Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3hlThCP1XUKfAT5BBTp53mPwJ4Y.roa
File: 3hlThCP1XUKfAT5BBTp53mPwJ4Y.roa (raw, json)
Hash identifier: 9zxWB1tjfMhQPcRkMATzvAKGEd5xvMCJS25/LASNlUA=
Subject key identifier: DE:19:53:84:23:F5:5D:42:9F:01:3E:41:05:3A:79:DE:63:F0:27:86
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E822842FFE2509CB6EECB77A3B21C5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3hlThCP1XUKfAT5BBTp53mPwJ4Y.roa
Signing time: Mon 02 Jan 2023 05:15:39 +0000
ROA not before: Mon 02 Jan 2023 05:15:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213045
IP address blocks: 2a0e:b107:1030::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:22:84:2f:fe:25:09:cb:6e:ec:b7:7a:3b:21:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de19538423f55d429f013e41053a79de63f02786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:17:9a:43:75:ff:a7:01:21:e2:33:53:f8:
5f:62:ad:b9:fb:4c:5b:3e:a1:52:ef:87:23:a6:72:
38:aa:db:b9:3c:d9:0f:4b:9d:ff:47:72:33:aa:65:
d4:3c:48:e5:2b:bd:6a:c7:2e:9b:fd:02:23:f8:16:
31:f3:19:42:b8:9c:76:88:ee:fd:7b:1c:19:a1:ce:
91:e6:35:90:a7:68:4e:c5:75:c5:b7:b5:20:e8:10:
2f:24:65:e1:ca:d5:e6:ff:23:16:51:9b:2f:be:19:
bc:37:8c:77:15:0d:ea:08:88:33:43:6e:9d:09:5d:
eb:d5:96:b5:a9:b6:df:ec:2a:36:49:37:b1:48:ea:
5f:04:ca:63:fd:f4:db:a7:ec:ce:65:37:7b:de:28:
0e:21:ce:48:07:dc:9b:a3:d0:0c:84:70:4e:d6:ef:
d7:a3:f7:ba:3a:dc:6e:38:c9:88:ce:e7:0d:48:8c:
e6:72:c4:96:8e:d3:b2:8c:c7:12:d2:53:2b:37:b2:
53:6e:fb:4d:39:40:06:e1:49:51:24:18:95:e2:40:
43:17:29:d3:3d:38:82:b0:02:26:d3:ac:4f:57:f6:
ce:df:78:89:b4:fa:b9:e0:3a:46:76:01:6c:26:43:
0d:1f:04:41:78:31:00:a2:48:11:c1:cc:22:0d:d9:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:19:53:84:23:F5:5D:42:9F:01:3E:41:05:3A:79:DE:63:F0:27:86
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3hlThCP1XUKfAT5BBTp53mPwJ4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1030::/48
Signature Algorithm: sha256WithRSAEncryption
3d:1c:6e:be:6a:a8:d5:51:62:c9:1a:a9:20:83:ea:f3:c1:d4:
75:f2:23:4b:a8:57:a1:ef:db:f8:35:47:a0:da:da:16:8f:54:
df:c0:ee:2e:a7:21:fe:93:a0:12:a2:a2:b5:7f:ed:4d:2d:89:
48:8f:6c:4e:e3:6a:82:1f:2e:b6:2a:f3:40:15:0b:e0:2e:ea:
d7:b7:4d:c1:d3:25:19:60:a1:c1:27:ae:ad:e0:73:0a:e5:b6:
4d:35:1c:fb:1c:0a:2b:c3:b9:7d:d3:f6:8c:a9:c8:d4:aa:fd:
f4:b6:e2:cf:d1:00:73:2e:bc:98:fb:61:ef:e7:06:ef:cf:6d:
c3:df:72:8e:c0:40:3c:f3:8e:8b:aa:5b:07:e0:e1:5a:91:d2:
08:70:dd:ed:8a:3e:db:f5:0d:ef:0f:a9:9a:59:01:91:5f:86:
1d:bf:17:1e:18:ba:89:df:99:6a:6d:ab:07:f8:ec:ff:1c:72:
43:f6:8d:9e:50:ad:05:5b:db:de:27:bf:3a:f8:0e:ee:1f:c1:
53:ff:93:ff:ef:76:fa:95:2f:3d:f1:a9:8c:cd:b6:79:cb:5f:
06:df:ed:ce:95:8c:29:42:df:3e:f7:ff:73:c6:42:c0:b5:73:
b2:8e:3a:81:ae:68:d9:de:ca:ed:df:a3:63:ae:ba:81:b4:09:
38:cc:84:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:53 2024 by rpki-client on console-ams.rpki-client.org