Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7jv0qI6rakVSta-H5vm0z7KwIY8.roa
File: 7jv0qI6rakVSta-H5vm0z7KwIY8.roa (raw, json)
Hash identifier: h2Zc17enGkBqkRWhYWmcN7sU556LrIctXVYp/NP0mEU=
Subject key identifier: EE:3B:F4:A8:8E:AB:6A:45:52:B5:AF:87:E6:F9:B4:CF:B2:B0:21:8F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A52D06B01A69D3E55E7C4BC6CC506D92F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7jv0qI6rakVSta-H5vm0z7KwIY8.roa
Signing time: Fri 01 Sep 2023 22:15:05 +0000
ROA not before: Fri 01 Sep 2023 22:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199766
IP address blocks: 2a06:de00:11::/48 maxlen: 48
2a06:de00:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Sep 2023 10:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:52:d0:6b:01:a6:9d:3e:55:e7:c4:bc:6c:c5:06:d9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 1 22:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee3bf4a88eab6a4552b5af87e6f9b4cfb2b0218f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:f7:01:f0:43:81:db:78:a9:ec:e5:74:0f:
4c:6f:0a:c5:1f:98:ec:c5:e9:fb:f5:68:ed:d0:ba:
8a:ac:aa:1f:d4:d9:76:96:a6:37:ac:bf:8e:6d:16:
da:6e:65:db:43:eb:aa:37:09:2c:e4:ba:d4:28:a4:
9f:d4:0f:ad:b0:e5:6d:87:16:d6:b7:d1:e8:b4:48:
ea:0e:9b:48:6d:ad:68:fa:ea:a4:86:57:ca:84:a6:
0c:49:04:01:16:e6:89:fe:97:68:db:51:69:38:7f:
fc:7f:59:05:cd:8e:d7:b5:6b:b1:ba:70:d5:35:75:
8e:f3:c4:08:35:3a:46:86:e1:e8:b2:bc:f6:45:84:
cf:47:35:5b:6e:62:e0:c6:ca:3e:02:52:21:5d:19:
98:ca:70:7e:fd:b2:45:01:89:a7:14:e1:81:17:8c:
aa:19:2b:92:88:da:aa:55:c3:0e:00:6a:1b:ec:24:
65:23:60:55:9f:c8:45:df:a5:c6:67:42:71:b5:a9:
e2:cc:07:46:8d:99:6f:72:57:a3:30:9d:6d:20:9c:
b0:60:d4:36:e8:d8:21:47:03:eb:f8:d7:8e:a1:82:
13:fe:5b:f3:45:3e:bd:fb:42:04:32:a1:8b:8d:42:
cb:a7:d2:54:d3:cd:76:b8:3f:28:a7:a9:db:67:fb:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3B:F4:A8:8E:AB:6A:45:52:B5:AF:87:E6:F9:B4:CF:B2:B0:21:8F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7jv0qI6rakVSta-H5vm0z7KwIY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:10::/47
Signature Algorithm: sha256WithRSAEncryption
4b:c8:21:5b:a3:c7:93:5d:9c:5f:2f:bb:2f:60:ab:c6:be:46:
e6:58:77:1b:d9:fe:34:d8:28:f0:17:33:81:4a:75:57:98:63:
43:b7:a9:2f:ea:07:3f:3c:3b:32:84:46:29:a2:78:d2:17:be:
ac:07:5b:a8:1c:0e:1b:9e:ed:97:b4:ee:79:ae:3d:53:99:ce:
01:f9:69:d6:73:82:09:4c:aa:bb:a4:12:c1:21:b1:24:54:4a:
a6:37:ae:92:4e:86:0f:73:3a:35:ff:f2:26:b0:02:0c:b3:c6:
e9:2f:de:56:d6:ab:b2:64:17:ae:5e:ff:96:b2:bf:fd:05:87:
f7:be:24:51:4e:1d:34:42:cf:60:d6:3c:d1:2d:79:9e:c8:38:
fa:fd:2e:cf:4c:6e:45:27:bd:74:b9:15:99:a3:a6:39:ab:e5:
31:50:8f:d5:d2:64:e9:0d:92:ca:47:36:0f:1f:da:e0:e3:e0:
2f:c8:7f:1d:3b:fb:00:6f:51:59:7b:9c:68:d4:9c:2e:ba:0f:
af:7f:03:8e:50:e5:32:d3:8a:13:2e:51:26:1a:2d:90:3d:93:
50:2a:e0:76:ab:00:8d:dd:2f:72:38:31:f3:12:5d:a1:e8:c3:
44:bb:68:66:5b:f2:7b:ab:77:f5:ab:ba:da:6d:1c:be:3a:42:
df:c6:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:23 2024 by rpki-client on console-fra.rpki-client.org