Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/52fE_LxT71U1Gak1YoRtzIbOMOc.roa
File: 52fE_LxT71U1Gak1YoRtzIbOMOc.roa (raw, json)
Hash identifier: ePSdy0fO3FtpbdV0QRjNeU+dKgT28dzMszDzaEeq91A=
Subject key identifier: E7:67:C4:FC:BC:53:EF:55:35:19:A9:35:62:84:6D:CC:86:CE:30:E7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019227647BC298F8C8D6830B01E8703348F6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/52fE_LxT71U1Gak1YoRtzIbOMOc.roa
Signing time: Wed 25 Sep 2024 04:15:49 +0000
ROA not before: Wed 25 Sep 2024 04:15:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214147
IP address blocks: 2a0e:97c0:1a0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 09 Nov 2024 19:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:27:64:7b:c2:98:f8:c8:d6:83:0b:01:e8:70:33:48:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 25 04:15:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e767c4fcbc53ef553519a93562846dcc86ce30e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fb:10:c4:76:8d:2b:d6:30:0a:be:c1:40:d0:
2c:d0:1b:c5:ea:33:c6:9e:20:e0:11:2d:63:fd:73:
80:c1:bf:9a:8f:b4:97:73:9e:e5:1a:e7:48:ef:82:
1d:05:bb:96:2d:a2:83:7c:e6:43:cd:b0:3f:35:d1:
8c:6a:c8:7e:38:9f:f9:13:f7:d4:07:53:cf:99:32:
99:48:57:47:5a:e5:71:7f:a6:df:91:da:55:24:e3:
9d:54:29:22:60:f9:85:96:a5:32:d2:e6:43:26:8a:
73:cc:0d:ce:b1:02:e8:8f:5c:57:36:50:af:23:c3:
5e:f0:9f:d6:b1:1c:b2:be:78:7a:01:64:f6:3b:bf:
91:62:1f:c0:2b:12:eb:aa:54:d7:28:4d:cf:a7:dd:
d6:49:ba:b2:61:32:fa:ed:db:91:3b:f8:85:e3:b3:
cf:7b:52:ae:df:4d:36:b5:19:c4:15:12:6f:cc:7e:
52:ec:08:f7:1c:4e:c3:71:2d:24:45:1b:1a:81:20:
58:22:7b:4c:6f:16:ca:45:be:c2:d7:23:63:58:9a:
71:13:68:4f:31:23:91:5b:d5:5e:97:87:ee:8f:45:
de:c3:58:dc:a8:f1:b3:5a:26:ef:96:a7:09:68:a9:
af:7d:13:d3:d5:5f:1c:11:95:f4:1b:c2:bf:a3:cd:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:C4:FC:BC:53:EF:55:35:19:A9:35:62:84:6D:CC:86:CE:30:E7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/52fE_LxT71U1Gak1YoRtzIbOMOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:1a0::/44
Signature Algorithm: sha256WithRSAEncryption
7c:a8:2a:bf:4b:f1:ea:47:ce:9c:af:17:af:3e:65:78:9b:69:
93:a3:53:73:4c:21:16:a6:35:79:14:de:f5:6b:08:f9:2f:d7:
f6:cf:34:21:3e:f7:07:07:f9:39:38:c0:33:1f:a6:a7:6f:b7:
a2:49:91:f6:14:9b:05:e9:63:8e:b5:bd:2e:69:cb:de:d8:63:
68:3b:51:36:c3:29:2d:96:27:f1:7e:3f:86:c2:5d:2f:54:0c:
5c:e6:8a:73:51:dd:60:10:c0:48:51:cf:75:45:58:6a:fd:ba:
55:c8:9b:f0:5d:53:b1:fd:d0:a7:5b:a8:3a:a8:69:18:c9:62:
b0:3e:84:b7:b2:5a:fb:78:ef:80:02:dd:13:c7:fa:92:ea:ea:
64:7f:1b:43:dd:2f:a0:3b:e2:b8:a7:d0:a0:be:ed:c9:df:b0:
6e:b0:a5:4c:89:23:2d:07:87:91:4e:94:d6:2a:03:6b:ba:ea:
6f:04:53:7d:98:88:b7:cc:33:65:8e:cd:fa:ee:d5:fc:ce:fc:
29:02:7e:74:51:2c:31:7f:5a:d2:87:41:0f:9d:35:cf:4d:36:
8b:8f:82:68:51:11:c8:02:ce:35:5c:9f:f3:bb:bf:c9:c3:ae:
d4:0c:c0:0e:00:2b:6d:a0:9f:e9:a4:04:ae:49:92:e0:67:1b:
1a:14:df:44
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 9 20:40:46 2024 by rpki-client on console-fra.rpki-client.org