2e:b2:8f:29:bd:07:8c:
80:5f:a0:fc:f0:5e:9f:41:e8:02:57:dd:a1:53:aa:b5:b5:f3:
d4:8f:79:0e:cb:cc:ff:41:3f:1c:e8:0e:22:8c:a1:a3:bd:70:
3f:6d:9c:83:a7:47:1a:0a:f5:af:ad:59:c7:5e:4e:cf:59:8e:
c4:f0:01:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org