Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wysToXI1bz2HxsVyfgXh4j0EyeU.roa
File: wysToXI1bz2HxsVyfgXh4j0EyeU.roa (raw, json)
Hash identifier: AUK/Xx0TnBYG6v/UFhOw+DXhfvwcZM0xhS1Po/MfA1Q=
Subject key identifier: C3:2B:13:A1:72:35:6F:3D:87:C6:C5:72:7E:05:E1:E2:3D:04:C9:E5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CAEC954089C6F816D1C0CDD32D03BF290
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wysToXI1bz2HxsVyfgXh4j0EyeU.roa
Signing time: Thu 28 Dec 2023 04:57:58 +0000
ROA not before: Thu 28 Dec 2023 04:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216387
IP address blocks: 2a06:de01:502::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ae:c9:54:08:9c:6f:81:6d:1c:0c:dd:32:d0:3b:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 28 04:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c32b13a172356f3d87c6c5727e05e1e23d04c9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:dd:10:34:d4:d9:6e:a7:c1:d6:3f:61:e9:
b2:a9:45:fe:c9:e6:1c:af:5e:95:ae:59:26:72:f5:
63:d4:98:31:47:0b:12:32:3b:57:49:25:e9:66:eb:
db:23:96:d4:b0:76:cf:3c:f1:db:71:1d:bb:b1:33:
30:cb:c3:08:3c:fc:82:2d:04:55:4b:bd:d0:f2:cf:
81:17:1d:c9:62:30:da:c0:14:a6:d7:4b:14:78:00:
75:1e:37:f8:62:01:33:03:dc:62:25:0a:69:55:89:
33:8b:a4:96:43:09:d4:1a:bb:6d:2f:ae:76:c9:ce:
bc:e2:7a:dd:10:5a:a9:f3:92:94:ec:a7:e8:32:b8:
53:74:d7:24:a6:3f:3c:d9:fe:4e:e8:ad:24:26:3a:
8b:12:b4:1c:6a:03:9d:f1:ec:4b:60:c4:49:a7:21:
02:fe:c7:9e:a7:e4:45:e8:c6:a0:5e:63:a9:c0:3b:
1e:e8:39:6f:d1:ab:97:38:48:01:38:ee:eb:00:d8:
a0:d6:02:94:d1:3c:b5:0d:86:76:ae:8c:90:d8:f1:
04:03:ab:36:d8:70:82:c8:01:e2:7f:80:fa:ae:37:
f4:1f:51:13:a3:98:59:08:45:18:e4:fe:35:10:fe:
4f:3f:a4:19:25:7f:f6:05:3c:5a:e0:f9:69:9b:fe:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:13:A1:72:35:6F:3D:87:C6:C5:72:7E:05:E1:E2:3D:04:C9:E5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wysToXI1bz2HxsVyfgXh4j0EyeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:502::/48
Signature Algorithm: sha256WithRSAEncryption
6c:cb:02:e6:b7:a7:d1:0f:79:18:2b:49:a4:2e:74:b4:82:78:
64:cd:9d:40:03:a4:4d:de:b9:81:97:c4:df:59:6d:ef:78:f0:
68:38:33:a4:b3:ea:70:60:5a:5f:4d:59:a4:6b:62:ba:1b:17:
9e:8e:3f:51:72:08:04:f9:3b:59:9e:09:4b:49:bd:4a:58:0f:
33:1e:5c:1b:a3:98:1a:8e:b8:5c:09:dd:1e:6c:5a:29:cc:fa:
e0:74:1b:85:bd:46:9a:3f:c3:6e:ac:92:92:b0:fe:0a:1e:57:
70:ae:01:83:e1:0c:b8:dc:cf:97:7e:ff:af:8f:84:31:80:16:
28:5d:fd:e2:a1:60:ab:5a:03:4a:cb:92:93:c1:ba:55:1b:de:
fd:7b:11:02:3f:81:25:a4:09:24:b2:cb:8a:f9:cf:38:64:84:
68:0a:b6:ef:38:c0:40:f2:71:16:86:ec:3d:b2:d0:a4:65:39:
e0:96:53:2a:7d:85:af:44:7a:6e:ed:b3:cd:4a:2f:06:a2:7c:
33:6c:fa:00:c5:34:2f:87:e8:38:b8:96:71:1c:48:09:e7:42:
90:a8:5d:2f:8a:41:5d:0d:98:f3:70:9a:10:a3:ad:3c:c0:75:
ce:f3:23:48:a1:7c:bf:2d:5d:af:90:0e:bd:a2:8f:50:02:7c:
90:69:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org