Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A1WUwePolhO4JVu_cYsdXJ6MJIs.roa
File: A1WUwePolhO4JVu_cYsdXJ6MJIs.roa (raw, json)
Hash identifier: z7m0WuTky0dCwMXv9fzwavxrnYfDmaSOHKFN6ITMtCI=
Subject key identifier: 03:55:94:C1:E3:E8:96:13:B8:25:5B:BF:71:8B:1D:5C:9E:8C:24:8B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCCFBE2193083F258B4A6A2CB6D43B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A1WUwePolhO4JVu_cYsdXJ6MJIs.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a0e:b107:2828::/45 maxlen: 48
2a0e:b107:2818::/45 maxlen: 48
2a0e:b107:2820::/45 maxlen: 48
2a0e:b107:2810::/45 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Jan 2024 18:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:cf:be:21:93:08:3f:25:8b:4a:6a:2c:b6:d4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=035594c1e3e89613b8255bbf718b1d5c9e8c248b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:59:89:87:d8:56:34:c0:20:4f:44:f7:9b:
60:03:ad:cd:13:e6:49:68:96:41:4f:d6:cd:e4:39:
e5:0c:ff:a4:3c:c2:0c:a8:fa:6a:9c:79:64:db:fe:
88:3f:c4:74:c8:75:1e:48:35:fb:a8:53:2f:9b:d8:
23:ad:cb:54:24:62:1a:88:0f:3e:b6:a2:a4:a8:00:
25:f7:ab:2c:c2:86:c1:ed:c2:0d:66:bc:5b:05:05:
0f:6a:ae:83:b4:fb:7c:1f:6e:fb:3f:b2:e8:73:2f:
fc:79:c1:5b:80:dc:33:72:f9:90:42:0e:55:20:cb:
33:21:6c:22:e5:d6:a4:8f:c8:a8:cd:e2:a2:55:94:
14:0c:b4:00:ea:f1:84:e8:6a:ac:02:08:d8:de:ba:
a9:6f:99:c9:c6:de:8f:2d:d0:e3:b4:5a:25:d5:56:
df:3c:e7:36:43:59:9a:2c:d2:68:98:06:55:65:af:
81:55:19:da:67:e4:9a:ca:fa:6d:f4:2d:d2:96:12:
b6:b5:d4:80:c6:7f:1c:11:26:bb:06:be:86:e0:24:
b3:0f:bd:7d:34:0c:91:0a:1b:6d:b4:7b:a6:a4:23:
11:1c:b0:cd:7e:14:02:66:13:72:41:d1:50:cd:a1:
28:53:c2:a7:1c:da:27:c2:62:11:78:b5:17:40:d1:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:94:C1:E3:E8:96:13:B8:25:5B:BF:71:8B:1D:5C:9E:8C:24:8B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A1WUwePolhO4JVu_cYsdXJ6MJIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2810::-2a0e:b107:282f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9e:5f:54:41:d8:86:c0:e4:9b:26:25:10:3f:5c:63:27:92:8b:
05:ff:03:6f:4f:29:3f:4d:00:7c:46:2a:d7:cc:a8:17:61:2e:
1b:cd:da:36:2b:d1:dc:7f:f8:24:7c:90:5a:20:01:ae:31:da:
24:9c:72:cc:90:c2:04:29:bb:7c:a6:46:31:3e:03:90:88:45:
6a:fe:95:39:4d:56:d3:cb:e5:94:b6:75:b5:df:b7:2f:03:bb:
4a:0f:d6:ef:a0:4e:7d:5b:c9:9f:54:47:37:d3:8b:25:1c:e7:
fd:e9:1c:fe:fd:57:bf:c2:6a:f0:64:cc:49:8b:6e:b1:b2:9a:
72:e2:cf:b5:43:23:bb:d8:8f:80:8a:03:3b:83:c7:98:11:fe:
9b:e9:ce:14:b4:91:03:a6:6d:e4:6f:4f:c7:a9:b7:6f:a7:9a:
0d:e5:e1:aa:5f:6f:96:e7:7d:81:4f:2b:ff:28:2c:06:92:5f:
4b:27:69:a3:a2:1e:62:ad:8c:8d:35:d5:08:94:89:66:3c:30:
12:7e:f9:49:10:fb:3c:dd:24:a4:72:2a:86:96:58:bc:ae:b4:
ab:e7:97:c8:85:8d:97:e8:55:ba:24:63:53:0c:93:f4:9d:66:
99:f3:e5:64:0c:17:fa:98:d9:c4:f6:d2:9a:00:64:a5:47:93:
bd:5c:01:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jan 18 22:06:20 2024 by rpki-client on console-ams.rpki-client.org