Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y_11j8zr1p3NoreO8LEQPhb3u54.roa
File: y_11j8zr1p3NoreO8LEQPhb3u54.roa (raw, json)
Hash identifier: Ct35XKOeEpuUWMlZ3cK81RaeezalYcZh4MXq4Dwmgdo=
Subject key identifier: CB:FD:75:8F:CC:EB:D6:9D:CD:A2:B7:8E:F0:B1:10:3E:16:F7:BB:9E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E61378B322BFAFD83BB5A139DF0A06D9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y_11j8zr1p3NoreO8LEQPhb3u54.roa
Signing time: Tue 24 Jan 2023 23:18:33 +0000
ROA not before: Tue 24 Jan 2023 23:18:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200160
IP address blocks: 2a0e:b107:900::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Jan 2023 23:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e6:13:78:b3:22:bf:af:d8:3b:b5:a1:39:df:0a:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 23:18:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbfd758fccebd69dcda2b78ef0b1103e16f7bb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:be:3d:25:34:5a:f8:0c:4f:41:d6:50:18:9d:
ab:6c:9d:6c:62:e2:ed:b7:1d:fd:be:bc:4a:46:6b:
cb:6c:f4:e9:88:1b:79:c2:1a:9e:3a:f6:f9:6e:49:
3d:41:91:cc:0d:2a:e6:39:88:ee:e0:4c:16:c0:c8:
06:99:6c:ce:a0:31:c4:2b:24:6e:cd:78:4b:43:68:
e4:aa:9c:66:e7:76:1e:65:55:e9:36:43:06:0a:ab:
c6:5e:59:12:a5:fb:0d:dc:f2:58:f9:cf:33:ea:13:
0a:cb:4f:dc:c4:1f:72:68:49:e1:81:ae:43:99:15:
6a:81:c3:f8:4f:08:29:f5:ee:0d:bc:05:b9:a7:ce:
32:97:a1:26:1d:0d:9a:3a:0e:eb:02:48:62:b1:f9:
52:66:0d:dd:cf:cc:35:21:82:e4:a1:54:0e:eb:99:
b3:b3:1a:d4:6a:dc:7c:ae:f4:53:da:df:63:d2:8a:
bd:51:e1:68:d8:8b:ac:d7:b0:38:e2:2c:74:82:59:
cf:69:cb:78:31:72:c6:fe:83:ee:03:09:67:7c:79:
49:ac:4a:3d:16:ce:05:69:7a:b3:56:3d:5c:cb:65:
c3:5f:cd:90:d4:93:81:37:ae:2c:bf:a7:f8:6f:c6:
cb:17:1b:3c:cc:97:d3:9f:0a:a1:f2:86:d9:0d:a3:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FD:75:8F:CC:EB:D6:9D:CD:A2:B7:8E:F0:B1:10:3E:16:F7:BB:9E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y_11j8zr1p3NoreO8LEQPhb3u54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:900::/44
Signature Algorithm: sha256WithRSAEncryption
23:38:05:b0:2e:13:fa:29:db:d3:b0:e5:b8:c7:23:ce:3b:21:
fe:11:c4:78:bf:d0:47:7f:b6:4c:0b:0f:58:5a:27:fa:02:97:
4f:80:27:2e:3f:e6:e9:79:3b:3f:2b:48:3d:f3:24:cf:bd:f1:
b9:3d:3a:7b:6b:fc:70:73:fc:8c:55:9b:30:cd:83:a5:b6:da:
9b:dd:ca:af:07:05:35:37:ec:0b:17:99:8e:92:fd:57:00:84:
87:c3:49:f7:26:c9:69:0b:78:95:6c:22:76:24:2c:ab:65:db:
da:7f:30:96:17:78:18:fa:90:6e:dc:82:a0:67:5f:4c:61:08:
9d:de:3a:6e:22:8c:3d:f7:8f:2f:9a:eb:82:c3:b3:02:db:9e:
53:47:f3:b1:06:8e:72:1f:ca:6c:36:3f:3e:55:38:7b:90:5c:
16:86:bb:d4:95:fe:30:33:54:a5:97:de:5d:15:65:da:0c:13:
07:fb:53:cc:5e:16:e3:76:ca:ae:b5:18:7b:dd:bb:1e:12:b3:
60:12:1a:16:94:03:d4:cc:9c:78:39:ec:14:66:03:b8:7b:01:
71:ac:4e:a9:01:2b:88:7b:0c:2f:41:cc:a4:9b:d8:a8:2d:b6:
8b:91:90:b7:c9:86:2c:47:ad:4c:97:3b:88:45:cb:4e:25:83:
76:25:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:40 2024 by rpki-client on console-fra.rpki-client.org