Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wTjDWoghSmIHf8828QieqtEUVZk.roa
File: wTjDWoghSmIHf8828QieqtEUVZk.roa (raw, json)
Hash identifier: KgVuDHHQzXPhu3+HU2IByFk4vAaYZlIxFunIwiUhXTU=
Subject key identifier: C1:38:C3:5A:88:21:4A:62:07:7F:CF:36:F1:08:9E:AA:D1:14:55:99
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018622637B15FB18106097489968DA53755B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wTjDWoghSmIHf8828QieqtEUVZk.roa
Signing time: Sun 05 Feb 2023 16:23:10 +0000
ROA not before: Sun 05 Feb 2023 16:23:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200160
IP address blocks: 2a0e:b107:660::/44 maxlen: 48
2a0e:b107:1d60::/44 maxlen: 48
2a0e:b107:600::/44 maxlen: 48
2a0e:b107:5e0::/44 maxlen: 48
2a0e:b107:900::/44 maxlen: 48
2a0e:b107:800::/44 maxlen: 48
2a0e:b107:bb0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:22:63:7b:15:fb:18:10:60:97:48:99:68:da:53:75:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 5 16:23:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c138c35a88214a62077fcf36f1089eaad1145599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:c7:b9:1a:e9:95:90:47:8e:cf:ea:f5:c5:
72:5e:a5:30:6c:40:d8:5d:c8:bf:2b:fe:9e:38:66:
ea:df:e0:9c:09:e2:20:0b:fc:5d:e4:10:16:2c:09:
ef:d2:24:08:31:37:7d:04:6c:cb:e9:0d:6d:4e:41:
32:ce:16:b0:44:4c:43:46:98:04:ba:38:be:7a:5e:
44:8c:4e:fc:2f:f7:82:b0:d4:87:56:cf:98:e5:40:
4b:c5:93:2c:82:53:cf:44:dc:15:98:90:a7:b8:00:
bf:6a:71:f8:d5:66:60:52:01:d2:0c:2d:68:8a:a0:
a4:b7:56:3b:2f:4e:4d:7c:a2:b2:c0:81:3f:42:40:
96:93:e3:29:2a:a7:10:dc:3d:ea:8b:98:9f:31:ba:
8b:5f:fb:8d:7e:a1:de:bc:cc:e4:6c:ce:d4:9a:f7:
56:a4:2b:ae:2a:3b:4c:28:ce:48:5f:dd:53:b5:13:
f1:14:7e:88:89:00:d4:07:20:e4:38:7d:4f:73:f0:
4d:44:dc:0a:3b:1f:ce:bd:df:9f:27:1f:16:d2:b6:
d1:83:e9:3d:23:48:41:eb:d3:3c:6c:4c:7d:f6:2c:
3b:b6:b0:70:c2:98:66:ef:0c:7c:81:23:e8:70:b0:
c4:aa:c1:18:3e:fc:f3:67:30:73:09:ed:c6:58:22:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:C3:5A:88:21:4A:62:07:7F:CF:36:F1:08:9E:AA:D1:14:55:99
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wTjDWoghSmIHf8828QieqtEUVZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:5e0::/44
2a0e:b107:600::/44
2a0e:b107:660::/44
2a0e:b107:800::/44
2a0e:b107:900::/44
2a0e:b107:bb0::/44
2a0e:b107:1d60::/44
Signature Algorithm: sha256WithRSAEncryption
40:05:45:ab:fc:d3:2d:53:56:01:44:13:17:ed:4a:30:4d:64:
7e:85:69:34:49:95:7f:ec:9d:42:b2:c5:2a:88:70:46:da:f7:
35:6f:82:76:1c:be:29:1a:45:ab:87:f6:4a:dd:15:92:c7:aa:
7e:e0:7d:7c:6a:0f:e3:00:19:3a:70:7d:9c:1f:25:b6:e2:25:
7b:a9:45:fa:b4:4c:4a:31:a3:47:c3:b8:a7:9d:6a:1e:1a:e8:
3c:72:92:f1:94:37:0b:e4:34:47:bd:c2:eb:2c:32:63:f9:66:
e4:ac:7e:17:15:27:fb:1e:79:2b:4c:06:2f:53:4a:5f:74:8c:
b3:04:a6:14:76:e3:1f:82:2a:34:e1:74:22:e4:a0:43:c1:29:
19:2d:e6:0c:6d:92:01:1d:8c:58:f0:98:bb:2d:ec:15:a1:67:
ad:21:2c:52:14:1e:06:6d:81:53:fa:c8:f3:46:67:a2:14:53:
25:13:0b:e6:10:d4:a8:73:d1:3d:50:02:e3:1a:8d:3c:0a:0b:
b2:69:c4:80:a2:7d:3f:fa:56:b3:15:d0:9a:d4:9e:80:d4:6c:
5c:f2:3f:a1:31:c3:7e:fe:80:2f:57:75:6c:7f:ff:5d:6c:c0:
e3:33:cd:8d:3c:13:04:e4:47:6c:78:81:79:eb:50:11:e3:6a:
36:3b:45:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-fra.rpki-client.org