Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8CIvgbiMn2T4wXDgBIQIzki3v0Q.roa
File: 8CIvgbiMn2T4wXDgBIQIzki3v0Q.roa (raw, json)
Hash identifier: xgan3m5xXL5Zu1J93MVidBpRzIhxGs3pf36mwdnXfi4=
Subject key identifier: F0:22:2F:81:B8:8C:9F:64:F8:C1:70:E0:04:84:08:CE:48:B7:BF:44
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186DB1F278AAAA2F8B9F009EAD1EA5B94F9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8CIvgbiMn2T4wXDgBIQIzki3v0Q.roa
Signing time: Mon 13 Mar 2023 13:18:17 +0000
ROA not before: Mon 13 Mar 2023 13:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210397
IP address blocks: 2a0e:97c0:780::/48 maxlen: 48
2a0e:97c0:78b::/48 maxlen: 48
2a0e:97c0:781::/48 maxlen: 48
2a0e:97c0:78f::/48 maxlen: 48
2a0e:97c0:78a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Apr 2023 21:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:1f:27:8a:aa:a2:f8:b9:f0:09:ea:d1:ea:5b:94:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 13 13:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0222f81b88c9f64f8c170e0048408ce48b7bf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:99:f4:77:1c:fd:1a:a1:2c:96:99:f7:ed:
2d:50:62:bc:a1:ad:74:07:54:57:99:a5:36:e2:d5:
1f:0e:83:31:af:78:90:46:87:ea:84:cf:63:0c:12:
28:41:2b:75:93:f8:a6:8b:dd:a5:ad:a4:c8:a4:cb:
07:54:ec:cd:61:ff:07:07:85:dc:e6:37:af:f0:60:
61:6d:2f:53:f9:37:1c:dc:19:65:a1:26:d8:82:e2:
d9:c1:9a:18:85:73:bf:cc:0e:a0:36:c6:b6:c2:ff:
34:b7:83:11:5b:27:03:5e:05:b8:b6:eb:d1:27:02:
60:7e:f6:2b:f7:f4:21:87:41:db:13:ba:e0:0b:9f:
a9:f0:38:06:fe:49:26:50:e3:1e:05:37:d9:76:8a:
3a:b7:fa:30:24:f0:d7:7a:af:ac:e7:49:37:95:71:
d0:58:87:74:ed:08:fc:df:e1:78:a6:7f:68:a7:c9:
59:ca:06:8b:2a:09:f0:3b:2e:ea:b5:0c:63:da:f0:
38:7a:e0:b7:49:75:a7:0e:a3:3b:28:8d:7d:5c:6e:
3a:85:0b:c0:f7:8d:77:43:48:8e:82:ba:55:89:e0:
ca:33:c9:29:7f:8b:38:85:30:01:6f:6d:f9:cd:53:
d3:69:84:95:fa:c3:97:8e:f3:92:25:cd:ac:d7:c6:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:22:2F:81:B8:8C:9F:64:F8:C1:70:E0:04:84:08:CE:48:B7:BF:44
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8CIvgbiMn2T4wXDgBIQIzki3v0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:780::/47
2a0e:97c0:78a::/47
2a0e:97c0:78f::/48
Signature Algorithm: sha256WithRSAEncryption
4c:2d:41:40:e2:51:11:b1:f8:d9:3f:ec:1f:34:b5:67:34:a3:
66:80:ba:99:0b:8b:83:b1:3c:fe:6f:2f:56:a9:9d:da:6b:11:
13:bb:49:29:13:53:bd:9e:bd:43:9d:6e:b4:0e:f2:70:e3:12:
cc:6d:56:5f:86:24:6c:35:47:aa:da:84:31:43:cd:1a:98:59:
89:6b:dc:c3:b0:23:11:ef:f8:07:b0:c1:2e:3d:1c:04:bc:7f:
cd:ac:13:13:48:00:32:d4:c3:95:7e:84:5a:a8:f3:a9:e8:ba:
54:e7:1d:9c:68:e3:d4:39:1e:46:29:2c:a0:a9:8c:0d:d8:db:
4e:b1:55:db:6a:63:61:99:b0:e7:19:7d:8e:34:70:d3:67:c8:
22:41:7a:7a:f4:5d:26:9b:3e:28:7e:b8:89:df:96:ef:fd:13:
19:72:52:09:9a:7c:bb:a9:3c:27:01:b7:f8:03:65:61:86:ea:
5d:d2:e3:34:de:a5:51:89:2d:25:fb:21:f6:78:d3:f0:a5:c7:
ae:84:c3:ca:9a:1b:38:38:a6:09:c9:f2:74:2f:71:b5:e9:71:
92:39:08:03:fc:c0:75:79:2e:db:98:cc:01:96:c8:d4:61:47:
1c:22:57:a6:6f:d5:20:c2:f4:dc:f9:3e:17:b7:15:2b:5e:ae:
ee:8e:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:55 2024 by rpki-client on console-ams.rpki-client.org