Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6uH5v0F4hIo-HZjIb_je1B3zbHA.roa
File: 6uH5v0F4hIo-HZjIb_je1B3zbHA.roa (raw, json)
Hash identifier: ICdkiuH1JPMjZQcz08OD/zoNKQRZLaams4AvqqvQHQc=
Subject key identifier: EA:E1:F9:BF:41:78:84:8A:3E:1D:98:C8:6F:F8:DE:D4:1D:F3:6C:70
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7941356029F5EAD0815C7D0CAE3A4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6uH5v0F4hIo-HZjIb_je1B3zbHA.roa
Signing time: Mon 02 Jan 2023 05:15:02 +0000
ROA not before: Mon 02 Jan 2023 05:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140936
IP address blocks: 2a0e:b107:bd0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:94:13:56:02:9f:5e:ad:08:15:c7:d0:ca:e3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eae1f9bf4178848a3e1d98c86ff8ded41df36c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:8c:56:e2:70:96:e0:45:b9:97:c9:46:2b:
5a:25:d3:c9:37:1d:de:a5:db:ec:53:a0:72:06:fb:
79:60:63:6b:59:0a:36:af:95:3e:ad:d3:c0:f7:71:
bb:6b:89:22:81:d6:4d:ee:12:ea:43:5b:02:3a:af:
08:b1:c2:9d:82:c9:84:32:cd:cc:f7:63:f8:6e:46:
eb:be:28:29:f4:84:64:d0:fa:05:59:0c:6a:e3:fb:
92:aa:b0:57:75:08:44:36:cf:98:d2:2d:39:4d:89:
fb:a0:4d:4a:ad:e0:8c:73:b9:3f:5f:95:b5:e2:39:
13:6a:ec:ce:c9:ba:cc:62:8c:d8:7d:08:28:af:d9:
eb:7e:1e:7e:92:a0:f7:48:af:72:28:90:37:ab:1d:
b2:74:14:7c:d7:b1:c6:9d:c6:f1:2c:e3:8a:26:f0:
7a:8a:2b:1a:6a:fc:34:5c:0e:f3:c8:45:69:61:9b:
c5:99:35:f9:ae:06:25:82:2c:e5:a5:ed:d3:7e:7e:
7f:ea:16:c4:50:5f:bd:49:04:de:fb:87:05:6f:4e:
6b:94:93:78:58:c5:a2:b0:ee:f3:b8:36:ce:0d:8d:
f4:cb:20:1e:6f:6d:4f:62:20:43:a3:ce:bd:95:6c:
09:de:eb:74:9c:f0:80:bd:12:39:ca:15:14:4c:c1:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E1:F9:BF:41:78:84:8A:3E:1D:98:C8:6F:F8:DE:D4:1D:F3:6C:70
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6uH5v0F4hIo-HZjIb_je1B3zbHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:bd0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:82:f1:e1:c0:d3:92:f4:c9:52:dc:a8:ab:9c:b0:37:fa:2f:
b0:58:ce:73:12:4d:6f:6c:af:a9:f3:17:25:05:54:7c:0d:e7:
27:e5:50:0e:12:5e:a0:14:41:2e:e7:a6:2c:9a:6c:36:ec:58:
39:40:72:84:f1:52:ed:42:11:05:f3:da:5c:82:47:cc:b7:5b:
52:5f:29:75:2d:c2:52:da:37:43:7d:a0:94:9c:00:8a:e1:9b:
60:d4:99:e0:2c:f4:f7:d0:9a:c4:53:01:53:5e:01:1e:21:14:
5e:89:9b:b1:64:1c:97:9b:3c:2c:30:48:ad:07:2e:e6:99:00:
a3:5c:f5:84:3e:50:d0:96:25:43:9b:14:31:6b:8a:8f:02:1e:
9c:b1:8e:f2:43:d6:84:ac:41:95:10:9b:04:1b:1f:72:a2:40:
27:8a:a6:8d:44:7c:dd:f2:ec:c1:17:89:98:78:52:af:40:6d:
06:79:c2:b1:3a:68:5c:46:bb:92:7a:70:bd:35:b2:92:47:8b:
83:ab:53:1d:4f:53:d7:4c:aa:1d:77:66:1d:f8:81:43:13:cf:
de:bb:03:c8:7e:56:41:49:6c:56:7b:fb:04:43:fe:0c:30:9a:
d0:3c:a6:26:1e:9c:f8:1a:90:f5:3b:f6:ef:43:a7:22:b8:94:
40:3a:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:23 2024 by rpki-client on console-fra.rpki-client.org