Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-ag7CJ3iZ-MJRkaPoax3qdYQ6cY.roa
File: 1-ag7CJ3iZ-MJRkaPoax3qdYQ6cY.roa (raw, json)
Hash identifier: zgdXXHY417JU50BNjMvHWp0HniQ+fIRZBfXxZ74OEYw=
Subject key identifier: F9:A8:3B:08:9D:E2:67:E3:09:46:46:8F:A1:AC:77:A9:D6:10:E9:C6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FB9994EE16D98A3204AB7A5150FAE87F1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-ag7CJ3iZ-MJRkaPoax3qdYQ6cY.roa
Signing time: Mon 27 May 2024 10:29:43 +0000
ROA not before: Mon 27 May 2024 10:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214953
IP address blocks: 2a06:de07:de00::/48 maxlen: 48
2a06:de07:de01::/48 maxlen: 48
2a10:2f01:403::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 04 Aug 2024 11:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:99:4e:e1:6d:98:a3:20:4a:b7:a5:15:0f:ae:87:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 27 10:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9a83b089de267e30946468fa1ac77a9d610e9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:47:c3:3b:33:c7:b1:58:95:1d:4f:ce:97:c7:
3f:39:83:47:b2:d3:a8:a0:42:49:da:84:d5:69:d2:
65:9d:4b:65:23:9e:83:3a:6e:b3:eb:3e:09:31:77:
6d:a0:c6:96:4e:88:a5:02:4a:e1:94:30:76:1b:9f:
24:ce:76:e1:5f:74:82:e3:ab:cc:14:d4:df:95:b6:
e0:4e:15:75:92:44:04:e7:65:f5:b6:60:1f:3a:25:
75:f6:d7:83:e0:4c:da:07:f5:cf:fe:b4:fe:7e:98:
d4:2f:5b:3a:e6:b1:57:ac:92:c0:8d:04:ab:af:94:
23:3b:a7:6e:a9:03:54:d5:1f:8a:d4:86:df:ed:fb:
62:ee:3b:d5:25:f2:b2:77:7a:49:00:f3:73:04:84:
be:89:a7:b9:8e:35:6f:5d:c7:b1:b8:b8:cb:8b:d4:
b1:bb:39:19:62:cf:51:5a:dd:4d:82:37:2e:2b:17:
8a:39:93:aa:8f:9d:7f:71:ef:3f:b6:bc:8f:2f:2d:
1d:ee:ae:69:05:df:e4:ab:91:6f:79:0f:b2:1e:01:
fe:c9:6e:5c:66:fc:fc:6f:14:5b:0e:77:44:f0:76:
d4:03:50:e2:6d:ef:af:27:89:e6:32:bd:dc:c6:49:
1c:c3:25:9a:ff:3a:6a:ba:92:b0:5d:6a:8b:9f:c6:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:3B:08:9D:E2:67:E3:09:46:46:8F:A1:AC:77:A9:D6:10:E9:C6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-ag7CJ3iZ-MJRkaPoax3qdYQ6cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de07:de00::/47
2a10:2f01:403::/48
Signature Algorithm: sha256WithRSAEncryption
64:31:7e:67:0e:52:76:11:b0:29:16:39:5c:e3:96:5f:5c:21:
1c:26:e0:f2:2f:a4:5f:c5:44:e2:ef:eb:f3:17:6b:5b:65:29:
84:14:c9:3b:c5:27:27:be:11:d0:2b:cf:d4:65:30:14:df:d2:
44:4a:e5:da:ae:8f:bd:02:78:88:17:42:6f:b6:fc:52:3d:b3:
e0:bd:d9:cc:bf:8a:f2:66:89:8f:8b:6a:28:dc:9e:27:a2:4d:
89:37:c1:eb:8b:44:0a:30:85:13:1c:40:da:0b:66:1e:34:2d:
21:2c:28:c4:41:e6:02:f8:3f:01:be:db:fd:e9:6f:cf:e4:9d:
ed:87:b7:7b:b3:b3:db:bf:33:d3:ea:b1:40:37:e7:dc:f2:3f:
97:94:8e:36:19:31:c3:2d:76:83:55:17:ad:58:fa:09:14:e8:
b9:9b:7f:7e:e8:60:69:37:c5:d7:49:45:b9:4c:94:c3:60:1e:
59:49:08:52:d8:19:68:42:e8:3d:2a:2e:f0:13:4a:31:03:fc:
09:11:0d:b6:1d:7f:d1:a2:d5:65:1b:f3:b9:db:12:bf:ca:40:
58:e6:84:9e:44:a7:4a:ac:a7:ad:ec:d9:80:45:29:14:88:c1:
54:3e:3d:e2:21:60:aa:6e:93:3a:a2:42:ae:a5:2a:0f:20:6a:
0c:e0:2c:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 4 14:00:38 2024 by rpki-client on console-ams.rpki-client.org