Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zBpwH6WEUuRvlbgWfPi3XAUlkcA.roa
File: zBpwH6WEUuRvlbgWfPi3XAUlkcA.roa (raw, json)
Hash identifier: 5jX1kQYMrO6yxgsSdk2J+eL8o5b4GgqXiEBDuNJSY18=
Subject key identifier: CC:1A:70:1F:A5:84:52:E4:6F:95:B8:16:7C:F8:B7:5C:05:25:91:C0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7AD4CD57103EEFE1D05392722BE08
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zBpwH6WEUuRvlbgWfPi3XAUlkcA.roa
Signing time: Mon 02 Jan 2023 05:15:09 +0000
ROA not before: Mon 02 Jan 2023 05:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202976
IP address blocks: 2a0e:97c0:4f0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:ad:4c:d5:71:03:ee:fe:1d:05:39:27:22:be:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc1a701fa58452e46f95b8167cf8b75c052591c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:7e:72:13:bf:2e:b4:0e:a9:d0:78:a4:a8:
11:45:d6:69:6b:42:72:e1:e8:d4:0b:f2:04:68:ee:
03:1d:c8:e6:00:a4:b8:fe:be:a8:ff:ff:af:37:74:
ba:bc:79:b1:85:59:be:16:04:c9:42:da:1c:3a:40:
75:a7:f8:05:59:85:78:63:08:9c:0d:f7:9f:29:f1:
69:1f:5d:af:37:81:2a:f7:8a:5d:a7:45:41:bd:30:
a9:e1:49:34:20:44:c9:25:f6:ac:a2:30:97:e7:53:
d6:93:bc:d1:9a:d6:cb:5a:e5:93:37:ec:c5:61:56:
10:a0:cb:02:d8:f1:80:1b:ad:a1:b4:00:ba:84:b0:
c0:44:fe:18:f6:50:da:56:9a:11:1b:bd:b4:f9:b3:
7f:5d:81:05:ad:59:50:a5:c5:7a:cd:21:ad:f4:5e:
90:28:c2:eb:cf:79:35:37:8b:d6:f7:f7:04:30:42:
11:f0:df:d8:0b:3a:ff:99:fa:e0:09:ab:91:e1:3a:
b3:c7:0b:32:be:9c:cd:df:eb:db:59:25:af:6a:77:
04:9e:18:45:54:a1:49:db:15:f2:35:2d:b9:c2:d2:
f6:27:9f:16:38:0f:40:31:1f:ac:e9:ad:da:33:44:
50:a8:e3:f9:57:45:61:97:53:75:6d:fa:29:d4:bc:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:70:1F:A5:84:52:E4:6F:95:B8:16:7C:F8:B7:5C:05:25:91:C0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zBpwH6WEUuRvlbgWfPi3XAUlkcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:4f0::/44
Signature Algorithm: sha256WithRSAEncryption
6b:aa:0c:a5:04:c0:f7:69:58:e1:f1:9b:a3:3a:4f:8e:fc:d4:
1f:83:7a:14:3a:ad:ce:7c:f0:a2:8a:8c:f8:a4:ed:3b:b4:ee:
ac:9a:a9:49:e8:4a:44:4b:72:63:d9:da:6b:2b:fe:cd:4f:7b:
2e:49:c3:f5:82:80:9e:c1:9c:fb:34:0a:76:1f:f6:4a:25:2a:
60:81:1b:4c:ea:6c:a8:59:d5:88:cc:f3:69:86:64:b5:30:a2:
d2:82:ae:3d:56:b8:93:c7:5a:bd:b2:dd:83:76:41:60:48:2a:
20:5a:59:63:35:f2:1d:94:32:9f:bb:62:8d:63:07:17:b3:37:
96:4f:30:e8:e3:3f:98:ae:51:c2:9d:f6:1c:22:f9:9c:fa:89:
f0:32:b7:a2:da:2e:13:5b:3f:a6:c2:10:78:30:7d:84:cf:aa:
d1:a9:14:7e:4e:80:60:32:60:84:ea:8e:39:c3:99:40:9c:d7:
1c:79:42:c7:de:41:94:d4:fd:02:ff:9d:f1:82:b6:24:a5:c2:
e2:f3:61:37:6c:48:7e:f2:82:fe:21:e1:e9:56:d6:ab:f6:a9:
77:1d:b9:60:0c:c7:da:1f:f1:fb:cb:d6:e0:ce:62:76:4b:1a:
d0:2e:b3:e5:27:a7:e8:17:46:ed:bb:f0:2c:a8:50:92:fe:71:
59:3c:51:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:52 2024 by rpki-client on console-ams.rpki-client.org