Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/84vwA-2M6cAHHi-1xcbksMAhiGM.roa
File: 84vwA-2M6cAHHi-1xcbksMAhiGM.roa (raw, json)
Hash identifier: uqdZ/cZ1tXbq8EB6SuAAo7HDMYUpg3GvKtl7INcJSuY=
Subject key identifier: F3:8B:F0:03:ED:8C:E9:C0:07:1E:2F:B5:C5:C6:E4:B0:C0:21:88:63
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7C483346E8155CD87669565D355E3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/84vwA-2M6cAHHi-1xcbksMAhiGM.roa
Signing time: Mon 02 Jan 2023 05:15:15 +0000
ROA not before: Mon 02 Jan 2023 05:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205531
IP address blocks: 2a0e:b107:178b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:c4:83:34:6e:81:55:cd:87:66:95:65:d3:55:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f38bf003ed8ce9c0071e2fb5c5c6e4b0c0218863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:09:e3:b5:c5:0b:a7:2f:a5:e2:02:fa:23:
ba:5f:cf:84:73:b5:d5:fa:c0:cd:b1:7e:02:9f:90:
61:92:a8:f8:6a:46:8c:81:82:74:2c:25:e1:91:b5:
fb:cd:ea:be:21:a0:bb:e3:11:4c:f3:fe:7b:ae:ce:
15:4c:8c:fd:33:c8:e2:1f:15:f4:dd:ed:4b:5a:6c:
a8:f4:c3:ac:c4:f1:db:47:60:7e:ee:c6:2c:17:14:
38:a3:35:b6:3a:86:99:9a:cc:03:8e:91:db:f6:7f:
dc:0f:c5:5f:5f:b7:1b:1f:68:80:15:36:64:7f:db:
62:1a:0d:ef:11:2e:8e:36:7d:fd:3a:58:3c:eb:bf:
d5:16:d6:f9:16:e3:e8:ad:58:77:99:e2:5f:26:5a:
0d:b5:73:5d:7f:e4:8e:08:d4:87:e2:7c:f3:2e:30:
c4:23:50:ee:de:fd:b6:3f:01:e7:dc:fd:3a:dc:59:
60:16:b2:b2:c5:1b:66:cd:60:d7:c2:c3:69:ec:c5:
3c:03:e0:32:98:0d:9e:b4:68:02:79:1b:82:2a:a1:
c6:c8:e4:14:ff:38:f8:96:ee:94:44:56:97:ef:ab:
b4:4b:c9:11:17:9b:5a:5d:b5:80:74:7f:21:ee:60:
aa:9e:8e:db:ea:d9:4d:85:e1:6d:5d:e8:22:8f:cd:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8B:F0:03:ED:8C:E9:C0:07:1E:2F:B5:C5:C6:E4:B0:C0:21:88:63
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/84vwA-2M6cAHHi-1xcbksMAhiGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:178b::/48
Signature Algorithm: sha256WithRSAEncryption
12:b3:16:e1:63:35:82:90:4a:ce:90:fa:5a:68:37:8f:d0:93:
97:3f:52:34:72:44:81:e7:6a:2e:e4:ae:98:58:55:cf:8e:be:
3a:d4:0f:30:c1:fa:de:76:6e:74:ab:9d:71:d8:ed:54:7f:ff:
22:30:b3:d6:05:5d:30:57:cb:2d:f0:5b:01:5e:e6:94:f6:f0:
98:8b:5c:8d:74:5c:4e:2e:5c:81:b7:54:bb:e2:2a:e1:8e:15:
e7:7f:c2:e4:ae:a5:1d:af:cd:11:f5:9e:f8:02:61:fe:f9:66:
c9:d6:71:47:d5:e0:1a:76:e7:81:8b:00:ad:78:dd:e3:e5:b5:
93:2a:2e:a3:b0:59:2e:d7:d6:07:17:41:a7:81:dd:80:dd:96:
d0:41:8f:44:a9:7a:ae:8e:40:90:1c:3b:5a:a5:a7:ad:49:f4:
1a:c4:c6:87:a6:29:f8:f7:bb:e5:16:3c:7c:b5:04:13:ef:1d:
fe:b3:6e:4f:13:84:6f:d4:ea:10:1c:1a:5c:2c:15:10:93:6b:
0e:87:1f:e9:e6:28:da:0a:47:e6:b8:e9:68:d1:95:e2:32:66:
96:db:fc:0e:29:45:ac:94:b7:f4:58:cf:8c:78:bd:10:2e:6b:
a9:28:6f:79:68:b3:04:bb:d2:2e:2d:40:7b:21:5b:f4:fc:d3:
90:f8:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:23 2024 by rpki-client on console-fra.rpki-client.org