Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6sEhVCzlpylyWIpwb2QR0GRxYic.roa
File: 6sEhVCzlpylyWIpwb2QR0GRxYic.roa (raw, json)
Hash identifier: 32+3FLYX+vYkVWFJBKqjn2dkw5sPro/IceTmwfNYsWk=
Subject key identifier: EA:C1:21:54:2C:E5:A7:29:72:58:8A:70:6F:64:11:D0:64:71:62:27
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C6503F3F9DD4686A17E01C67058494270
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6sEhVCzlpylyWIpwb2QR0GRxYic.roa
Signing time: Wed 13 Dec 2023 21:10:07 +0000
ROA not before: Wed 13 Dec 2023 21:10:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216418
IP address blocks: 2a0e:97c1:130::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Dec 2023 21:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:65:03:f3:f9:dd:46:86:a1:7e:01:c6:70:58:49:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 13 21:10:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eac121542ce5a72972588a706f6411d064716227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:36:16:d4:94:2d:22:87:f9:37:f6:61:bf:
6f:fe:6c:f0:b9:d6:98:56:0d:48:4b:4b:52:b7:9b:
7a:05:5e:b3:de:6b:80:b2:90:a1:56:57:84:20:a9:
f1:d2:69:ab:aa:6c:3b:17:79:6b:2c:39:2f:c2:ec:
19:71:04:a9:da:e2:c5:cd:14:62:9c:cf:f5:7f:32:
1f:ec:96:db:e8:d8:72:97:cc:1c:bf:7d:8a:3a:0c:
f6:54:58:41:17:be:23:62:91:a4:b8:d0:e1:07:ff:
ee:77:c7:ad:d2:66:0a:fe:e5:07:f6:f2:81:93:0d:
b2:7c:3b:d9:89:0a:01:bf:94:95:2b:37:b0:e6:fc:
54:8f:eb:60:e1:4e:9a:ed:4c:75:ca:ab:0d:c5:6b:
85:f9:f6:96:3d:d2:af:ce:b1:5a:37:c5:95:5c:a5:
d3:74:7a:17:37:99:7c:6a:7b:4a:22:48:29:de:d0:
8b:1c:db:b2:a6:79:2b:72:3e:d0:10:17:79:a4:1d:
f0:3c:d3:3b:7a:f3:7c:4d:67:41:78:4e:9b:30:f3:
39:ad:7a:a0:79:f7:e8:6d:4e:5c:b9:3a:d5:2c:c4:
58:af:d9:a2:a4:ff:fc:03:4b:79:9e:d6:69:e5:33:
ef:07:50:ce:1f:d3:e6:47:4b:5d:98:72:96:01:9f:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C1:21:54:2C:E5:A7:29:72:58:8A:70:6F:64:11:D0:64:71:62:27
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6sEhVCzlpylyWIpwb2QR0GRxYic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1:130::/44
Signature Algorithm: sha256WithRSAEncryption
2b:d9:a6:14:50:b7:0a:d5:25:80:5f:87:26:74:bc:d0:9f:84:
d1:b2:12:e9:95:eb:01:26:45:aa:bc:4c:e7:6e:b1:5c:59:c7:
c8:6e:8a:2a:65:26:ff:62:2b:7f:93:9d:d6:2b:68:64:29:68:
1d:9b:ec:7e:20:d4:df:ce:9f:9a:87:53:4a:01:cd:ba:bc:35:
38:bc:37:70:3a:37:ab:6b:74:6a:d5:27:0f:e2:cd:0b:0e:b3:
6e:68:47:5f:6f:11:3e:eb:19:c1:f7:ef:d7:96:fd:ef:83:5a:
66:23:45:56:1a:5f:54:b3:32:c0:e4:2d:07:b1:1a:5a:6f:72:
7a:2f:ab:c0:b6:b1:da:7b:2c:20:60:af:73:dd:50:ed:ea:28:
e2:eb:ce:9b:4d:08:b7:9d:a0:7e:b8:64:ba:de:75:62:6a:14:
a3:bb:45:8b:4e:87:85:a9:7a:01:b1:4d:84:2c:1b:e6:d9:8e:
87:85:56:77:9a:32:3c:b0:31:5e:82:b0:3a:5d:00:10:63:f2:
cd:1c:7f:4c:ca:e4:14:4a:59:be:17:31:90:55:41:7f:f1:39:
d8:c1:75:88:cf:a8:14:83:71:8f:ee:32:2e:89:6d:4b:f5:bb:
e7:fe:ad:a1:7f:a1:f7:69:ac:52:60:e7:4a:ce:6c:ab:e6:34:
73:77:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:23 2024 by rpki-client on console-fra.rpki-client.org