Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2cLSMaApxMhh6b6Ddpw2rf8aiCM.roa
File: 2cLSMaApxMhh6b6Ddpw2rf8aiCM.roa (raw, json)
Hash identifier: eRJx3BRTEtLAlnFDVyzk7upX8bVU7tRBBHn/J2lEnto=
Subject key identifier: D9:C2:D2:31:A0:29:C4:C8:61:E9:BE:83:76:9C:36:AD:FF:1A:88:23
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BE0BBBD10A1B90F350C042A889DEF4602
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2cLSMaApxMhh6b6Ddpw2rf8aiCM.roa
Signing time: Sat 18 Nov 2023 04:41:21 +0000
ROA not before: Sat 18 Nov 2023 04:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208755
IP address blocks: 2a0e:b107:3a7::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Nov 2023 03:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e0:bb:bd:10:a1:b9:0f:35:0c:04:2a:88:9d:ef:46:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 18 04:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9c2d231a029c4c861e9be83769c36adff1a8823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:49:c2:2f:54:b4:3a:f3:72:10:f0:ed:c0:
da:bf:ae:56:22:fa:51:c8:f5:64:35:28:0e:1e:3a:
b2:81:11:e2:29:3c:42:6a:82:5d:3b:9e:4c:44:5d:
0c:dd:f7:9b:4e:72:90:f7:a6:f4:58:36:b4:65:cb:
cd:39:43:88:34:db:49:1a:24:09:c1:80:a0:34:45:
73:91:9d:ac:12:69:fd:c1:58:57:28:22:d9:45:b1:
59:af:0a:1e:a0:20:50:a5:51:7d:6b:8d:f2:c9:8c:
5b:42:fb:c2:60:c3:c8:49:3c:5d:34:d4:7c:e0:e5:
27:ee:95:06:aa:22:1c:21:48:b6:f6:9a:1f:dc:52:
65:02:7f:2e:42:38:8c:2a:dd:02:e1:51:85:e6:8e:
ee:33:e5:94:ff:be:d7:97:99:1a:36:ae:50:9f:ae:
b3:d0:94:97:89:aa:c4:5b:c0:58:bb:0f:06:57:27:
b3:cc:52:17:f9:00:1b:6d:39:bc:e7:e9:c0:1c:9d:
57:d3:10:ad:8b:c7:32:36:ec:29:fe:1f:18:9a:71:
70:34:73:b2:db:6d:f6:32:dd:e6:06:f2:a7:f1:59:
71:e7:e0:d5:c4:07:14:b2:0d:e9:96:73:79:ae:47:
c0:44:31:9c:7b:b4:ad:29:95:a1:3a:9d:60:26:99:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C2:D2:31:A0:29:C4:C8:61:E9:BE:83:76:9C:36:AD:FF:1A:88:23
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2cLSMaApxMhh6b6Ddpw2rf8aiCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:3a7::/48
Signature Algorithm: sha256WithRSAEncryption
6f:d5:27:47:ee:ed:d2:51:3e:43:9e:aa:cb:be:30:92:1f:d3:
ab:8a:21:b1:7d:ab:0f:0c:3d:b5:10:86:d7:67:e9:03:50:e4:
30:e3:7c:1a:3d:4f:af:08:01:02:b2:d7:91:6d:8e:b3:7c:ef:
7c:e9:dd:8c:0d:ac:63:de:d2:02:a2:ee:71:35:c1:9f:b0:9c:
81:ff:81:b1:c7:78:61:98:fc:b8:2d:3b:72:05:3d:79:82:ad:
9d:08:b1:b7:91:45:08:f4:56:f3:70:d2:66:6f:15:8a:c1:a2:
fb:32:c4:68:46:5a:28:97:c4:b7:e8:71:7e:c8:4a:8b:30:b4:
09:95:13:c2:be:e4:e9:0c:8c:be:7a:50:a8:a4:d1:9d:6e:0f:
d1:a3:24:60:e1:c8:5e:63:23:7d:60:c8:07:b4:bc:92:ff:34:
71:31:bb:37:ea:c2:8c:01:4e:90:d4:81:4b:9d:bd:c3:32:36:
4d:a4:e4:29:7a:2c:da:aa:f2:ec:06:62:6b:9f:b7:80:83:d7:
14:0f:0a:bc:2d:03:52:80:65:67:a0:49:cc:bd:5f:64:54:c9:
40:9f:e9:03:d2:26:b8:cd:29:3c:2d:f7:62:c4:fa:ef:a8:3b:
07:d5:ab:fa:c0:bf:2e:c9:b6:09:65:87:7e:d0:33:ee:38:14:
6e:09:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:52 2024 by rpki-client on console-ams.rpki-client.org