Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4Qd7i_JZuDIqBbJ0yQH1vtSNXJ4.roa
File: 4Qd7i_JZuDIqBbJ0yQH1vtSNXJ4.roa (raw, json)
Hash identifier: yfAChS1bYjVc6RDEzvkXkQ1Nw6m6jQNvkWnIiTZj/zE=
Subject key identifier: E1:07:7B:8B:F2:59:B8:32:2A:05:B2:74:C9:01:F5:BE:D4:8D:5C:9E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019122B2717B93CC357B392A4B6D890BC019
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4Qd7i_JZuDIqBbJ0yQH1vtSNXJ4.roa
Signing time: Mon 05 Aug 2024 13:20:05 +0000
ROA not before: Mon 05 Aug 2024 13:20:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47152
IP address blocks: 2a0e:b107:1a8f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 Aug 2024 13:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:b2:71:7b:93:cc:35:7b:39:2a:4b:6d:89:0b:c0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 5 13:20:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1077b8bf259b8322a05b274c901f5bed48d5c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:c9:c0:ef:2c:7d:a1:e9:97:d2:96:5f:d5:
5c:d5:dc:59:a6:a5:56:9b:61:2a:d6:6d:53:26:b0:
8b:58:d6:ed:2e:46:a9:91:de:3b:46:97:5c:54:ff:
6f:cb:08:95:86:f0:4e:26:1b:2b:63:1a:f4:41:2b:
e2:4c:f0:84:ff:14:e7:3c:03:6d:0e:73:8d:84:5b:
15:31:ae:60:6e:d5:cf:e2:16:e4:24:09:ef:d6:92:
9e:da:01:35:22:e6:d6:23:b5:2d:6d:12:77:6a:13:
7c:09:18:e9:e2:0c:68:be:6a:32:6a:6f:8b:a0:56:
75:c0:6a:f4:21:ac:d5:0e:fd:4c:16:be:a3:4c:fe:
d3:4c:49:56:a1:1b:f0:e4:4e:3b:b9:13:c9:cd:01:
b6:d1:50:e4:e4:0f:81:6c:6f:83:ce:a1:7b:3f:2a:
de:bb:53:46:b7:e8:2a:16:85:6d:ee:8c:89:fe:61:
f8:ca:33:eb:e6:c8:35:d8:4e:d1:2d:43:d0:c5:20:
9e:5c:9c:1a:ae:6a:0f:ee:51:b7:47:6b:45:a0:e0:
31:68:1b:85:48:db:e1:01:90:51:6e:f5:08:5f:9d:
a2:54:67:9a:9a:95:ca:09:06:76:92:20:e0:7f:5a:
2f:74:eb:47:ba:f1:3e:a0:6d:9a:9d:2f:63:4e:7f:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:7B:8B:F2:59:B8:32:2A:05:B2:74:C9:01:F5:BE:D4:8D:5C:9E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4Qd7i_JZuDIqBbJ0yQH1vtSNXJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1a8f::/48
Signature Algorithm: sha256WithRSAEncryption
21:1f:f6:06:e8:a1:4c:20:9e:0a:3b:52:bb:01:2b:0c:0e:07:
7e:fc:5e:14:bf:e4:84:7d:b3:6a:ac:44:cc:f1:a4:43:7f:04:
7b:d7:f3:2c:e4:2e:83:a9:51:c8:00:4b:14:a5:cb:cb:23:a9:
b7:8f:db:e1:50:59:39:03:3c:2d:10:0d:e6:a1:54:da:f1:6f:
93:b4:48:4b:f6:2f:06:fc:a1:82:71:97:aa:2a:fe:ac:e8:b9:
9d:b6:fd:18:a7:19:82:27:8f:93:1a:8e:51:d1:a6:95:ab:9b:
9c:22:64:a6:62:8a:8e:8d:d0:dc:90:0d:9d:ff:dc:c4:9e:62:
da:a2:d1:6b:ba:90:63:66:30:b5:58:42:f1:0d:0c:7a:86:a5:
a6:4d:c0:fb:d4:2b:14:91:d8:66:da:f6:2f:c8:28:d5:e6:83:
ce:9d:68:85:df:e3:ee:76:a6:1a:72:9b:7e:ed:01:1b:9d:f3:
78:81:31:5a:52:10:e7:2e:82:3f:fa:e2:32:43:d9:47:01:8d:
b7:a8:b2:e7:b8:3b:27:4e:7c:a0:02:66:63:72:b1:8c:bb:e3:
ec:1e:2f:41:b8:ae:01:1e:87:8a:15:19:d2:b0:8b:65:81:ee:
f3:8d:f0:1e:9d:42:9a:65:06:f9:04:d9:26:7e:03:f5:ee:58:
d5:f1:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 17:11:46 2024 by rpki-client on console-fra.rpki-client.org