Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9zGT_aTw32qDZceQHlekER9wpgc.roa
File: 9zGT_aTw32qDZceQHlekER9wpgc.roa (raw, json)
Hash identifier: ZZ1qY8aTBONf5xwOM8py8K4Ogb1eSHoCl6+8I0gH+R4=
Subject key identifier: F7:31:93:FD:A4:F0:DF:6A:83:65:C7:90:1E:57:A4:11:1F:70:A6:07
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AF2623650C051B87F6C6CFABBA58C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9zGT_aTw32qDZceQHlekER9wpgc.roa
Signing time: Tue 24 Jan 2023 16:09:49 +0000
ROA not before: Tue 24 Jan 2023 16:09:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211169
IP address blocks: 2a0e:b107:15b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:f2:62:36:50:c0:51:b8:7f:6c:6c:fa:bb:a5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f73193fda4f0df6a8365c7901e57a4111f70a607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:b0:19:b0:bf:9b:48:31:34:fa:56:58:fd:
f9:59:69:61:a6:c0:49:cd:43:ce:a1:32:76:fa:cb:
cb:20:db:bf:43:1f:96:2d:1c:6e:8f:95:74:b7:7d:
6c:e1:ba:32:09:d4:bb:b8:9d:26:50:0f:1c:ef:69:
2a:c6:8d:8f:6a:ee:37:65:0b:45:56:a2:c5:90:2d:
55:7b:f2:b9:32:99:c0:b2:0c:ef:be:e6:92:63:18:
c6:06:4a:89:b9:db:2c:8b:89:ca:7a:8b:e0:70:66:
8f:da:71:93:a9:4d:c1:6b:b4:86:f5:84:62:41:68:
86:b4:0b:ec:e4:0f:6c:ee:85:59:a7:e2:8e:aa:8e:
6d:44:f5:4f:69:a0:48:56:77:42:6e:39:ec:ee:76:
81:34:53:42:8b:b5:58:95:ca:ca:0f:40:fb:f9:7e:
39:8c:e5:ec:26:3a:3f:b2:74:51:f6:4c:3d:66:94:
58:39:3c:72:26:7c:e8:50:92:15:a6:19:46:39:d7:
55:92:17:a0:33:be:62:24:9b:46:2d:95:4e:25:6c:
23:35:e5:15:ae:51:a6:d5:0d:d7:54:34:c8:7f:3b:
ca:1d:55:cf:82:d9:fb:b8:de:1b:36:68:40:ea:68:
8b:84:b0:20:3a:b3:26:87:0c:f1:93:5b:6e:0e:93:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:31:93:FD:A4:F0:DF:6A:83:65:C7:90:1E:57:A4:11:1F:70:A6:07
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9zGT_aTw32qDZceQHlekER9wpgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:15b0::/48
Signature Algorithm: sha256WithRSAEncryption
3a:1f:64:af:f7:63:12:21:2e:8b:1a:c8:82:93:0a:45:9a:9d:
18:cc:dc:12:09:16:85:67:3a:b2:e9:5a:a0:27:b1:b5:9f:b1:
76:6c:76:e0:61:ba:df:13:ba:72:68:95:88:24:01:56:25:7d:
05:0f:9b:0e:13:56:f1:be:e4:dd:07:a5:4c:07:91:01:ed:ae:
04:54:dc:b9:c9:f5:b9:61:da:b9:90:4b:50:42:1e:4f:5e:99:
aa:41:90:47:52:05:6c:ed:b6:e9:f4:3e:39:75:ad:a7:c2:92:
39:31:37:35:2b:35:5b:94:a1:2b:30:c5:8a:d2:2a:81:dc:aa:
48:90:38:e6:03:81:64:e6:40:dd:5e:0a:6d:fc:92:48:91:bb:
83:84:a6:b9:88:5a:78:d7:fa:f8:d7:50:12:11:eb:12:c3:f3:
44:27:ba:47:aa:81:39:42:2c:97:eb:71:5d:fd:62:1b:e3:4b:
62:3f:43:92:f6:21:5d:af:4f:58:30:7c:94:6a:c3:26:7a:b8:
c2:cd:2a:0e:02:4a:81:41:db:d1:06:a0:c5:46:25:66:98:ff:
77:46:b3:89:f5:c2:26:b9:c9:14:cf:94:09:52:e6:1a:55:22:
e5:1f:ed:0e:9c:44:05:91:76:d2:2e:a3:82:d4:3f:1e:69:e3:
cc:eb:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:26 2024 by rpki-client on console-fra.rpki-client.org