Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4uF-XO5zAaOSxl1ez0QqeJZ4Y1Y.roa
File: 4uF-XO5zAaOSxl1ez0QqeJZ4Y1Y.roa (raw, json)
Hash identifier: 4BtjmbkyoPG9+dx/HYO+623G5rzmy3zL5Z7oA6rQqFg=
Subject key identifier: E2:E1:7E:5C:EE:73:01:A3:92:C6:5D:5E:CF:44:2A:78:96:78:63:56
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CFA89C2B504955561EF6F8978797818F2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4uF-XO5zAaOSxl1ez0QqeJZ4Y1Y.roa
Signing time: Thu 11 Jan 2024 21:59:41 +0000
ROA not before: Thu 11 Jan 2024 21:59:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215828
IP address blocks: 2a0e:b107:2804::/46 maxlen: 48
2a0e:b107:288c::/46 maxlen: 48
2a0e:b107:27fc::/46 maxlen: 48
2a0e:b107:27d4::/46 maxlen: 48
2a0e:b107:2800::/46 maxlen: 48
2a0e:b107:27f8::/46 maxlen: 48
2a0e:b107:2888::/46 maxlen: 48
2a0e:b107:27d0::/46 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Jan 2024 18:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:89:c2:b5:04:95:55:61:ef:6f:89:78:79:78:18:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 11 21:59:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2e17e5cee7301a392c65d5ecf442a7896786356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1e:a5:64:81:64:9d:2b:8e:d2:eb:c6:29:e0:
fc:f3:79:78:cb:1a:27:4d:24:1f:74:b4:e2:6d:73:
c8:78:3b:03:c7:9c:0e:8a:97:ef:c3:22:2a:83:24:
16:25:7e:f6:73:08:50:69:a5:1f:f5:99:fd:18:69:
e1:32:f9:71:a0:4b:91:c3:28:87:94:32:7c:76:4e:
b9:fe:34:d9:83:c1:32:bd:6d:56:5f:02:3b:83:0a:
d7:cb:9c:64:69:68:f6:de:51:ce:64:fb:e4:e6:7a:
38:b4:09:10:2d:61:c5:fb:0b:05:b4:6d:3d:83:0c:
8d:6e:80:ac:3f:a0:1e:00:84:68:9a:8d:4f:9c:88:
1c:8c:64:2a:f5:04:8f:bc:a6:56:8a:b3:80:fa:09:
ea:df:88:c6:0b:e1:ad:80:a9:80:fc:94:ea:de:60:
bd:07:c8:b4:85:f4:d3:f1:c3:c6:85:24:c5:62:fd:
f5:c9:ff:01:5c:44:41:d5:92:52:76:bc:60:0e:40:
a3:48:3e:16:d6:9e:cc:0e:87:2c:35:18:f2:c2:88:
ad:97:92:52:22:4b:a3:bc:8b:f1:97:69:13:51:2c:
d4:de:80:b3:ee:26:35:fa:e7:c7:21:a0:b1:9d:eb:
e5:70:77:01:f4:79:56:ba:d7:90:68:36:fb:38:5e:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E1:7E:5C:EE:73:01:A3:92:C6:5D:5E:CF:44:2A:78:96:78:63:56
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4uF-XO5zAaOSxl1ez0QqeJZ4Y1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27d0::/45
2a0e:b107:27f8::-2a0e:b107:2807:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2888::/45
Signature Algorithm: sha256WithRSAEncryption
65:3b:67:c7:d4:33:6c:ba:06:0f:67:98:a0:a9:ef:e7:77:30:
ae:a1:6a:2a:8a:51:ea:e6:46:f9:51:9f:de:42:07:8a:11:ae:
48:eb:21:a0:46:be:87:dd:6b:3d:42:5a:26:22:3a:ca:52:48:
c0:ba:0a:b7:be:d1:d1:22:d5:a3:0f:83:e1:e5:bc:5d:06:c7:
b1:26:10:db:48:16:09:32:38:97:30:01:be:53:4d:2e:45:55:
fd:2e:07:c6:a3:ab:ae:4b:02:02:8f:82:ee:70:81:80:9f:75:
31:53:e8:dd:50:72:cf:44:41:30:b9:a8:fc:c2:ce:8e:9a:90:
09:18:b1:ae:a8:c3:98:72:c7:c4:7a:dc:14:07:e3:7f:63:52:
5f:f3:8d:1f:b2:b4:6e:21:04:f5:55:a0:98:ec:09:6a:a8:56:
84:d9:02:1f:d3:57:93:d1:88:1e:9a:56:57:7f:1e:bc:a3:48:
66:2e:8f:2c:d2:64:94:65:ef:7a:d7:b2:de:20:3a:44:97:0d:
cf:fb:d7:91:c1:93:62:e2:64:50:b2:b5:b9:f3:47:43:f8:8a:
53:82:c8:37:9f:8a:bb:2d:19:fd:34:ed:c7:75:49:41:d4:ef:
43:1b:8d:04:64:03:64:cd:b1:09:c5:6c:f9:52:f7:a9:b6:93:
7e:42:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 22:04:39 2024 by rpki-client on console-fra.rpki-client.org