Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xmeIBvPg4GbAjlRO_itkyqQz7Fc.roa
File: xmeIBvPg4GbAjlRO_itkyqQz7Fc.roa (raw, json)
Hash identifier: Za+wfZpJddVr0vb5PY/ehLWVXKa2v5RTs2xzAo6Feh0=
Subject key identifier: C6:67:88:06:F3:E0:E0:66:C0:8E:54:4E:FE:2B:64:CA:A4:33:EC:57
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AF76DC236E13DAD32D0F9A9134594
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xmeIBvPg4GbAjlRO_itkyqQz7Fc.roa
Signing time: Tue 24 Jan 2023 16:09:50 +0000
ROA not before: Tue 24 Jan 2023 16:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211486
IP address blocks: 2a0e:b107:dc6::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:f7:6d:c2:36:e1:3d:ad:32:d0:f9:a9:13:45:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6678806f3e0e066c08e544efe2b64caa433ec57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:67:5f:e4:80:5a:22:42:5a:0c:97:0b:5f:
3f:5b:7a:ed:f4:44:b9:9d:f5:1f:a7:1c:4f:2a:bd:
19:2b:db:d6:91:51:61:52:79:d5:73:e4:c1:d3:ac:
00:6b:b8:68:f3:58:63:fc:5a:90:01:e9:fc:14:31:
91:17:d8:a0:ab:7c:38:0a:82:29:90:71:6e:04:c0:
94:18:07:9e:3a:16:27:33:11:3f:8a:5a:57:e3:29:
71:04:4b:95:fd:dc:3e:85:90:ee:b1:b3:25:46:9c:
7d:66:a3:99:3a:0a:d9:90:38:f1:b6:4d:a9:b3:97:
72:ad:ed:f8:4a:bf:a4:3e:80:0f:a9:c1:b8:15:bc:
14:14:1c:18:b4:2a:e4:c4:ee:62:8a:b3:1c:60:3d:
a3:33:d4:f3:1d:29:8f:88:cb:ab:58:41:52:da:b2:
9d:7b:09:51:52:98:a5:b1:b5:dc:b6:c7:76:6f:75:
70:7b:a3:e9:21:9d:fc:03:f1:15:60:dc:2f:65:4a:
d5:60:d6:ae:ce:ae:66:64:9a:27:ed:38:5f:84:ab:
35:ba:f7:b0:96:4a:c7:87:86:22:ea:39:65:4f:4b:
0c:d3:66:e9:de:21:a8:9a:8a:3b:3b:e0:43:b0:08:
f7:c2:ff:c2:9c:58:33:e9:46:5e:ab:6c:65:e4:9e:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:67:88:06:F3:E0:E0:66:C0:8E:54:4E:FE:2B:64:CA:A4:33:EC:57
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xmeIBvPg4GbAjlRO_itkyqQz7Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:dc6::/48
Signature Algorithm: sha256WithRSAEncryption
be:f6:10:18:94:14:32:e4:74:6d:ad:98:2f:17:f2:2e:2f:38:
d4:fc:08:fd:aa:6a:bd:d2:35:2c:b6:05:ed:6f:55:4a:22:5b:
63:1b:5a:70:7b:9e:6c:81:9d:31:38:37:5f:d5:be:31:45:21:
bf:95:27:92:54:c7:66:64:9c:c3:33:25:22:94:ad:48:8f:4c:
7c:d3:66:c0:d9:cc:76:6f:89:b5:e8:40:e7:be:45:e8:de:14:
6d:e0:e4:87:70:eb:74:4e:4a:c3:35:04:08:21:1c:76:46:89:
85:8d:75:4a:33:2b:2e:16:e2:03:95:4d:97:0b:cc:7a:c8:e3:
bc:ca:24:b7:cc:0a:ec:60:c9:6c:aa:e9:84:73:3d:a1:69:b8:
5e:ca:ca:2a:76:09:fd:ef:d3:81:c1:69:6a:2d:f0:3a:33:69:
67:28:c6:5b:96:d0:a9:75:83:8c:f2:b4:61:bb:a7:f4:a9:93:
60:4e:96:1c:da:f0:ee:c2:d7:25:3f:a6:9e:38:35:86:cf:7f:
c6:22:03:30:7f:b3:5b:1b:4d:8d:02:2a:29:16:30:3a:ff:f2:
56:a7:0d:3a:e6:c0:f7:bb:2f:7f:21:a0:b7:81:41:70:91:6d:
97:8c:65:d5:a7:bf:b0:0b:f0:a3:d8:f9:b6:e6:ac:5d:cb:73:
25:f4:ff:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org