Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/ExVjbLDC9qsi7k4FedX93u6_BrQ.roa
File: ExVjbLDC9qsi7k4FedX93u6_BrQ.roa (raw, json)
Hash identifier: rkW7hayYtwtSHwJrXlYSbEQexL2cvSpwzEIYOVHyrlE=
Subject key identifier: 13:15:63:6C:B0:C2:F6:AB:22:EE:4E:05:79:D5:FD:DE:EE:BF:06:B4
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 01856B00AA1EF903C008BE5E745FDD8EDFB5
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/ExVjbLDC9qsi7k4FedX93u6_BrQ.roa
Signing time: Sun 01 Jan 2023 01:44:43 +0000
ROA not before: Sun 01 Jan 2023 01:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a07:e02:41::/48 maxlen: 48
2a07:e00:19f::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:00:aa:1e:f9:03:c0:08:be:5e:74:5f:dd:8e:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jan 1 01:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1315636cb0c2f6ab22ee4e0579d5fddeeebf06b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:17:b7:14:fc:52:f4:d5:ed:b2:80:ed:b9:
28:32:b1:e9:c3:ca:24:09:6d:81:2c:39:a6:8a:c5:
c7:f7:1c:ea:ba:66:81:6e:e2:8e:b2:7d:75:92:dc:
33:d8:02:df:11:9c:2a:8e:01:0d:65:41:cc:0b:42:
34:94:63:01:1b:a9:94:ac:30:10:fe:8a:cd:7d:15:
42:7c:aa:70:36:0d:98:97:93:51:7d:c8:4d:30:d9:
69:19:53:52:c2:3a:c4:5d:f1:65:81:0f:fe:45:56:
a6:c1:8c:69:21:33:00:b3:8e:1b:f8:a2:05:c9:73:
66:fc:ea:56:c6:23:51:39:28:71:5a:97:8c:30:96:
4b:68:2a:31:2b:61:65:85:71:74:0d:59:26:d1:60:
58:d6:8d:29:08:fe:58:5d:3d:6c:7c:82:8f:f2:a0:
49:d4:bc:e8:33:d5:34:4e:1a:a9:0f:10:1a:76:63:
1f:1e:be:89:e7:b8:00:f7:26:33:b7:aa:02:4f:b2:
e9:c3:9f:3a:4f:70:0a:de:90:38:1e:16:0e:6e:53:
52:61:5f:33:43:c8:20:cc:3e:59:92:dd:98:37:ef:
28:6e:90:18:7c:36:0b:bd:fb:9e:84:91:42:e2:54:
53:d7:05:34:41:4f:cc:c3:4b:fe:91:44:6e:fc:0c:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:63:6C:B0:C2:F6:AB:22:EE:4E:05:79:D5:FD:DE:EE:BF:06:B4
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/ExVjbLDC9qsi7k4FedX93u6_BrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e00:19f::/48
2a07:e02:41::/48
Signature Algorithm: sha256WithRSAEncryption
53:1b:2a:56:df:b7:b1:1b:b5:54:cf:c7:3b:39:de:b2:82:d8:
4f:80:82:9c:69:5d:4e:f7:b9:a0:57:b4:d0:dd:59:ef:f7:7d:
c1:09:bb:24:37:c0:34:b2:a3:df:47:7e:93:51:f6:16:99:50:
39:9e:19:74:35:91:6a:a2:03:cc:b4:88:66:be:37:8d:f3:9f:
f1:76:49:10:fd:e3:e7:b9:79:d8:d8:91:d6:46:d7:4a:33:d2:
f6:bf:df:6d:82:b2:01:55:9a:6b:32:be:7d:6e:37:26:6a:49:
68:a6:e6:81:f0:84:b5:88:71:b5:46:5f:66:fb:e3:48:2f:68:
97:40:65:b2:b2:74:b4:87:0a:0b:8f:de:a3:b2:76:cc:59:3f:
38:0e:5b:c8:f5:cc:1f:3e:01:0d:3d:64:e8:af:b0:d8:01:bf:
76:83:3f:c7:f3:62:00:04:b3:5a:8e:ef:f8:90:0c:7f:c6:26:
9a:e9:17:62:85:16:62:50:84:75:7a:6f:22:dd:21:d1:0f:e6:
14:2e:14:78:df:9e:24:74:51:61:0d:90:ec:38:b4:ba:e0:ea:
38:fc:86:6a:9b:6b:1d:8e:c7:20:d9:b8:51:54:2c:c0:08:a5:
a0:3b:0c:2c:e7:a4:18:6d:2a:bf:c2:4a:de:5d:3a:b3:c3:5a:
84:27:9c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:45 2024 by rpki-client on console-ams.rpki-client.org