Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4s-ExOFwOD92h2NRzgnMg3HyQEk.roa
File: 4s-ExOFwOD92h2NRzgnMg3HyQEk.roa (raw, json)
Hash identifier: EPCE4deuCxykrL4j+VUMj4ogeNoushIRNULAcVGDDzY=
Subject key identifier: E2:CF:84:C4:E1:70:38:3F:76:87:63:51:CE:09:CC:83:71:F2:40:49
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185DE40B1827B1A6752E4C07C997C1DB9A1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4s-ExOFwOD92h2NRzgnMg3HyQEk.roa
Signing time: Mon 23 Jan 2023 10:50:59 +0000
ROA not before: Mon 23 Jan 2023 10:50:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211495
IP address blocks: 2a10:2f00:16c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Jan 2023 16:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:40:b1:82:7b:1a:67:52:e4:c0:7c:99:7c:1d:b9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 10:50:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2cf84c4e170383f76876351ce09cc8371f24049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:18:1d:e0:ea:59:64:8d:4e:ca:63:20:41:
ea:32:e7:a0:db:e1:86:87:0f:59:46:bc:2a:b5:62:
c9:f1:0d:5b:dc:d1:73:1b:da:8a:6e:65:83:a0:f1:
11:9d:19:aa:6a:ad:95:ff:80:94:cd:4e:74:8a:65:
35:62:b2:56:b2:ad:94:12:98:7b:47:ba:75:a9:92:
b2:70:fe:63:9c:b3:89:da:5c:cd:ff:c2:c4:03:24:
4f:8e:4f:eb:c4:8f:3e:1d:7e:3d:cf:aa:7a:74:d7:
cd:08:93:db:81:50:af:b4:f9:02:27:c5:fc:82:fa:
54:f6:c4:53:46:05:17:59:e1:72:9e:b7:56:bf:0e:
11:4c:ad:d6:a1:7c:57:49:b4:4d:1f:0b:d3:2f:d4:
69:7c:9e:70:d1:ff:69:59:a4:d2:64:98:9e:02:1a:
b3:54:70:64:ad:b8:b1:f3:8f:ca:e4:11:36:5e:a9:
d5:ed:2c:43:fe:2a:07:65:00:36:8b:0e:a5:17:da:
b6:84:21:59:9f:e3:ba:92:44:6c:0e:78:d4:22:2e:
41:2c:bf:89:05:7c:74:f8:c9:46:c1:37:fe:c3:a5:
84:69:ad:66:27:25:f2:f0:92:c5:2b:97:69:6f:64:
57:d0:3f:03:a0:a3:f1:37:56:0b:70:63:b6:88:51:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CF:84:C4:E1:70:38:3F:76:87:63:51:CE:09:CC:83:71:F2:40:49
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4s-ExOFwOD92h2NRzgnMg3HyQEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:16c::/48
Signature Algorithm: sha256WithRSAEncryption
7a:8a:d0:1f:1e:00:e0:30:5d:75:25:85:f3:65:eb:58:b9:e6:
fe:0f:7b:0b:d7:f7:a7:15:63:c0:f4:d5:fc:2a:23:9b:6c:db:
31:61:5e:de:ab:ba:1a:2b:29:2e:50:8b:47:2e:c7:2d:4d:c6:
b8:60:cc:5b:63:5d:36:c1:b7:4b:b7:50:0e:fd:f4:26:34:c1:
b6:47:35:60:55:c9:b7:47:b7:95:56:1b:6d:0b:fc:68:26:8a:
ad:62:c3:f9:e8:a6:07:75:06:94:2c:0a:fa:17:a6:d3:76:8b:
d2:1c:90:92:b0:ec:ec:cb:d5:62:70:f6:c6:b0:fb:e2:8f:b7:
d7:66:4b:91:83:d3:e7:b3:6d:3b:48:57:d5:ba:10:02:99:aa:
97:cb:32:68:76:74:6c:88:10:cb:81:e6:89:ed:af:28:b5:c2:
c5:75:36:5e:b7:09:06:53:cf:40:e3:f6:3d:7d:81:d6:3e:d5:
67:02:58:35:30:e2:68:6c:5b:92:52:b5:91:88:61:d0:b7:3c:
ef:69:ed:f3:df:91:b1:54:66:78:51:e5:72:db:fa:58:23:57:
51:c7:e2:58:6c:47:4c:ea:51:09:40:e8:c8:de:6e:c0:be:93:
c1:f2:fc:ec:1e:3b:4e:98:f1:c1:32:b4:7d:f6:53:14:8b:97:
9a:07:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:22 2024 by rpki-client on console-fra.rpki-client.org