Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7BuNuHZ3FuDEWf_6Qq_jw-3d-jo.roa
File: 7BuNuHZ3FuDEWf_6Qq_jw-3d-jo.roa (raw, json)
Hash identifier: 6pB1Nxcv+cFbXascbpGarUYy3qM481VRqxqPDkUE+6U=
Subject key identifier: EC:1B:8D:B8:76:77:16:E0:C4:59:FF:FA:42:AF:E3:C3:ED:DD:FA:3A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A5BB729BDC978FFC6D72304D5A7DCDE5F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7BuNuHZ3FuDEWf_6Qq_jw-3d-jo.roa
Signing time: Sun 03 Sep 2023 15:44:04 +0000
ROA not before: Sun 03 Sep 2023 15:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216411
IP address blocks: 2a0e:b107:2050::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 25 Sep 2023 17:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5b:b7:29:bd:c9:78:ff:c6:d7:23:04:d5:a7:dc:de:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 3 15:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec1b8db8767716e0c459fffa42afe3c3edddfa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:55:84:99:94:42:f0:21:2b:d5:a2:bf:ae:
2f:73:3f:2d:f5:3e:15:90:f7:32:d7:d9:08:1b:02:
9d:de:57:c1:50:1a:df:2f:28:80:b6:69:56:e1:4e:
2a:3c:03:08:ec:f1:5c:8f:b2:b0:25:bc:0d:63:1e:
e7:ba:40:f8:73:63:5b:0f:e1:a8:2c:f6:6e:c7:51:
2e:d1:30:b8:5a:0b:ac:43:8a:25:c4:b0:7a:bd:e9:
46:ae:ce:4b:1a:01:5a:02:63:45:4e:bd:16:79:9d:
08:55:cc:e9:39:b0:c9:0b:de:f6:2b:75:ac:e4:74:
0d:c4:56:87:9b:9d:16:5c:a2:f0:7d:d5:3c:86:22:
5b:22:28:00:6c:2d:a6:e6:a5:0f:cc:33:b4:61:06:
54:06:80:d6:17:3c:b9:08:90:b1:23:85:5d:a3:66:
0a:ed:ff:65:cf:ed:6c:5d:b3:cb:c6:cd:5f:d4:57:
be:63:a7:78:db:0e:a6:e3:cc:42:d5:b7:56:7e:15:
8d:1b:e8:7e:31:40:09:ec:fb:44:17:81:27:77:2f:
7b:4e:39:bc:cd:3a:8d:b6:56:65:f8:ab:4e:3a:c0:
49:81:ed:cc:df:a6:ea:03:ab:35:be:85:51:30:df:
83:bf:21:c9:97:36:d1:08:9b:54:c4:33:dd:d3:f0:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:8D:B8:76:77:16:E0:C4:59:FF:FA:42:AF:E3:C3:ED:DD:FA:3A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7BuNuHZ3FuDEWf_6Qq_jw-3d-jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2050::/48
Signature Algorithm: sha256WithRSAEncryption
bb:ad:f9:09:40:c8:cf:2e:a8:e7:35:ce:b4:cf:64:57:e6:49:
d5:b3:a6:a8:5b:1b:d5:f7:5e:bb:4b:0f:ee:ab:40:86:48:3b:
b7:4b:7c:95:86:b9:e0:fd:53:3e:2a:39:67:ae:06:0f:0a:c4:
e6:ca:43:09:0a:0c:20:5a:c5:cf:95:39:eb:a8:d8:d6:6e:59:
1f:9c:79:5c:2c:3e:77:33:f9:92:25:d6:5f:70:41:1c:99:12:
77:7c:df:4a:26:af:16:86:d7:fb:af:c8:4c:dd:de:82:93:cd:
66:d3:ef:60:dd:21:22:77:46:e3:a3:85:1f:ff:79:5f:dc:f9:
0f:d5:0a:f0:e6:6e:32:dd:68:7d:0c:20:b1:c6:8e:a6:c7:38:
2c:3a:f4:8e:9a:e2:0b:15:75:48:a9:51:f2:0e:a4:ac:e2:78:
ab:bc:51:97:a6:db:a3:93:5f:d5:66:5c:35:85:26:45:42:c3:
c6:c3:1b:9a:2e:03:4f:e5:4d:d0:6e:d2:48:57:5a:3e:78:8f:
2a:27:79:e0:98:c0:f7:35:83:c4:23:4d:15:fc:f5:11:23:8c:
b4:7f:ca:15:8e:6d:01:2b:e1:0f:77:6a:cd:4c:9a:9e:d4:6a:
71:da:91:9d:b1:76:0f:29:46:f6:9c:49:4b:65:f2:b4:69:41:
15:22:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:54 2024 by rpki-client on console-ams.rpki-client.org