Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4p6SN9YItilRKee0WGH_6ye9ZKM.roa
File: 4p6SN9YItilRKee0WGH_6ye9ZKM.roa (raw, json)
Hash identifier: y7OaruiefE8XOy/DaN3xl9n+KLOE5dYUTcnYqHRDhh8=
Subject key identifier: E2:9E:92:37:D6:08:B6:29:51:29:E7:B4:58:61:FF:EB:27:BD:64:A3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E81554620A97B405DA6BE8DD01FAF0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4p6SN9YItilRKee0WGH_6ye9ZKM.roa
Signing time: Mon 02 Jan 2023 05:15:36 +0000
ROA not before: Mon 02 Jan 2023 05:15:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212267
IP address blocks: 2a0e:b107:50::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:15:54:62:0a:97:b4:05:da:6b:e8:dd:01:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e29e9237d608b6295129e7b45861ffeb27bd64a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:db:8f:08:c1:47:69:c8:1d:e7:d7:39:9f:1a:
f4:d6:c0:ac:87:2b:64:69:8b:b3:28:80:f9:2b:ee:
ac:3a:c0:f0:7f:5b:7e:ec:0f:11:d3:24:4b:3a:54:
67:a2:ed:f4:5e:61:d3:71:f3:86:c4:02:03:e3:59:
ec:2c:79:2e:88:29:f3:23:60:57:e9:23:76:35:be:
c8:3a:ae:1a:8c:0c:20:8b:db:97:f7:2e:ce:1e:46:
fd:1c:1a:66:9d:b2:85:bc:4c:51:2b:91:c7:05:6e:
33:09:f0:13:af:03:95:79:1a:be:21:fc:c5:1e:de:
95:77:ee:95:1d:a3:7d:66:4c:9e:f4:62:0d:27:f4:
65:9b:5c:c2:7c:c4:7d:b2:bf:3f:9f:cb:d1:7f:40:
f4:22:f7:89:bb:f3:f9:70:ab:e7:00:31:1e:16:2d:
bd:1d:7a:1f:34:3e:54:3b:b6:2f:cb:d3:1b:90:ea:
e0:38:d8:fa:b3:79:92:10:a5:6d:6d:ee:8b:8f:d1:
50:7c:9d:c1:90:08:e3:2d:ba:cc:81:43:6b:2d:84:
56:48:a6:13:29:10:06:d1:e9:9e:ea:27:10:c8:f6:
de:dc:25:1e:20:b2:62:83:93:31:a7:32:c5:42:9c:
01:ce:16:6b:e0:93:ce:e1:0b:6a:8c:bc:5f:12:e1:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9E:92:37:D6:08:B6:29:51:29:E7:B4:58:61:FF:EB:27:BD:64:A3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4p6SN9YItilRKee0WGH_6ye9ZKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:50::/44
Signature Algorithm: sha256WithRSAEncryption
9f:03:4f:d0:3a:9b:3c:87:54:5d:21:00:26:02:f0:87:49:b7:
d3:d2:e1:13:3e:61:3d:a9:e9:9e:7f:6c:b2:b4:1e:5b:6b:9a:
8c:c6:5b:59:3a:2c:5c:3f:5a:82:2b:ba:49:7c:fb:e4:bb:92:
24:44:36:6a:b5:82:81:f3:39:e0:03:0f:e9:e9:77:e6:5b:f9:
25:ef:70:8e:4e:5f:96:5d:2c:87:b5:11:96:d3:2e:49:7d:bb:
11:a8:ed:a4:09:74:90:10:4f:1d:a9:a1:1b:8a:70:83:35:d9:
a2:5b:57:52:23:7c:c7:9f:01:35:ba:52:f7:1d:eb:9b:bb:7c:
c8:a4:72:da:6d:85:89:15:10:2f:35:4e:49:f6:b4:93:15:2b:
77:5c:ce:4f:23:75:42:22:77:02:2c:04:81:66:13:45:e0:8b:
f9:2e:00:ca:52:f4:c3:aa:30:e7:43:bd:16:97:51:3f:40:d0:
8f:7a:39:ae:88:42:9e:11:00:dc:ac:26:8f:aa:15:06:25:20:
87:38:5a:1e:05:b6:a9:c4:45:ff:b8:a2:43:54:8e:6e:84:8e:
f6:91:12:4e:f9:a1:bb:c0:8c:b2:14:f6:a6:2f:40:7c:cd:dd:
25:35:78:9c:0d:c1:b9:79:bc:a0:cc:fd:90:90:6b:ef:4a:a0:
4b:47:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:22 2024 by rpki-client on console-fra.rpki-client.org