Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xlMGD5MLIqwgOalo_ggPrjZbSqg.roa
File: xlMGD5MLIqwgOalo_ggPrjZbSqg.roa (raw, json)
Hash identifier: LyYniBrYfcf9ffNhlt2krn5j9qRikSlKPC7J6HXNwkU=
Subject key identifier: C6:53:06:0F:93:0B:22:AC:20:39:A9:68:FE:08:0F:AE:36:5B:4A:A8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01897385117A69E60099B0F33619605A28CE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xlMGD5MLIqwgOalo_ggPrjZbSqg.roa
Signing time: Thu 20 Jul 2023 13:37:27 +0000
ROA not before: Thu 20 Jul 2023 13:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212085
IP address blocks: 2a0e:b107:ea4::/46 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:85:11:7a:69:e6:00:99:b0:f3:36:19:60:5a:28:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 20 13:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c653060f930b22ac2039a968fe080fae365b4aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:9b:42:93:3a:5b:68:a5:b6:13:c6:6d:65:
b3:74:11:94:ae:9f:71:dd:ce:4d:a7:ba:e5:cb:41:
4b:d1:a7:30:a1:d0:9e:ef:71:ef:ce:18:f3:97:df:
f0:5b:3e:23:4d:43:a9:b0:a0:87:ae:83:fa:9c:c8:
39:38:87:ae:ca:2f:ee:3c:a5:4e:80:d4:a2:82:1a:
2f:c2:e6:72:e8:22:ad:ea:3b:8c:f3:6f:ce:f6:0e:
e6:17:b9:d8:21:fd:11:a6:73:34:33:71:4a:03:7c:
f5:4d:bb:3c:54:7d:49:2b:d1:a1:74:09:10:8c:1c:
fe:8a:34:14:41:03:9d:67:60:fb:0d:1a:9a:96:f3:
a8:70:13:90:6e:e6:36:d0:d3:4d:d3:81:ca:b6:b9:
5f:bc:ed:64:85:f9:7d:07:9b:89:10:3c:f4:61:77:
12:a3:f1:32:8a:dc:f9:75:53:02:c3:73:65:1c:2c:
b1:6d:48:b2:4d:6f:08:88:2d:68:a3:3f:fa:33:cf:
02:d7:d4:c3:23:f6:95:f7:88:9d:08:7c:d1:a8:9b:
91:dc:c0:39:4d:76:d7:fa:7c:1c:7b:70:11:06:7a:
89:a5:33:b9:46:83:cb:fb:74:c2:34:81:09:9f:91:
eb:48:86:26:8e:1a:5d:ea:78:89:83:3d:8f:97:2e:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:53:06:0F:93:0B:22:AC:20:39:A9:68:FE:08:0F:AE:36:5B:4A:A8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xlMGD5MLIqwgOalo_ggPrjZbSqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ea4::/46
Signature Algorithm: sha256WithRSAEncryption
0c:5c:f9:85:2b:c3:09:f1:bb:1c:63:08:2a:21:01:f0:61:3b:
e2:bd:1c:1d:80:7a:8d:36:19:0f:35:8e:eb:e3:f3:78:bb:db:
02:86:b3:d3:89:50:e3:86:12:95:c3:b7:eb:a5:ba:79:b3:29:
0f:60:c2:1d:88:c3:06:5a:25:0f:7c:74:7c:e0:1f:d5:06:43:
f5:d4:e9:81:1b:f2:16:fa:b3:ba:85:b5:18:0f:c9:26:e8:03:
48:75:98:89:50:fd:7a:a4:52:e4:9c:d0:58:74:b6:57:c5:c5:
5b:a6:57:0b:ae:d3:eb:23:5e:01:f8:86:73:33:f5:5f:3e:c1:
b2:8b:32:e4:70:ca:60:67:9f:18:7a:70:57:61:4c:68:e3:45:
2c:22:95:e7:d9:5b:3c:58:86:78:a7:fd:20:cf:07:3e:48:03:
0f:77:b5:f5:69:4a:52:d2:b0:87:f0:fd:f0:34:79:85:da:6c:
14:08:aa:6c:0c:94:43:25:2e:84:88:ac:c9:f6:2f:ac:d5:c7:
79:0f:97:2e:06:bf:af:71:82:5b:94:c5:54:d6:a9:06:d3:c5:
41:52:44:81:db:34:21:47:c5:1e:7e:24:42:e3:fa:de:5a:66:
b8:c6:be:34:f1:aa:ba:c7:b8:4a:a8:28:a3:b9:3e:89:65:84:
37:50:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org