Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/yDIytRL8t5bjwPGdh9zUT0CV248.roa
File: yDIytRL8t5bjwPGdh9zUT0CV248.roa (raw, json)
Hash identifier: l2MVxpj4yYbOLASyjpmGpv71T04zzb2kDpdHiIK9J18=
Subject key identifier: C8:32:32:B5:12:FC:B7:96:E3:C0:F1:9D:87:DC:D4:4F:40:95:DB:8F
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 018A085B72E748D1AC0C3F9EC1692EEFFCF0
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/yDIytRL8t5bjwPGdh9zUT0CV248.roa
Signing time: Fri 18 Aug 2023 11:15:25 +0000
ROA not before: Fri 18 Aug 2023 11:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51345
IP address blocks: 2a13:1c47:fff0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:5b:72:e7:48:d1:ac:0c:3f:9e:c1:69:2e:ef:fc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Aug 18 11:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c83232b512fcb796e3c0f19d87dcd44f4095db8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:a1:a9:48:71:92:6c:a3:b0:8d:f4:34:64:
e8:07:87:d5:df:14:30:0d:54:3e:15:e8:4c:96:62:
2e:d0:4a:e0:6e:5e:48:80:4a:62:44:7a:08:d5:b0:
eb:0f:6a:1f:3a:d9:95:b7:ab:0a:d7:33:23:88:87:
17:4a:2e:f3:04:80:7e:72:ab:2f:cf:da:2e:f3:e8:
ac:7b:d5:e9:94:ac:e6:6e:c8:4b:64:0d:e3:4e:db:
8f:62:31:e2:a3:8d:21:bd:c0:b2:ca:c6:af:c3:0e:
e2:ce:2f:bd:c0:f5:9a:54:d7:1a:ff:1b:a8:71:14:
88:c2:e6:45:4c:92:af:66:38:c0:de:22:95:02:0b:
36:0a:00:ff:1b:ec:3e:7e:c7:c2:04:8e:44:1b:95:
43:48:cc:28:85:af:5c:57:01:14:82:f8:f9:fc:2f:
4d:ad:52:d4:80:69:f3:b4:54:5a:a9:74:be:2f:0f:
a7:bb:39:6d:b0:d8:60:ad:c1:39:ff:5f:c0:55:00:
4c:6e:2c:b2:cb:13:11:51:be:7c:82:14:c1:3a:28:
11:58:86:df:09:9e:54:9f:ed:4e:98:12:90:dc:f0:
a1:cd:67:57:08:31:08:14:74:82:9d:18:96:d9:06:
36:34:f3:75:87:f2:c6:4f:eb:e3:21:e9:28:b6:ec:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:32:32:B5:12:FC:B7:96:E3:C0:F1:9D:87:DC:D4:4F:40:95:DB:8F
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/yDIytRL8t5bjwPGdh9zUT0CV248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
d9:a6:a9:a8:05:b5:68:1a:c5:1d:14:c7:32:46:7c:20:ec:11:
c2:19:f1:8d:d8:f7:d2:57:e5:01:cc:e7:e9:b0:65:2e:36:5b:
4b:90:96:c3:5f:4b:dc:e5:04:b6:ff:f3:2d:d7:19:c1:4e:de:
e4:33:2a:76:43:8b:99:cf:1c:6c:ac:61:22:a8:4e:fe:2b:cb:
f5:44:fe:d3:2e:64:cd:35:02:8e:bb:7d:fa:fa:80:6b:76:9a:
89:7f:92:cc:35:4b:8c:25:13:01:88:d2:36:aa:6d:ea:d9:e5:
f0:8d:56:ec:3b:72:5d:cf:39:1e:42:37:30:77:69:e3:24:5f:
27:59:6d:df:51:78:e1:6d:6f:2f:10:f7:77:94:d1:49:44:8a:
3e:46:50:bf:87:9b:98:54:ec:1e:75:c5:71:e7:4b:85:9d:18:
b5:e1:23:2d:d5:5f:4c:bc:53:94:54:98:40:ac:ab:bb:27:90:
6a:11:90:68:b3:b2:02:5f:a2:64:40:6f:9c:7d:21:43:64:f5:
87:66:fc:48:15:7e:96:a4:87:7b:f8:aa:e9:37:07:c1:84:9f:
6c:75:3a:3a:c2:12:78:67:64:fa:b2:cd:d0:bd:0b:f6:61:cd:
c4:d2:fc:31:6b:43:42:78:a7:19:5a:c8:ac:7b:59:cd:41:37:
24:8d:6e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 21:01:12 2023 by rpki-client on console-fra.rpki-client.org