Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Tx_R5_Su2JsyNOxS5E435xLKoA.roa
File: 5Tx_R5_Su2JsyNOxS5E435xLKoA.roa (raw, json)
Hash identifier: R64HZpc+vCeAPrFEnBHvtHQxS916+ez5gS0Qplm42q0=
Subject key identifier: E5:3C:7F:47:9F:D2:BB:62:6C:C8:D3:B1:4B:91:38:DF:9C:4B:2A:80
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018AAA0729B4FC370E8EC5AB5D9F1051BC69
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Tx_R5_Su2JsyNOxS5E435xLKoA.roa
Signing time: Mon 18 Sep 2023 20:41:50 +0000
ROA not before: Mon 18 Sep 2023 20:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197919
IP address blocks: 2a0e:b107:27c8::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Sep 2023 10:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:aa:07:29:b4:fc:37:0e:8e:c5:ab:5d:9f:10:51:bc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 18 20:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e53c7f479fd2bb626cc8d3b14b9138df9c4b2a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:86:70:0b:a2:7a:69:a4:91:4f:02:f3:f8:
ff:d8:dd:bb:57:bd:9f:c6:75:72:46:7c:5f:fc:a0:
55:a9:55:f0:dd:d5:aa:22:85:f5:c1:d6:5f:56:61:
f7:83:5b:6d:ce:d4:ed:1f:1c:8c:d5:f1:ad:6b:c8:
22:96:de:2d:a7:81:0b:aa:35:98:06:28:5e:3f:44:
3e:51:fd:ae:b2:57:97:59:76:a0:f2:9d:02:41:7e:
56:a0:6c:25:f5:2c:cb:cd:99:92:73:c2:94:4c:37:
97:28:68:bc:a4:1b:f8:55:2b:6d:b2:7c:f3:82:e6:
b2:67:41:8f:8c:29:64:a8:6d:a6:75:e2:5c:55:42:
c8:25:f6:1c:5c:15:d8:9e:f2:95:e6:ea:4f:bd:10:
c1:41:23:75:c2:2b:47:90:a2:41:9c:eb:fc:9e:25:
5c:df:9d:68:4f:5a:ce:da:02:dd:ce:44:e6:58:d6:
84:8c:9c:97:f4:fd:8a:27:68:5b:39:4e:f3:85:b5:
5b:1e:5c:53:e8:a5:e4:cc:3a:a3:1a:ad:c6:c0:e8:
35:9c:21:b4:82:87:03:e3:f3:3d:6b:15:b3:2a:30:
6c:56:36:2a:6b:71:e0:a8:aa:68:80:72:41:75:f2:
2b:9e:a5:6c:98:25:94:ce:7f:db:23:77:65:63:fa:
07:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3C:7F:47:9F:D2:BB:62:6C:C8:D3:B1:4B:91:38:DF:9C:4B:2A:80
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Tx_R5_Su2JsyNOxS5E435xLKoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27c8::/46
Signature Algorithm: sha256WithRSAEncryption
91:44:f2:02:4c:d3:e4:95:25:fa:8c:16:97:88:5c:16:12:be:
36:a0:e9:a4:23:51:72:e0:9f:ee:05:bf:ed:4b:80:31:a0:66:
19:5d:7d:d5:64:c8:13:4f:f8:b4:6a:f2:4f:37:db:20:58:c8:
53:cb:6a:44:eb:aa:ac:06:14:27:4f:f7:ba:57:2c:ba:d2:3a:
1b:0a:4e:ba:2c:fc:e5:62:db:31:9a:64:2c:eb:d9:13:08:74:
cf:f8:fa:8f:03:cb:d3:1a:47:72:44:52:b6:44:34:c3:8d:d8:
a5:ee:e6:e8:71:fa:04:4d:13:da:0a:19:bf:b9:6d:2e:15:1b:
e3:c4:49:de:8e:36:40:be:4b:f9:06:0a:55:d9:76:57:08:f4:
c6:1c:e3:61:66:43:9d:2a:4a:1e:54:1f:77:e2:ea:29:22:3f:
94:d8:64:78:b3:35:b9:34:b0:0b:84:9b:61:16:8b:ed:1d:df:
be:4c:35:3b:9d:8f:30:80:96:30:1b:85:ee:2b:2e:15:dd:8a:
4b:f4:35:a7:69:c0:0d:9c:dc:02:a6:98:7e:40:19:42:a1:aa:
08:f6:d4:be:46:b6:8d:06:fa:36:28:a6:1a:61:eb:b2:96:f2:
f4:eb:64:3c:74:56:04:93:5a:fb:84:9d:56:01:7c:99:3c:f6:
8f:26:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:22 2024 by rpki-client on console-fra.rpki-client.org