Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6ULTAhyQrtsLLt2nRH99UbvYwZg.roa
File: 6ULTAhyQrtsLLt2nRH99UbvYwZg.roa (raw, json)
Hash identifier: rFM8UalKiv6HeDAo9ghU48G/aQEpLqSTmi5ANnoxx7c=
Subject key identifier: E9:42:D3:02:1C:90:AE:DB:0B:2E:DD:A7:44:7F:7D:51:BB:D8:C1:98
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BB524EBC7F3E5586E69B67ACD0E8BB77F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6ULTAhyQrtsLLt2nRH99UbvYwZg.roa
Signing time: Thu 09 Nov 2023 17:32:57 +0000
ROA not before: Thu 09 Nov 2023 17:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a10:ccc0:110::/44 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 Nov 2023 13:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:24:eb:c7:f3:e5:58:6e:69:b6:7a:cd:0e:8b:b7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 9 17:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e942d3021c90aedb0b2edda7447f7d51bbd8c198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:69:66:02:bd:b7:ee:b7:8f:7f:a6:62:9b:
e9:db:86:31:94:8e:ca:3a:b7:43:18:c5:14:02:51:
51:54:49:ec:cd:77:bc:94:e7:2a:f6:b8:49:ff:16:
0c:7b:8d:90:f6:f9:2a:6e:9f:32:8f:b7:2b:00:2a:
a0:41:a0:a0:7f:11:22:93:30:b8:9d:28:51:d8:c8:
ea:b9:19:72:6d:1f:8f:90:da:0d:e4:80:b5:da:5a:
d7:f7:00:04:48:71:49:21:76:44:f6:7b:e4:e6:5c:
ae:8d:55:38:f6:2e:ec:0a:c8:9b:48:34:22:47:c3:
2b:41:bf:2d:bb:ac:95:20:82:59:6e:20:65:8b:83:
15:0f:0f:39:bd:47:5f:09:67:a6:0c:3f:8d:c4:bc:
a8:9b:58:c5:1e:3e:d0:36:27:68:1a:56:7b:29:b5:
79:1e:9c:10:76:22:23:42:85:0a:38:0e:68:88:c1:
ac:7f:20:4b:4a:97:40:ed:5c:f5:29:34:c9:7a:9f:
cd:4e:9f:a5:65:a9:64:d5:85:8e:6f:5e:93:8e:fe:
28:de:ea:e3:58:ef:0a:42:cd:64:f8:b5:bf:92:8c:
c4:1a:17:7f:94:4d:cc:ea:df:c3:06:01:ee:c8:48:
1c:b4:70:28:75:39:db:cf:0e:b4:d8:24:58:b1:b8:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:42:D3:02:1C:90:AE:DB:0B:2E:DD:A7:44:7F:7D:51:BB:D8:C1:98
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6ULTAhyQrtsLLt2nRH99UbvYwZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
IPv6:
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc0:110::/44
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
86:ec:f8:14:d8:68:1f:2b:5d:bd:78:9a:b8:69:c8:75:a0:33:
47:5f:62:15:da:0f:3b:4e:5b:06:c5:a5:a8:9c:7f:d9:ec:58:
9d:a4:0e:c9:ad:a6:76:62:7b:38:d1:38:0e:19:d2:68:97:b3:
65:d9:48:35:2e:72:af:15:4c:69:e5:fc:07:51:27:39:88:af:
a0:3c:0a:57:2f:0c:9a:41:33:2a:72:16:94:d0:73:ff:08:64:
e2:cc:34:d6:7a:3e:3e:ad:76:97:dd:6b:46:e7:9b:06:67:e2:
ec:bb:22:63:de:7f:e8:c2:18:7b:3e:16:03:d0:b4:18:e1:86:
9c:90:70:39:02:1e:f7:18:db:01:0d:ad:bd:58:ff:db:1f:a1:
30:5b:17:d6:3b:18:b3:1c:ab:76:bb:11:06:af:bd:bf:38:80:
b2:af:d2:5c:1f:fb:c1:35:9a:d6:68:c9:48:53:4f:ed:ce:46:
1a:1d:7b:69:a2:03:f7:18:e0:d5:50:da:15:85:7f:aa:e8:a3:
87:2f:f5:4b:43:c2:82:ae:a9:32:6e:32:e6:26:71:41:8e:db:
1f:3e:9c:5e:ef:a2:85:72:3a:36:1f:1a:4e:85:6e:1e:51:53:
7f:6a:b8:c9:96:c8:3f:0c:69:b7:7d:3e:3d:db:e2:af:25:9c:
e0:4f:2b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:54 2024 by rpki-client on console-ams.rpki-client.org