Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1iDJ-S4mtXaaPxYImhFVSdzMVvg.roa
File: 1iDJ-S4mtXaaPxYImhFVSdzMVvg.roa (raw, json)
Hash identifier: 17Cgqi4cj0H/IuiSqGDjSVaMBXqgMNVPDP3F/j5wpns=
Subject key identifier: D6:20:C9:F9:2E:26:B5:76:9A:3F:16:08:9A:11:55:49:DC:CC:56:F8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BD8F2A2246E81430D27AB851B2A58AB04
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1iDJ-S4mtXaaPxYImhFVSdzMVvg.roa
Signing time: Thu 16 Nov 2023 16:24:21 +0000
ROA not before: Thu 16 Nov 2023 16:24:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207252
IP address blocks: 2a10:cc40:270::/44 maxlen: 48
2a10:cc40:270::/48 maxlen: 48
2a06:de00:400::/38 maxlen: 48
2a06:de00:400::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Dec 2023 18:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:f2:a2:24:6e:81:43:0d:27:ab:85:1b:2a:58:ab:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 16 16:24:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d620c9f92e26b5769a3f16089a115549dccc56f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0b:d2:9f:5f:44:bf:6f:e2:db:8e:6f:1b:07:
9c:87:be:12:72:09:33:84:96:91:7d:4a:2c:2d:17:
60:18:d3:7a:d9:52:a0:a2:7f:d6:1d:a8:4e:8a:58:
25:59:4d:9f:78:ed:a1:7a:3b:d8:9f:6b:29:4f:1e:
f2:53:87:37:1f:05:b3:da:f3:c0:5f:d0:f2:4a:af:
0f:b4:74:b1:93:ce:be:f8:a6:ff:a9:94:c2:45:e7:
54:6f:ba:2b:fe:cf:2d:b4:32:c7:5b:c6:6d:49:10:
df:12:d0:43:14:68:e1:63:a2:32:32:2a:d3:bc:27:
48:fd:3d:45:90:c8:47:7a:bb:19:1c:86:99:2b:89:
0d:53:ba:1f:58:96:0b:4c:f7:60:6f:c8:ac:a3:cd:
b5:2e:22:f1:3f:94:bc:1d:f5:ab:2e:46:20:e6:33:
4c:ba:14:64:f4:39:f6:aa:9f:0f:25:89:e2:83:c2:
8e:c2:d1:8c:87:26:1a:66:0e:05:50:a1:bb:0b:f0:
97:d5:9d:2f:40:d2:95:51:f7:de:3e:aa:9c:95:42:
89:4a:52:2a:05:5e:ae:88:f5:ec:4b:d6:85:8e:da:
29:d0:59:6e:f0:f2:47:f8:ed:a6:e8:83:d9:79:e0:
e1:c3:c2:36:91:56:60:35:0d:33:5c:92:cc:f7:87:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:20:C9:F9:2E:26:B5:76:9A:3F:16:08:9A:11:55:49:DC:CC:56:F8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1iDJ-S4mtXaaPxYImhFVSdzMVvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:400::/38
2a10:cc40:270::/44
Signature Algorithm: sha256WithRSAEncryption
90:b1:d0:57:37:26:5a:f5:86:fa:21:52:2b:8d:96:08:34:c4:
cb:c0:69:94:1f:9c:94:bc:b3:1a:e0:5b:88:60:bf:41:dd:b2:
ed:9f:f4:65:0a:82:58:f9:68:3e:82:91:8b:8a:d5:d7:dd:29:
a6:bc:5c:39:aa:a3:6f:ce:88:82:ea:64:b4:de:4f:15:af:c8:
c2:3a:cb:cd:a2:4c:52:59:07:02:1a:c1:78:3c:48:6d:7d:11:
1b:19:3a:45:2f:d1:d3:0a:05:44:dd:47:f1:a0:ff:d0:07:15:
e6:19:40:f5:8d:73:5e:16:14:13:cd:d9:e2:ad:38:e0:41:be:
b1:d2:62:e7:34:23:54:fe:e5:21:00:27:2a:48:b6:c6:74:35:
dc:f1:f2:8a:ca:e0:c3:bc:24:3a:73:b1:a8:16:6a:63:71:13:
35:b3:bf:2a:a7:b3:b1:15:41:f0:aa:0c:01:76:0f:cd:cf:52:
1d:14:6e:be:31:6f:9e:5a:85:c4:81:c7:62:68:90:a5:e6:f5:
cc:b3:6e:b4:4c:aa:43:11:17:17:b1:04:76:8f:31:b9:04:50:
23:c6:c3:f4:a9:5d:b0:69:0c:f0:2b:7c:4b:59:17:1f:29:c9:
23:10:3d:50:0e:65:50:4c:a8:85:d3:1e:9f:0f:c4:da:2e:4a:
c5:9f:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:21 2024 by rpki-client on console-fra.rpki-client.org