Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5u51vghtYttDWv-883USa8zxPE0.roa
File: 5u51vghtYttDWv-883USa8zxPE0.roa (raw, json)
Hash identifier: irSSP50t77iX+ri8vzQcXmVUt9YNqB8y/Us3tjrf4YE=
Subject key identifier: E6:EE:75:BE:08:6D:62:DB:43:5A:FF:BC:F3:75:12:6B:CC:F1:3C:4D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DE7EE93F29981326D1766DE8FEC817739
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5u51vghtYttDWv-883USa8zxPE0.roa
Signing time: Tue 27 Feb 2024 00:19:48 +0000
ROA not before: Tue 27 Feb 2024 00:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212196
IP address blocks: 2a0e:b107:ec0::/44 maxlen: 48
2a0e:b107:ec0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 00:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e7:ee:93:f2:99:81:32:6d:17:66:de:8f:ec:81:77:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 27 00:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6ee75be086d62db435affbcf375126bccf13c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:69:2e:e0:a0:14:30:f0:33:29:e0:eb:3e:
07:5e:cb:86:54:20:50:c3:a6:0e:3f:f4:f0:f1:ee:
55:1a:42:87:25:ee:fc:83:15:6f:3a:a3:0f:6e:c8:
91:bc:76:32:04:c5:09:e7:3f:56:0a:1a:90:f9:88:
15:67:1c:31:d1:52:b6:d3:a3:0a:53:33:dc:33:3a:
8a:1a:14:4a:0f:4c:40:82:ad:20:ff:9f:2e:45:0e:
98:ad:ee:35:eb:28:7c:66:27:df:7b:71:e1:2a:15:
bd:c1:a2:80:15:64:ff:e8:d2:34:45:c2:43:25:d1:
59:8e:84:03:e9:ad:1a:9a:10:3c:f2:03:13:c5:e5:
4b:d8:1e:ce:85:5c:27:17:86:19:02:95:07:fc:1c:
ce:ec:2c:d0:c6:19:85:d5:7c:51:62:a3:67:5a:eb:
2a:78:a4:b1:b9:36:3f:29:62:14:6f:45:17:81:c7:
1c:6a:e6:5b:b6:1b:c1:43:e9:49:12:77:8f:8e:90:
4b:c7:15:16:3a:8d:72:a9:ae:75:12:2c:0b:9c:77:
76:c1:89:f0:c3:c7:19:43:e4:8a:bf:b3:44:93:57:
dd:ed:49:da:32:55:49:92:72:97:a3:a0:17:5e:05:
02:92:01:2f:2b:7e:5d:02:6a:78:51:ad:d8:57:aa:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EE:75:BE:08:6D:62:DB:43:5A:FF:BC:F3:75:12:6B:CC:F1:3C:4D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5u51vghtYttDWv-883USa8zxPE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ec0::/44
Signature Algorithm: sha256WithRSAEncryption
72:96:a7:b8:5e:e8:49:10:02:a5:e1:35:6a:e6:9d:ee:b3:bc:
04:3c:e4:0b:65:da:82:70:35:39:01:2d:f5:ab:1e:9d:9c:7c:
ec:35:71:17:d8:b5:bc:be:c9:70:58:3c:e4:09:f8:3d:56:72:
88:13:88:fb:44:87:90:ed:80:11:c8:44:5e:61:e6:39:09:48:
c0:4b:14:15:a1:23:cd:28:03:99:a0:23:a6:1f:e3:9d:72:ec:
30:01:2b:91:c7:da:c6:1b:8c:c1:f1:13:0a:0a:72:a0:d5:1c:
2e:0e:d2:8d:c9:6a:78:33:97:f1:d0:1b:ff:91:46:44:27:dc:
f8:0d:6c:98:77:fa:90:2e:4f:cd:07:78:47:62:87:2e:94:65:
53:fa:52:57:be:39:b9:b4:97:ed:3b:d0:4b:96:19:43:c6:81:
96:d0:ec:bb:56:58:ea:74:9a:48:bf:02:48:f0:04:78:9a:40:
43:d6:3b:97:d4:6e:4f:50:3a:db:6c:a0:c5:2f:86:31:c7:54:
f1:ea:fd:b6:c1:c0:6b:26:44:ff:d1:7c:2e:88:57:8d:52:92:
dc:79:3d:6e:74:14:96:a5:e8:3a:6f:7c:f5:38:fe:2e:fd:b1:
f2:44:e2:84:7a:cb:23:72:22:1f:53:59:53:cc:56:3f:a8:29:
b3:95:92:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:22 2024 by rpki-client on console-fra.rpki-client.org