Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0pvpDyIqypkdi7QTq_DA4QDLGz8.roa
File: 0pvpDyIqypkdi7QTq_DA4QDLGz8.roa (raw, json)
Hash identifier: YchBMitcCQ6NkCpXmXhAMFPen8GcliZPM1RCDSsugus=
Subject key identifier: D2:9B:E9:0F:22:2A:CA:99:1D:8B:B4:13:AB:F0:C0:E1:00:CB:1B:3F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AE1F008029EA87CC6D2DF80F6686F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0pvpDyIqypkdi7QTq_DA4QDLGz8.roa
Signing time: Tue 24 Jan 2023 16:09:45 +0000
ROA not before: Tue 24 Jan 2023 16:09:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208985
IP address blocks: 2a0e:b107:18f0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 02 Sep 2023 21:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:e1:f0:08:02:9e:a8:7c:c6:d2:df:80:f6:68:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d29be90f222aca991d8bb413abf0c0e100cb1b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:cf:c0:24:5c:63:31:ec:4d:c9:1c:21:53:
51:8c:d0:1a:16:03:a8:0b:e3:14:e5:09:bc:dd:09:
61:49:8e:8d:71:68:65:fb:fb:d3:35:8f:1f:81:02:
8d:19:35:f2:88:31:9f:04:55:55:cb:b0:7d:4e:3c:
75:f2:bd:6a:67:78:71:f3:56:70:1e:e5:4c:cd:fa:
ff:b8:12:32:49:cc:8a:58:87:d1:3d:93:17:64:20:
e6:e3:b8:59:32:8f:88:0c:3f:3f:3e:11:45:57:93:
57:52:fa:e1:10:57:46:22:3f:b0:2c:d2:17:69:32:
10:2f:f2:00:ba:eb:f5:a9:df:f2:3a:06:63:4d:9d:
6b:31:2a:8c:86:e6:c9:3d:5a:d6:c6:94:2f:49:03:
16:c5:81:de:cc:2c:8b:31:dc:4d:57:62:f2:e6:fc:
aa:c2:42:7a:36:1a:23:27:d3:90:15:4e:63:93:ad:
cd:e8:ef:8a:9e:03:6a:66:05:03:ab:55:99:a9:6f:
c9:ed:73:bb:d7:1c:bc:57:aa:b8:1c:cf:46:11:8c:
46:e1:55:67:6a:57:8a:3c:a3:85:00:4c:ba:bd:8c:
0e:a8:89:6d:d4:0a:d1:0b:0c:cb:e9:d7:ae:2b:89:
e7:c1:77:41:78:84:5f:fd:60:e0:51:db:78:dc:a6:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:E9:0F:22:2A:CA:99:1D:8B:B4:13:AB:F0:C0:E1:00:CB:1B:3F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0pvpDyIqypkdi7QTq_DA4QDLGz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:18f0::/44
Signature Algorithm: sha256WithRSAEncryption
5e:55:c3:8f:8f:72:b0:76:f8:04:2f:df:2e:48:c1:40:16:dc:
ba:2d:ae:51:d1:e2:6c:38:30:b7:87:32:73:f6:8b:4c:ca:0f:
44:19:a1:e6:27:ec:f8:81:58:d9:fc:d2:3e:a3:60:d4:93:5f:
8f:4b:00:f8:0f:cc:74:95:57:6f:d5:ba:de:2b:c5:57:7a:12:
d7:19:4f:30:29:1c:ff:5d:96:80:5a:b8:97:34:0b:29:8a:3b:
0f:1f:36:ae:b5:cd:8d:73:1b:70:82:f4:eb:42:da:b7:f6:40:
b6:8c:b2:21:0e:aa:a2:0a:d6:3f:c2:50:cd:81:ed:dd:43:cf:
e9:cf:8f:bc:25:6a:23:ab:af:8a:b4:e0:3c:f8:00:6c:8f:a4:
18:5a:9a:66:6d:cb:6c:d5:2c:23:21:ee:66:09:88:24:a7:bb:
63:f0:36:ba:25:52:45:59:ad:b4:21:84:e7:d7:40:54:40:49:
05:34:c7:a5:14:b8:2f:6b:e1:45:10:6a:e0:19:fa:6d:9f:62:
f1:cb:62:10:bd:25:c7:83:e9:63:89:6e:b8:69:a7:d0:57:f4:
b0:0e:56:96:11:ca:2b:36:39:2c:ce:ae:d6:d6:a5:95:61:3b:
0d:8f:ee:88:c9:61:ac:47:00:78:6f:fc:bd:ab:5e:cf:dd:a2:
75:17:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:51 2024 by rpki-client on console-ams.rpki-client.org