Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-jHGCunw58FNqmwVs7HxljUGqhk.roa
File: 1-jHGCunw58FNqmwVs7HxljUGqhk.roa (raw, json)
Hash identifier: wK4lqj24P0lRXTVJihR+u0uWVzHI9T00s8tE5Imxx8I=
Subject key identifier: FA:31:C6:0A:E9:F0:E7:C1:4D:AA:6C:15:B3:B1:F1:96:35:06:AA:19
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48ACDC8F87F7D90B226A69FEDDEE5FC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-jHGCunw58FNqmwVs7HxljUGqhk.roa
Signing time: Tue 24 Jan 2023 16:09:39 +0000
ROA not before: Tue 24 Jan 2023 16:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200240
IP address blocks: 2a0e:b107:692::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 30 Apr 2023 15:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:cd:c8:f8:7f:7d:90:b2:26:a6:9f:ed:de:e5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa31c60ae9f0e7c14daa6c15b3b1f1963506aa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6a:c1:16:67:fc:17:1d:23:3b:05:88:d7:6e:
d8:db:33:15:24:77:bf:61:50:42:57:ee:ed:e2:c8:
f2:b9:2e:58:97:91:4e:bd:67:1c:92:c3:39:93:1d:
a8:7e:01:3f:94:ed:f9:d8:03:d5:e7:07:68:d5:1a:
9e:36:22:80:a1:72:53:1a:d6:05:30:cd:ce:15:62:
5e:2c:92:ab:63:ca:8b:98:4d:c9:ee:12:ee:9f:fd:
fc:2c:2d:72:0b:e7:9b:e7:f1:17:4a:4e:59:e6:39:
83:53:1c:ad:e2:f4:d7:8e:38:34:a0:cc:dc:5c:01:
3c:7f:91:9b:11:46:07:e9:fd:ec:56:5d:d7:ae:dd:
c7:eb:5e:7c:01:22:49:0c:a7:f7:d9:f0:9e:9d:a5:
2a:1b:13:0b:38:da:78:45:0e:46:28:1e:51:65:a2:
bf:c3:af:69:c3:c3:95:7e:cb:21:28:da:f2:0d:ba:
a9:65:bf:8a:16:42:a7:0d:3c:ef:f6:76:2a:72:73:
b6:8a:03:01:fe:27:e8:f1:59:d4:e3:73:3a:e2:a5:
b6:97:e5:b5:5f:87:d9:e3:92:1d:50:9a:bd:c3:1a:
4a:26:62:6d:51:84:11:97:10:57:38:ed:c7:71:f5:
a3:08:c5:a3:04:6c:51:84:64:4d:40:d0:b5:b3:64:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:31:C6:0A:E9:F0:E7:C1:4D:AA:6C:15:B3:B1:F1:96:35:06:AA:19
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-jHGCunw58FNqmwVs7HxljUGqhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:692::/48
Signature Algorithm: sha256WithRSAEncryption
03:40:5a:ac:73:69:2f:c7:b4:58:a6:1f:23:60:e2:1f:7d:a0:
a4:30:47:00:af:8e:85:06:36:f2:d3:e5:42:4b:74:d8:96:b9:
fd:19:7d:03:af:fb:95:a3:d4:97:94:e4:32:ec:12:88:36:f1:
ac:6f:f7:c6:10:40:61:e4:4f:eb:85:c4:e1:ec:eb:de:75:62:
0d:b1:9b:2a:63:5c:42:fb:bb:d5:21:9e:2b:d9:9c:70:05:dc:
4a:2c:bc:f9:4e:91:56:28:fd:74:61:83:76:6a:79:8e:c6:e2:
7a:52:6f:3b:ce:f4:fa:bd:f4:dc:62:a5:ca:6e:4d:cb:b4:1d:
04:22:71:91:1b:cb:48:db:26:d0:c4:99:8f:27:c9:9e:70:88:
ae:ec:34:c1:19:e6:10:88:4e:26:e9:9b:62:ef:4e:68:e6:af:
e1:74:4d:e1:dc:d3:50:ff:b5:7a:ca:19:4c:ad:3a:29:92:e8:
09:22:58:2c:1e:59:0d:90:92:7a:5e:54:55:48:bc:2d:af:02:
3e:ac:ec:bf:a7:7f:db:e3:9b:f8:46:98:5b:2c:ef:46:4b:78:
31:c9:af:b8:42:31:97:81:fc:74:b5:95:dd:c9:b7:ac:d6:0c:
5a:2f:cf:a9:8f:b6:e9:07:8b:28:ea:98:1e:0b:92:b7:ae:28:
c3:81:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:21 2024 by rpki-client on console-fra.rpki-client.org