Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z9kzhRYyvHb64gUu5-qax8BdxPA.roa
File: z9kzhRYyvHb64gUu5-qax8BdxPA.roa (raw, json)
Hash identifier: QJ5C8hmw8hhYGspY6K3MWEI8BCQQqMGLZWTxLpSjx74=
Subject key identifier: CF:D9:33:85:16:32:BC:76:FA:E2:05:2E:E7:EA:9A:C7:C0:5D:C4:F0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E8236A764CBCED00CDED244E29FE1A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z9kzhRYyvHb64gUu5-qax8BdxPA.roa
Signing time: Mon 02 Jan 2023 05:15:39 +0000
ROA not before: Mon 02 Jan 2023 05:15:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213069
IP address blocks: 2a10:2f00:13a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:23:6a:76:4c:bc:ed:00:cd:ed:24:4e:29:fe:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfd933851632bc76fae2052ee7ea9ac7c05dc4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:bf:7b:2f:9e:08:bc:de:79:b8:b5:bb:76:
f1:db:6c:97:88:31:f7:96:21:c2:2f:c0:b5:a8:38:
32:91:e3:e7:1f:da:c7:59:83:0d:eb:de:51:b1:b1:
61:10:e4:7f:3a:18:62:e1:f7:e7:8b:5f:17:14:94:
ca:95:f8:0e:21:cf:23:6d:4e:9b:97:b4:88:89:2f:
5f:7f:86:34:f3:78:c9:95:f9:cd:82:bf:9c:7e:dd:
52:48:8a:1c:09:f6:a9:91:ac:b7:1c:2d:26:f7:29:
66:f6:53:27:53:48:f5:a9:6e:ed:1b:5a:11:ee:9e:
1e:5e:ab:ed:d6:8a:ec:6f:35:70:ad:0b:fc:61:35:
f9:8a:6a:bb:bf:fd:7b:ee:f8:bd:d7:4b:6e:4c:fd:
55:d0:73:84:1c:ac:c6:de:38:fb:8d:ac:d3:b0:a8:
84:17:00:53:83:09:26:78:cb:48:1b:37:aa:1c:30:
46:42:1b:0e:b0:79:22:a9:e7:af:9c:5a:8f:d1:5e:
4d:69:53:5c:e2:53:f5:09:b8:7b:94:b3:ef:6f:b1:
25:8c:fd:c5:78:7c:0e:b3:f9:58:11:21:e5:ad:3c:
52:8c:73:19:66:92:43:b4:2e:02:a6:86:6a:3e:ab:
7e:cd:d2:5a:66:d7:07:0c:84:82:2c:93:60:2e:13:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:33:85:16:32:BC:76:FA:E2:05:2E:E7:EA:9A:C7:C0:5D:C4:F0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z9kzhRYyvHb64gUu5-qax8BdxPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:13a::/48
Signature Algorithm: sha256WithRSAEncryption
07:a4:00:48:e5:91:35:4d:85:2e:99:74:e1:6f:23:b6:6c:9a:
50:a5:f8:44:82:fa:ed:da:d4:6c:c8:20:a2:6c:f1:ef:91:8b:
1e:fe:7d:e3:52:5c:25:13:e4:b2:17:3a:23:a4:03:f5:67:c2:
d4:d9:0a:1b:6c:31:8c:7b:ec:37:df:07:f6:f9:68:65:bd:dd:
e5:d7:24:c6:b3:ab:af:49:f4:14:8f:d4:b2:e9:2d:78:a5:db:
46:e0:5d:5d:bd:ae:1b:2a:b2:0f:93:a8:75:56:9c:b6:9d:c1:
68:ae:7d:86:07:bb:5a:fa:c4:21:de:ab:b0:b5:d2:a4:a2:bc:
a3:5e:87:19:5e:23:4c:f9:da:23:b9:f5:5b:53:78:6d:da:eb:
b7:53:f7:f0:d7:75:a0:27:9a:ea:f3:24:a9:e5:47:f1:55:2f:
79:da:54:83:37:40:7d:e8:b1:0a:3a:df:b2:ba:42:f1:40:4f:
b3:a9:90:7e:e9:c8:56:9e:c1:af:39:e4:0d:2e:68:35:8f:70:
3d:4a:75:7e:9f:90:55:02:01:81:a5:f4:8b:69:f8:4a:06:f2:
e5:68:25:5c:ce:28:26:b6:37:6b:5a:71:2b:6d:be:cf:30:b9:
25:7f:15:10:88:01:6e:28:21:dd:27:dd:18:93:56:12:67:12:
04:cd:2e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:34 2024 by rpki-client on console-fra.rpki-client.org