Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wsvtXVK5vAdMrtPVtbHZkZpHA3s.roa
File: wsvtXVK5vAdMrtPVtbHZkZpHA3s.roa (raw, json)
Hash identifier: zSNvDBIhMKLsEyVgI/lhGnLwTYb4nRweizwARhHayXw=
Subject key identifier: C2:CB:ED:5D:52:B9:BC:07:4C:AE:D3:D5:B5:B1:D9:91:9A:47:03:7B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018AD18F0D927B76185D1BFECE6AB5913720
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wsvtXVK5vAdMrtPVtbHZkZpHA3s.roa
Signing time: Tue 26 Sep 2023 12:55:27 +0000
ROA not before: Tue 26 Sep 2023 12:55:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216474
IP address blocks: 2a10:ccc2:10::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:8f:0d:92:7b:76:18:5d:1b:fe:ce:6a:b5:91:37:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 26 12:55:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2cbed5d52b9bc074caed3d5b5b1d9919a47037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:c9:98:2f:4a:36:ff:e5:fa:08:ae:5f:e7:
6e:b6:50:2c:b3:05:c6:e0:9b:89:b9:5d:40:7a:bb:
31:8e:16:a5:a8:b8:65:af:20:ab:99:e5:5d:e3:f6:
7b:9a:b0:fd:07:75:bb:34:ac:76:20:12:1d:1b:d1:
b4:22:21:c6:67:b8:a2:ab:b2:29:a3:14:84:84:4b:
1c:24:b2:31:2b:50:cb:0a:ae:cf:ea:34:ea:d5:05:
22:42:06:6a:7a:3b:46:29:41:57:92:dd:d7:08:9e:
f7:21:7f:8c:f4:75:60:0f:60:1a:e3:57:27:d8:a5:
df:0e:4d:1c:0c:7f:4c:12:a3:50:fb:26:e5:3e:0e:
ed:24:7c:0a:10:f3:5d:ce:3a:56:83:e9:e8:01:ce:
01:82:c6:b6:60:36:d8:52:f9:b0:32:c9:d6:da:8a:
a0:41:7a:5d:cd:d7:ac:52:74:84:01:fc:b4:f7:fa:
7d:bf:59:b1:50:eb:b0:ad:6e:f5:f4:71:3e:49:58:
79:0c:67:62:17:cf:79:11:a2:a0:cd:8d:59:c8:6e:
08:05:62:9d:19:9b:7d:6a:81:3c:03:db:34:c9:5f:
0e:b3:a8:16:31:da:40:fa:59:e0:39:7f:a2:eb:8b:
f9:d6:14:b0:fa:6d:9c:e0:09:6b:33:ec:1f:2d:c7:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:ED:5D:52:B9:BC:07:4C:AE:D3:D5:B5:B1:D9:91:9A:47:03:7B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wsvtXVK5vAdMrtPVtbHZkZpHA3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc2:10::/44
Signature Algorithm: sha256WithRSAEncryption
90:24:98:ec:77:f0:0e:8c:8a:f1:e8:32:29:c0:5d:3f:7c:fd:
33:bf:08:9b:8e:56:0d:7a:c5:0a:fe:f1:d6:2b:cd:7c:02:ac:
c2:d6:08:28:dd:1b:ff:ac:bb:e9:e5:0b:db:4f:7b:1b:a6:48:
52:eb:11:f1:d0:60:5e:a9:86:ad:8b:03:81:51:c3:c2:31:da:
80:5d:b7:cb:86:cc:06:12:d6:48:f7:c8:08:92:3b:29:8c:9d:
94:cf:42:7e:a5:e4:c7:06:4e:20:d9:80:29:22:27:96:05:f0:
d2:40:f6:72:c6:dc:3e:e3:53:ed:5d:ed:2b:4f:12:e2:29:2f:
8b:dd:30:07:f3:fe:fc:cb:2c:fc:91:d9:f6:ee:2c:5f:11:c6:
45:bc:17:dc:67:df:4f:7f:43:ec:88:c1:df:1c:e3:6a:76:f3:
c1:e4:f0:b9:78:ee:32:6b:d6:13:15:f1:7d:0c:ce:4f:27:ce:
91:b0:e0:40:31:40:fe:1e:65:3c:2c:6e:05:9b:9a:53:f1:8b:
80:4e:f8:39:e4:e7:77:31:e1:a7:0e:aa:9e:6f:d1:6e:b2:74:
63:63:7a:e7:cf:48:76:25:0f:c7:bc:8c:db:b3:0d:6c:c7:a8:
35:2d:bc:57:84:d5:27:99:c5:e0:b2:a5:a6:1e:37:bc:16:ad:
10:eb:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org