Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wkb9gitPXRLlwBr7SPlY6gVO59s.roa
File: wkb9gitPXRLlwBr7SPlY6gVO59s.roa (raw, json)
Hash identifier: fMAEE6U0SU30mEpN9bQco/+8rSUx0peA8wy3JQWibds=
Subject key identifier: C2:46:FD:82:2B:4F:5D:12:E5:C0:1A:FB:48:F9:58:EA:05:4E:E7:DB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188F9DD1E4498E4A44B4586BDBDC7FC2F7A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wkb9gitPXRLlwBr7SPlY6gVO59s.roa
Signing time: Mon 26 Jun 2023 22:39:57 +0000
ROA not before: Mon 26 Jun 2023 22:39:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201911
IP address blocks: 2a0e:97c0:ae0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f9:dd:1e:44:98:e4:a4:4b:45:86:bd:bd:c7:fc:2f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 26 22:39:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c246fd822b4f5d12e5c01afb48f958ea054ee7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:a6:4e:be:50:c3:e2:f2:07:cc:c5:c8:6f:
b0:f8:21:71:9e:c1:54:36:76:24:10:6b:00:5b:86:
24:25:04:67:82:d6:e2:36:d5:7e:a7:8d:32:97:a0:
ed:b3:76:85:2c:dd:bc:9e:15:47:0f:a5:fb:0e:59:
50:00:f6:c5:e0:2f:77:4b:5e:d7:69:d2:47:eb:d2:
c6:18:83:3c:ac:5b:c2:f5:3d:e7:d5:f1:db:7e:b6:
d7:5a:f4:59:9d:e6:cc:c6:cf:e3:56:1c:bc:36:6b:
66:40:7b:44:ab:0f:fd:57:85:7a:84:43:ba:e2:9f:
e7:e6:c6:3c:24:a3:fb:b7:05:9d:c4:65:83:da:f8:
89:14:29:3c:26:4c:1b:8f:a2:9f:44:50:b9:5f:8a:
85:a2:42:4d:55:f2:f0:58:e6:ce:d1:9e:3a:1e:16:
0d:b0:03:57:db:0d:13:f8:b2:2d:3b:e4:46:01:ae:
4a:96:a1:3b:47:21:ce:13:12:5c:53:94:35:17:41:
b3:1a:05:d4:fd:1e:63:de:93:43:ab:ee:3a:67:a0:
55:52:b5:24:28:57:8f:bc:cc:ef:1b:f7:50:9e:34:
11:3a:0b:14:f1:51:08:be:75:9e:7c:9c:47:84:e5:
c5:f1:c0:9a:df:45:40:24:1a:47:9d:cd:5d:22:e5:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:46:FD:82:2B:4F:5D:12:E5:C0:1A:FB:48:F9:58:EA:05:4E:E7:DB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wkb9gitPXRLlwBr7SPlY6gVO59s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:ae0::/44
Signature Algorithm: sha256WithRSAEncryption
50:6d:38:8b:18:fe:55:8b:38:a4:7e:15:ce:e3:d8:e2:45:1b:
0d:91:db:a2:9b:51:90:49:69:43:dc:6f:d7:44:d2:6a:25:59:
7b:60:5b:9e:1e:35:ea:f8:55:20:ff:86:f9:5c:88:12:96:27:
37:b9:63:c9:d2:a8:22:15:c1:a3:ec:fc:73:17:d3:94:53:2b:
78:63:0f:6d:37:20:3e:70:0c:7d:ea:7e:ea:b3:e7:cd:92:4a:
5f:66:23:19:34:8e:ef:32:32:de:31:4c:8b:2c:09:44:4c:5f:
e3:c9:7f:00:17:cd:1e:0a:6c:00:c3:47:ed:9a:5e:c3:a8:dc:
48:6f:e7:a0:99:2e:bc:79:f8:fa:da:ed:b8:ab:c8:aa:0d:21:
7e:25:56:c7:3e:9e:d5:e5:4b:68:1a:fc:5e:60:6f:91:a3:cb:
7f:65:32:5d:2c:f5:1c:08:53:a7:bd:5b:56:43:9e:ab:75:95:
5e:fc:96:24:ff:1c:b3:ad:f4:ff:9b:a9:9f:4c:1d:a4:96:6b:
c3:76:c5:53:6e:2f:30:c5:11:30:e0:8a:94:84:e9:b1:e1:38:
9f:66:5d:49:b5:d5:c1:21:66:94:75:40:fa:77:ff:c3:19:09:
16:1c:1a:a3:9b:78:6c:4d:cc:1e:ed:7d:d8:f2:1f:9e:f0:74:
04:38:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org