Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2tI3kdHRrGl9tFlQbpl9_qZbw5U.roa
File: 2tI3kdHRrGl9tFlQbpl9_qZbw5U.roa (raw, json)
Hash identifier: 7tPjGhXvkzbvPlOTtlqkwoxje0w8ruNtKwEwesN1QRI=
Subject key identifier: DA:D2:37:91:D1:D1:AC:69:7D:B4:59:50:6E:99:7D:FE:A6:5B:C3:95
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7B81F652FA85CE598E2EF1A256633
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2tI3kdHRrGl9tFlQbpl9_qZbw5U.roa
Signing time: Mon 02 Jan 2023 05:15:12 +0000
ROA not before: Mon 02 Jan 2023 05:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204160
IP address blocks: 2a0e:97c0:b75::/48 maxlen: 48
2a0e:97c0:b70::/44 maxlen: 48
2a0e:97c0:b70::/48 maxlen: 48
2a0e:97c0:b73::/48 maxlen: 48
2a0e:97c1:100::/44 maxlen: 48
2a0e:97c0:b71::/48 maxlen: 48
2a0e:97c0:b74::/48 maxlen: 48
2a0e:97c0:b72::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Apr 2023 11:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:b8:1f:65:2f:a8:5c:e5:98:e2:ef:1a:25:66:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dad23791d1d1ac697db459506e997dfea65bc395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:f3:c8:2e:c6:81:bd:9b:59:ce:3e:12:5a:
e7:3e:0b:4a:ef:7d:ab:05:5e:3f:c6:82:08:22:2f:
3c:f3:73:3e:cb:c8:21:e7:de:81:1b:38:0c:b8:51:
3b:6e:8c:3e:74:1d:94:e1:21:c5:70:3a:3d:5c:9b:
c7:73:e0:0b:3c:c1:42:c0:55:66:18:e2:48:80:c1:
dd:89:1e:80:56:28:44:0d:67:bb:a8:df:00:2e:4b:
e5:e0:62:07:ae:03:d8:81:70:e9:2d:86:81:ef:93:
ee:8b:96:20:14:c8:4d:33:05:32:65:5f:da:ac:a6:
83:5b:e3:d8:37:83:71:25:fc:5b:c6:14:82:80:46:
d7:71:42:9b:5e:81:7d:4a:be:9c:25:ad:f6:94:69:
e0:3e:7f:7d:20:ba:3e:9b:65:1f:fa:1f:59:6c:f6:
48:a9:9f:62:72:ca:da:f2:42:55:da:94:02:f8:02:
fd:b5:d1:94:4c:ea:5b:0d:9d:c5:2e:5b:9a:aa:97:
b0:21:1a:6d:d1:75:69:d5:2e:39:07:9f:9f:15:c5:
f2:51:e4:cc:15:52:dc:c0:3e:32:f9:f9:74:b0:38:
fb:ee:65:d8:34:fc:6a:d3:95:a1:24:ab:89:59:23:
5f:8e:ca:01:ee:94:80:c5:d6:4d:73:f9:f4:5c:22:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:37:91:D1:D1:AC:69:7D:B4:59:50:6E:99:7D:FE:A6:5B:C3:95
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2tI3kdHRrGl9tFlQbpl9_qZbw5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b70::/44
2a0e:97c1:100::/44
Signature Algorithm: sha256WithRSAEncryption
12:81:89:8d:b8:72:f7:16:a6:ae:b1:3e:e6:f9:79:28:82:11:
56:cf:e0:d2:0d:bc:b8:0e:6e:2b:12:5d:a3:00:3b:2b:ce:03:
34:a5:f6:bf:c8:5c:5a:be:c1:48:f9:c4:e3:80:4e:25:20:da:
ae:0f:08:f8:3e:62:7f:77:51:c6:95:cc:f9:96:d7:b0:80:00:
ec:52:2e:00:bf:12:d1:96:9b:74:ec:37:09:ba:8c:bc:83:07:
fe:46:11:6d:7f:26:69:9a:43:15:c1:65:88:18:75:f3:3f:5c:
10:b9:8e:8e:5e:68:f8:a5:95:72:d7:b6:f2:77:66:00:6c:42:
18:56:4c:31:73:b2:fc:52:67:58:61:1f:42:e5:8f:f5:e0:74:
99:fc:b6:c3:70:a3:c4:76:c9:73:ae:36:e4:6f:fb:71:72:14:
72:9c:68:45:a1:c9:79:d0:11:db:2d:54:bf:dd:ee:69:b4:a5:
18:18:05:4b:77:ce:61:fa:95:6d:9c:f3:f9:00:31:6f:d8:6f:
b3:b4:63:0a:92:37:a3:42:64:3b:e4:a4:57:e9:35:d7:f3:af:
c3:c9:bf:a2:ee:23:6c:f7:f9:c2:e6:bc:a6:fe:cc:c4:c0:8a:
42:1a:44:16:44:5a:52:37:08:ae:43:5f:7e:96:fa:41:db:be:
c2:6d:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:52 2024 by rpki-client on console-ams.rpki-client.org