Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/JicPsv1VwKsI-4GXRjHe-shUaEU.roa
File: JicPsv1VwKsI-4GXRjHe-shUaEU.roa (raw, json)
Hash identifier: buxgSndWHmIhg/JJvVK9gVUeY0IsPnPotRdhu+2rLe0=
Subject key identifier: 26:27:0F:B2:FD:55:C0:AB:08:FB:81:97:46:31:DE:FA:C8:54:68:45
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 018973E7EC9ECCC653D1ECF4D7FE85BA194E
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/JicPsv1VwKsI-4GXRjHe-shUaEU.roa
Signing time: Thu 20 Jul 2023 15:25:26 +0000
ROA not before: Thu 20 Jul 2023 15:25:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203416
IP address blocks: 2a13:c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jul 2023 23:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:e7:ec:9e:cc:c6:53:d1:ec:f4:d7:fe:85:ba:19:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Jul 20 15:25:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26270fb2fd55c0ab08fb81974631defac8546845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:73:05:7c:63:cf:04:fb:21:10:c8:76:dc:
bd:f3:63:a4:c6:56:a8:c4:f2:fc:1c:ee:28:d8:f1:
bd:f6:bc:04:f7:ac:a6:46:7d:a8:3d:3f:ca:01:d7:
22:b5:b9:7c:56:2c:08:21:48:33:7c:0b:74:cb:62:
b3:77:fa:c2:ed:e6:b1:12:31:7c:37:ae:64:8f:62:
04:dd:65:2f:80:0d:ef:74:f0:85:f5:72:fa:7f:90:
62:15:98:03:05:20:34:aa:a5:31:cb:ba:c6:c0:c7:
d5:8f:cd:bb:0c:1a:a6:96:b2:ba:e6:01:db:af:73:
f0:4a:7f:34:e7:79:ad:1b:c1:80:07:45:37:b9:92:
cf:97:27:93:3a:dd:7a:b0:23:91:fd:ad:14:d1:3b:
3c:02:46:f0:16:3b:50:91:a1:c3:9b:4d:af:66:f6:
46:a9:32:ff:08:c3:88:e3:cb:3c:73:63:0e:55:e2:
24:e8:f7:2e:9f:ab:3d:a2:2d:a0:c5:18:54:cb:83:
0e:fe:8e:3c:7d:b5:53:44:6f:af:5e:25:99:08:30:
b5:7a:19:7c:3a:dc:92:35:53:0d:78:90:39:22:79:
a5:b4:4d:37:28:0c:0e:cb:a2:19:a0:25:85:fa:ea:
4c:d2:da:0e:2b:99:97:e8:57:e9:4e:aa:51:a1:52:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:27:0F:B2:FD:55:C0:AB:08:FB:81:97:46:31:DE:FA:C8:54:68:45
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/JicPsv1VwKsI-4GXRjHe-shUaEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c0::/48
Signature Algorithm: sha256WithRSAEncryption
92:e1:39:e7:29:21:68:96:77:d8:c3:d7:d4:98:ee:b6:e3:e3:
7d:84:aa:b1:cc:b1:0e:ac:ad:fc:33:a3:a2:7d:96:fd:a8:7d:
85:22:60:13:6c:37:73:9f:99:db:47:fd:0c:59:09:1a:06:de:
e7:71:09:77:d3:50:88:2b:ca:8b:6b:81:13:fd:de:1c:01:2f:
06:6a:45:62:55:d5:ef:96:55:d5:96:e8:57:f8:41:d0:1c:2d:
3a:cc:71:dd:cc:75:e2:69:e1:b5:2f:5b:a9:04:b5:77:e5:ab:
bc:15:7a:00:32:ed:f9:86:69:d9:5b:22:1a:b2:8e:4d:fd:bb:
e6:8c:9e:09:5a:b6:05:38:3a:eb:3a:35:4c:86:2e:47:ad:ed:
73:39:69:8a:b8:7f:7d:d3:38:0e:a4:ff:f1:72:10:43:27:a7:
b7:00:15:d4:04:1e:41:28:28:0d:1d:0f:7d:70:fb:39:6a:4d:
26:25:00:84:b8:2a:2e:06:f3:22:a3:10:32:53:f5:1c:b7:e9:
ec:49:d4:94:ed:7f:ab:59:3a:23:2d:37:b0:2b:a4:61:05:b6:
c4:e9:12:b8:ec:ad:ee:ef:f0:db:cf:af:55:69:00:68:3d:79:
b6:28:1c:11:da:e3:a6:b0:f2:25:7c:27:f2:d3:95:57:16:88:
d0:ca:85:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:49 2024 by rpki-client on console-ams.rpki-client.org