Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-B66fIPWlleJjfocXVnCxjOkXtU.roa
File: 1-B66fIPWlleJjfocXVnCxjOkXtU.roa (raw, json)
Hash identifier: PEY1PFyEp9vlWFLA/RJFwt79kkFbIjBmfNrNdnF8fD8=
Subject key identifier: F8:1E:BA:7C:83:D6:96:57:89:8D:FA:1C:5D:59:C2:C6:33:A4:5E:D5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7D460E06439CE6841EA7C5F8E6D88
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-B66fIPWlleJjfocXVnCxjOkXtU.roa
Signing time: Mon 02 Jan 2023 05:15:19 +0000
ROA not before: Mon 02 Jan 2023 05:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208529
IP address blocks: 2a0e:b107:178a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 07 Jan 2023 21:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:d4:60:e0:64:39:ce:68:41:ea:7c:5f:8e:6d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f81eba7c83d69657898dfa1c5d59c2c633a45ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:fc:94:c1:4f:c3:d2:00:36:b3:d1:4b:47:
97:49:57:bf:dc:e8:4c:aa:06:3a:7e:1d:35:8a:21:
13:e8:c2:9a:98:89:ae:5f:5c:d5:b8:70:03:26:d4:
73:1d:cf:1d:04:c3:3b:68:3a:a2:3e:74:bd:3b:23:
78:d0:2f:d0:3c:74:14:12:2d:e4:d8:7c:8d:67:8f:
5a:37:af:7b:ee:ab:64:67:ee:04:19:59:48:e0:b6:
7d:17:94:33:b3:b0:ef:f4:66:20:ca:75:46:de:0a:
90:97:6b:19:61:25:65:0f:75:b8:3a:e3:5c:3a:23:
37:4d:7d:c7:69:86:0d:01:db:24:44:cc:83:22:ca:
b0:95:e8:58:49:32:58:f8:9f:a6:96:a2:a5:db:33:
23:41:f7:ee:d3:bd:ba:89:56:42:4e:cb:b3:83:95:
d5:53:25:c4:bb:2d:58:58:7a:75:f2:09:91:9a:d6:
6f:4d:dd:87:0e:ae:fd:bb:7a:a3:bf:83:f2:5b:2f:
8b:ce:8a:f9:3a:4c:3c:7f:d7:01:31:e7:6c:de:6c:
41:8e:58:e1:4d:54:ce:2d:95:77:42:35:35:88:1f:
70:07:8f:58:fb:d4:19:77:2c:53:d5:24:7f:45:2d:
d2:33:36:0d:e5:ef:87:8c:18:82:6b:af:94:90:12:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:BA:7C:83:D6:96:57:89:8D:FA:1C:5D:59:C2:C6:33:A4:5E:D5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-B66fIPWlleJjfocXVnCxjOkXtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:178a::/48
Signature Algorithm: sha256WithRSAEncryption
82:7f:a4:54:b8:5f:43:47:59:9e:da:d8:c6:e1:f9:0f:53:df:
19:12:c3:61:46:26:36:f3:bb:28:c5:8d:2c:52:4f:48:57:7f:
54:bf:4f:18:0a:94:0f:8b:68:2c:f0:cf:03:60:30:56:18:d2:
cc:a7:b3:36:f3:ab:07:8e:25:25:81:44:8d:5a:60:a8:ba:7c:
71:ed:47:d9:e0:88:46:86:19:bc:e6:a1:51:13:dc:ac:e2:09:
aa:2b:9d:1c:ea:c3:6d:fe:68:eb:58:40:ec:50:6b:21:e4:51:
a4:eb:10:74:6e:0b:eb:5b:86:c3:44:49:60:13:c4:6c:1b:18:
e2:1c:c0:37:e3:8f:88:70:fc:5c:b5:dd:9d:68:b7:54:b3:cc:
e0:06:61:00:c9:5d:df:49:b0:07:23:4e:e3:a0:d3:50:33:57:
5a:2d:5a:2b:83:bb:ca:38:70:0c:52:b0:72:b0:2b:86:67:93:
8b:12:bb:9b:bc:0e:46:79:2a:8c:8a:d9:06:0f:57:02:94:3b:
77:bf:51:cf:e9:56:59:ba:9d:a2:c2:37:ae:cd:3e:68:50:c7:
fb:f6:5a:f9:60:ab:dd:56:91:94:4a:57:82:60:4e:ed:15:50:
fe:42:16:45:01:6c:d8:1f:47:28:77:58:53:02:bd:4a:24:1d:
12:94:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:21 2024 by rpki-client on console-fra.rpki-client.org