Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2P_Sr3XUJfJjX7RKDKOaxJ1aw4c.roa
File: 2P_Sr3XUJfJjX7RKDKOaxJ1aw4c.roa (raw, json)
Hash identifier: mgeh2WvC8toFNiABVWDBoGeRHyUzbg64ZlMX0SY5Y4c=
Subject key identifier: D8:FF:D2:AF:75:D4:25:F2:63:5F:B4:4A:0C:A3:9A:C4:9D:5A:C3:87
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191C6DDFEE5498C7C35BFEDFAD3E571483F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2P_Sr3XUJfJjX7RKDKOaxJ1aw4c.roa
Signing time: Fri 06 Sep 2024 10:25:23 +0000
ROA not before: Fri 06 Sep 2024 10:25:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210631
IP address blocks: 2a0e:97c0:900::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 26 Oct 2024 18:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:dd:fe:e5:49:8c:7c:35:bf:ed:fa:d3:e5:71:48:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 6 10:25:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8ffd2af75d425f2635fb44a0ca39ac49d5ac387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:09:b8:77:6d:aa:c8:9e:93:c9:71:13:1f:
54:7b:b3:94:6d:5e:4d:87:2b:3a:0a:63:d3:bd:a3:
98:ec:af:a0:58:0e:63:00:8e:c7:83:9c:57:a2:ca:
dd:05:ee:eb:39:96:09:4f:91:4b:ce:c9:b7:32:c9:
8b:8f:6c:2c:84:f1:98:35:e0:d8:73:46:dc:99:f7:
d5:95:66:37:62:96:e9:10:5a:91:e8:a9:53:18:59:
6b:ed:9e:9b:85:8a:db:25:b7:c9:17:23:cc:47:34:
12:ae:ba:f2:3c:2d:af:f7:b4:5a:aa:c5:24:23:19:
c8:df:04:1b:80:79:0b:7a:0f:f6:6c:bb:9d:3a:5c:
59:47:9f:2d:4b:42:95:f8:cf:aa:ed:03:82:8c:7c:
5c:49:92:53:55:7b:d1:8f:cd:13:a6:a4:cf:5d:9e:
da:ea:b5:d9:eb:24:fa:03:b2:74:19:f6:30:53:e7:
ae:a9:d2:15:d7:e3:c3:28:ad:d6:e9:f0:af:44:3f:
ae:fa:1e:bb:1f:70:50:fc:e2:d8:d0:8d:e2:6c:d6:
3f:41:5e:27:2d:f9:bb:a7:c7:59:48:df:e8:ac:e5:
61:73:1e:fd:ef:ad:05:a1:cb:f2:0a:13:e7:03:d1:
5b:da:87:0a:9c:4d:d3:1c:7b:1b:eb:ae:ce:df:b0:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FF:D2:AF:75:D4:25:F2:63:5F:B4:4A:0C:A3:9A:C4:9D:5A:C3:87
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2P_Sr3XUJfJjX7RKDKOaxJ1aw4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:900::/40
Signature Algorithm: sha256WithRSAEncryption
84:5e:93:a8:ac:0c:b1:b6:7f:18:f9:dd:1b:e8:d8:0b:8d:9d:
d6:55:c9:62:03:7d:b2:d8:2e:37:40:75:7f:2d:5e:87:2c:8c:
75:23:2d:6f:d6:06:5f:bb:42:31:7b:e4:8f:15:bd:b9:43:e8:
9f:35:0f:61:79:66:33:ac:39:ec:8d:6b:d1:f9:0d:93:b9:73:
44:ec:94:de:80:11:dc:6a:b1:bc:fd:37:a7:a6:d0:3f:54:5d:
d8:40:73:e7:44:59:d4:9f:64:cc:b2:5f:dd:83:f1:95:08:6c:
ae:85:ac:4c:a0:58:6f:04:04:73:47:9b:12:18:aa:ea:54:10:
18:06:5a:2b:75:34:bd:fa:b8:99:45:62:39:50:db:56:4f:17:
64:f2:41:05:61:92:e1:a0:31:e9:2e:dc:ae:10:f1:5d:be:29:
89:a2:ed:88:fd:d0:b0:e5:2a:8f:14:8d:b7:1f:cb:f4:9d:5b:
ba:70:2d:df:75:ec:ee:74:65:e2:9d:16:39:32:63:5f:96:93:
c3:cc:6d:ab:cb:c6:fd:4d:f0:96:a4:72:79:86:44:1b:05:64:
56:e0:e5:c0:df:3e:8d:37:7a:aa:17:82:e7:ca:d0:96:41:41:
81:58:b0:bd:a9:4a:e7:62:a8:2f:e3:a9:a1:d2:09:be:28:f3:
d2:64:29:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 21:04:31 2024 by rpki-client on console-ams.rpki-client.org