Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6RmjYWX0uNT_rQRq9XZJBdkl8pc.roa
File: 6RmjYWX0uNT_rQRq9XZJBdkl8pc.roa (raw, json)
Hash identifier: rfHTR4tYGhfG+tpzvNhXdqysUmUi/UMPCsczj2VBy54=
Subject key identifier: E9:19:A3:61:65:F4:B8:D4:FF:AD:04:6A:F5:76:49:05:D9:25:F2:97
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C6D4F0DB422C1B4B55EB5C4C02BB7B81C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6RmjYWX0uNT_rQRq9XZJBdkl8pc.roa
Signing time: Fri 15 Dec 2023 11:49:06 +0000
ROA not before: Fri 15 Dec 2023 11:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29632
IP address blocks: 2a0e:b107:27da::/48 maxlen: 48
2a0e:b107:27de::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:4f:0d:b4:22:c1:b4:b5:5e:b5:c4:c0:2b:b7:b8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 15 11:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e919a36165f4b8d4ffad046af5764905d925f297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:be:f6:52:1e:4d:7e:50:2d:43:ce:c9:8d:
7e:a2:b3:c2:33:6d:a3:09:ff:2b:82:17:53:6c:45:
52:d8:de:b3:65:1e:3c:d5:60:67:2e:16:20:41:57:
97:0d:9c:38:bb:48:d4:e1:74:2b:3a:ef:51:a4:3d:
36:12:a2:d3:b3:ca:d6:cd:cb:78:cc:f8:b1:32:78:
db:e3:ec:d2:17:ac:9c:9a:4a:1b:5a:b9:33:31:73:
e2:66:66:00:30:20:52:56:69:3d:73:ff:dd:1a:e1:
7d:1f:4f:27:4c:b3:9f:c7:85:52:e7:56:1a:61:2a:
d6:e7:d0:35:b7:31:fb:7b:b1:58:0c:64:c2:e8:a4:
4c:9c:5f:d3:9c:dd:d2:9b:2a:fa:09:00:6b:93:12:
b3:a6:1b:fc:cf:b9:7c:1b:0b:fc:06:16:36:ad:09:
a6:56:89:e0:6e:52:99:d2:b2:d1:a6:d9:18:eb:8d:
3e:a9:cc:a2:42:cb:f9:c5:9e:0e:6f:40:38:0e:8c:
2f:b9:bc:80:6c:cd:c5:5b:40:2b:11:5f:eb:e9:c4:
af:ef:bc:db:f5:f1:a4:68:1f:3b:6b:93:1f:58:04:
d9:a3:c1:4b:95:d8:cf:c6:64:ae:9c:31:7f:cb:8c:
52:14:1c:92:01:51:b8:c0:a1:be:c8:8d:f9:82:d2:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:19:A3:61:65:F4:B8:D4:FF:AD:04:6A:F5:76:49:05:D9:25:F2:97
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6RmjYWX0uNT_rQRq9XZJBdkl8pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27da::/48
2a0e:b107:27de::/48
Signature Algorithm: sha256WithRSAEncryption
11:b6:02:56:f8:10:1a:ee:0f:48:e3:27:3f:0c:4e:db:b9:ce:
5a:5f:c1:22:a9:46:75:93:bf:1b:d9:6c:5e:63:26:16:d0:74:
22:f0:34:cb:24:10:91:15:17:d0:e6:6d:cc:78:fb:54:b7:3b:
87:0c:63:16:73:b3:17:79:f9:7d:be:93:94:70:ee:b8:46:88:
5a:22:cd:c7:47:fa:49:25:60:63:3f:2f:05:f9:43:60:01:22:
38:f1:7b:de:43:a9:e8:6f:6a:28:37:77:de:16:67:23:45:42:
ce:3f:a5:ce:7a:66:c7:42:28:3c:37:ec:51:48:53:71:48:11:
e8:ba:21:69:7f:eb:cd:45:3d:bf:d2:bb:30:1a:91:19:fa:60:
ea:17:67:2f:08:33:0e:cb:17:d4:81:e4:31:22:9c:4f:ff:8e:
cb:0a:f9:8e:a4:f4:f7:15:8b:70:28:82:71:66:90:80:ac:f8:
2b:f6:5a:81:6e:d3:3d:76:a9:6f:15:f8:b1:9e:b0:e4:ff:15:
56:49:8b:9d:78:ba:39:62:91:2e:16:86:d5:f1:4b:3e:9a:fa:
b7:9a:da:52:04:ec:2f:e8:fe:32:13:5f:de:ef:2f:99:5e:d9:
1e:86:6e:31:11:b0:92:69:cd:f2:a8:4e:f5:38:48:c8:66:71:
4a:f6:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:54 2024 by rpki-client on console-ams.rpki-client.org