Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-AirOFpi364g43aP_6AWkReH1mE.roa
File: 1-AirOFpi364g43aP_6AWkReH1mE.roa (raw, json)
Hash identifier: wjjTasccB5V2ZKc+ZI8FyWFR/xd44FHzsi+CaBeHCbQ=
Subject key identifier: F8:08:AB:38:5A:62:DF:AE:20:E3:76:8F:FF:A0:16:91:17:87:D6:61
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01880B3F7B29FC7652D6B3BF3518FFE319EE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-AirOFpi364g43aP_6AWkReH1mE.roa
Signing time: Thu 11 May 2023 14:38:09 +0000
ROA not before: Thu 11 May 2023 14:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53667
IP address blocks: 2a06:de01:400::/38 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 May 2023 01:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:3f:7b:29:fc:76:52:d6:b3:bf:35:18:ff:e3:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 11 14:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f808ab385a62dfae20e3768fffa016911787d661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:80:21:cd:84:3b:ba:e5:b4:27:aa:87:16:cf:
1c:7a:29:c8:70:d5:7c:d0:9f:50:f8:86:62:d5:06:
f8:6d:4a:07:40:11:b5:1f:cd:9a:6e:ef:8e:80:cd:
20:1c:96:10:bf:6c:aa:23:47:92:99:f8:a4:1d:6e:
06:1c:24:55:40:18:6d:0d:04:17:3a:0e:e3:f2:6b:
57:2c:96:f9:38:90:d9:22:9f:06:24:45:3b:cb:e2:
c7:54:be:39:55:fa:d6:76:3e:fc:a4:f0:2b:ba:54:
59:76:0b:c5:13:e4:5c:a3:3a:2e:e3:6b:09:74:dd:
53:f2:d0:f8:63:99:c3:d3:05:5a:f1:33:8d:5a:58:
92:36:ff:85:b4:d0:1c:60:98:33:b4:e2:47:e5:0a:
0c:41:82:79:a9:7a:ab:63:b9:9c:23:a5:6d:02:61:
51:83:3a:96:df:8c:10:87:d1:e3:c4:43:59:9a:93:
51:87:8e:a4:d3:09:c3:a9:d1:d7:a6:fe:5d:99:a1:
45:a6:84:91:10:1a:a8:1a:c1:db:7c:4e:cf:4f:23:
f4:68:48:42:57:e6:5d:fe:aa:18:02:65:39:db:92:
37:dd:4d:72:e0:f1:09:f7:32:39:f9:9f:25:6a:1e:
71:cf:b5:42:7e:98:27:fd:d2:87:56:3d:68:2d:86:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:08:AB:38:5A:62:DF:AE:20:E3:76:8F:FF:A0:16:91:17:87:D6:61
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-AirOFpi364g43aP_6AWkReH1mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:400::/38
Signature Algorithm: sha256WithRSAEncryption
67:4b:f8:8b:5d:a4:f0:c8:e1:e8:a9:da:65:c4:cf:46:62:17:
6a:95:85:c7:85:c6:91:7c:4f:f8:32:68:54:be:ff:30:95:64:
c0:39:5d:4f:69:0d:fd:7e:3e:e7:87:fe:67:58:f7:c9:29:13:
a2:71:ff:d2:47:11:65:4b:4e:04:7d:66:0a:c8:08:3c:a9:f2:
84:f9:e5:78:34:bb:23:07:1a:3b:6a:66:87:22:58:46:27:18:
bd:6e:2c:2e:cd:69:0c:ef:c1:76:b9:a6:f4:3d:09:2e:91:e4:
10:33:b6:0b:eb:f3:12:dc:c9:fa:7d:00:43:63:75:cf:ea:f4:
19:e1:87:c0:e6:b4:49:86:0d:bf:23:7f:47:8b:17:e9:85:88:
2d:0b:19:64:24:60:16:4b:ba:73:c6:ed:0f:64:3f:12:00:3c:
1b:37:43:d2:cf:8e:75:f8:2a:43:c3:52:98:88:d4:ab:15:d2:
20:a7:a3:38:df:95:9f:e8:b0:97:50:4d:50:45:7b:f2:b6:a5:
50:bb:ea:6f:98:62:08:bc:73:38:e9:b3:d5:17:20:92:bb:bd:
75:8c:39:8e:d0:ae:e9:a7:98:b9:05:b7:89:52:7e:4a:7d:c2:
2b:19:ad:96:3e:c4:11:6f:49:a7:ed:ad:9d:38:5d:16:58:e1:
cf:17:f2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:51 2024 by rpki-client on console-ams.rpki-client.org