Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pRu6Z--YOwsBf1boM1KbSwUEcVU.roa
File: pRu6Z--YOwsBf1boM1KbSwUEcVU.roa (raw, json)
Hash identifier: WqFeIaJVU3jNTT7ODIVqko3008/EW4MRHkFlCwGd+mE=
Subject key identifier: A5:1B:BA:67:EF:98:3B:0B:01:7F:56:E8:33:52:9B:4B:05:04:71:55
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186FF15DAF244DA073DAAF5F774606BAC47
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pRu6Z--YOwsBf1boM1KbSwUEcVU.roa
Signing time: Mon 20 Mar 2023 12:54:27 +0000
ROA not before: Mon 20 Mar 2023 12:54:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207683
IP address blocks: 2a10:2f00:108::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:15:da:f2:44:da:07:3d:aa:f5:f7:74:60:6b:ac:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 20 12:54:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a51bba67ef983b0b017f56e833529b4b05047155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b8:19:70:73:d0:3d:d2:f8:5e:a8:f6:8a:53:
4a:2f:99:fc:ef:12:57:cf:23:65:c8:a2:e0:f8:c6:
46:81:be:42:fa:f7:73:86:62:fa:f6:1a:60:29:3f:
b8:4f:4c:6f:52:96:3a:75:97:6f:dc:04:2b:58:57:
9d:77:eb:a9:6b:2d:9d:41:a3:b9:b1:5e:1c:0a:8e:
67:9f:8d:b7:99:f6:22:0c:d5:c4:b7:65:2b:05:46:
c8:7f:cf:06:6f:78:e7:a4:c3:33:7f:c5:88:6f:99:
e8:8a:32:73:cd:64:8d:35:2c:c4:b5:b5:d5:51:88:
3d:2b:ca:26:82:96:e5:f8:07:a7:1e:23:64:99:20:
79:db:80:f5:43:bc:7e:f4:99:5e:5f:c4:30:78:88:
73:30:db:d2:f3:ff:72:a6:48:f8:db:23:39:dc:ed:
8c:fd:99:4d:ca:88:03:4d:11:73:32:34:a2:14:bb:
d3:c8:c4:77:a3:b5:73:5c:77:5e:79:10:5a:33:6e:
f7:66:c4:35:8e:97:a8:b1:c7:0d:51:ed:fe:dd:bd:
20:c0:52:87:ba:c6:af:f4:3b:17:13:33:d5:66:eb:
2e:ad:97:9f:e7:af:7a:be:e4:9d:c0:39:c6:a0:d8:
c6:35:29:21:50:0a:08:f6:c1:d5:ef:de:b9:ac:1d:
b3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1B:BA:67:EF:98:3B:0B:01:7F:56:E8:33:52:9B:4B:05:04:71:55
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pRu6Z--YOwsBf1boM1KbSwUEcVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:108::/48
Signature Algorithm: sha256WithRSAEncryption
62:fb:46:e9:83:a9:65:73:1d:71:d4:e2:56:14:a6:cf:a4:06:
8b:f9:fa:09:3d:c9:de:29:8b:03:15:b7:74:d9:70:37:65:a7:
fe:2c:f9:c3:8f:50:b6:c3:29:19:8a:b3:cf:26:3f:28:19:b7:
50:86:e6:2c:a6:5f:cd:db:74:5f:26:15:2d:d6:0a:85:51:5d:
48:84:a8:04:8b:26:73:71:19:e0:6b:a1:cc:01:f4:09:5e:0d:
54:65:39:ef:e0:c8:52:e8:6b:23:20:b3:cc:a2:91:22:20:b3:
69:6a:9d:86:80:6a:53:ff:2b:78:80:26:0d:18:40:6f:1e:97:
78:8c:31:ab:7a:b1:a0:e2:27:a9:6a:ea:87:9d:4c:c6:00:56:
89:eb:cb:0d:a5:d3:9f:98:4d:a3:1f:66:7a:57:67:a6:ff:b3:
96:42:08:ef:4c:ce:7a:49:83:e7:a6:5f:06:74:2c:7f:87:b3:
fa:df:5c:b1:b7:4e:0b:06:a6:4c:6a:de:1e:10:f1:4e:f8:4a:
d6:cf:7e:71:d2:22:53:89:77:1e:2b:90:17:fd:f4:8b:6e:cb:
16:8f:54:a7:b4:77:b7:54:eb:6f:5f:74:d5:a6:a6:d9:79:63:
f2:bc:5e:af:3b:60:d2:21:2b:8c:ba:b2:2d:24:96:15:eb:63:
be:9e:44:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net