Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A9cLEyAzOi0l12RKRGk_CzF_XCc.roa
File: A9cLEyAzOi0l12RKRGk_CzF_XCc.roa (raw, json)
Hash identifier: 9e3ENhVROBtYKmetNkJTVyCNkM1982kyVpMMy7R9xlU=
Subject key identifier: 03:D7:0B:13:20:33:3A:2D:25:D7:64:4A:44:69:3F:0B:31:7F:5C:27
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E862F884BB5F4F64FD9301399C54AF2E3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A9cLEyAzOi0l12RKRGk_CzF_XCc.roa
Signing time: Thu 28 Mar 2024 17:50:45 +0000
ROA not before: Thu 28 Mar 2024 17:50:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211063
IP address blocks: 2a0e:97c0:480::/44 maxlen: 48
2a0e:97c0:480::/48 maxlen: 48
2a0e:97c0:481::/48 maxlen: 48
2a0e:97c0:482::/48 maxlen: 48
2a0e:97c0:483::/48 maxlen: 48
2a0e:97c0:484::/48 maxlen: 48
2a0e:b107:1240::/44 maxlen: 48
2a0e:b107:1240::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 Mar 2024 18:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:2f:88:4b:b5:f4:f6:4f:d9:30:13:99:c5:4a:f2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 28 17:50:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03d70b1320333a2d25d7644a44693f0b317f5c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:05:cb:80:08:24:64:c4:70:f2:5a:a1:e3:
1b:95:cb:08:2d:63:ba:4c:e6:5b:84:64:17:fe:d1:
2f:2b:9d:bb:55:15:70:76:a2:02:88:01:b7:08:7c:
b6:98:e6:aa:56:e7:b1:54:dc:7e:4b:41:01:a6:08:
a6:8a:09:dd:9e:1b:6b:a0:42:e8:1c:f4:6a:8c:68:
7b:26:f1:29:c5:29:9b:da:86:a6:d8:f9:2d:6d:69:
72:9d:a9:1b:6d:62:58:54:13:b1:04:bb:a5:b3:2f:
13:4d:15:05:24:04:4b:a7:18:01:95:a1:db:74:a4:
78:de:55:65:c3:02:df:d4:84:15:e4:12:4e:99:a4:
78:14:55:15:5a:63:60:dd:eb:d4:4a:31:2c:c0:7f:
01:0d:7e:92:05:a4:b2:a0:9b:18:67:3f:4a:ef:5f:
a4:ca:b3:a1:2a:5f:1b:92:1e:bc:85:81:ae:ad:37:
5e:d2:99:c9:34:05:42:41:03:5f:9c:b5:1b:d9:69:
bc:69:f6:98:c1:e3:f6:28:7e:f8:5c:d7:9e:7e:c0:
8b:eb:2b:47:1b:01:68:34:24:88:d7:76:ff:20:20:
d1:26:76:04:8c:87:34:53:d4:18:4b:43:04:5d:46:
aa:cc:e5:09:75:d7:23:c3:b9:13:bf:f3:a1:50:5f:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D7:0B:13:20:33:3A:2D:25:D7:64:4A:44:69:3F:0B:31:7F:5C:27
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A9cLEyAzOi0l12RKRGk_CzF_XCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:480::/44
2a0e:b107:1240::/44
Signature Algorithm: sha256WithRSAEncryption
b9:45:6e:be:54:b1:04:81:d8:0c:a4:9a:a5:e1:ca:7c:84:ad:
b9:34:9a:78:05:97:a8:a1:db:9c:38:d3:24:43:bd:33:05:54:
a3:49:ab:56:ac:c0:61:a8:bf:93:c1:78:50:ab:57:93:de:b0:
ed:c8:ea:7e:52:ff:f4:a2:37:b1:e7:e6:f3:ce:eb:e4:2b:6d:
9b:4b:b1:e1:bf:f9:bb:c5:1a:b2:0c:10:ac:fd:ef:fb:89:8d:
6d:d5:f8:f4:35:48:7c:da:d2:09:fb:4b:b7:1a:e0:94:0b:e7:
9c:ac:c8:ae:91:cf:e6:c2:f2:42:b9:67:ca:f4:09:c6:69:3f:
7b:d9:a8:f8:84:59:10:6d:80:6c:42:2e:4b:6b:94:95:3d:d9:
54:a1:00:77:2e:34:a0:d3:a2:f6:e3:ae:fa:ba:24:97:f0:3b:
93:9e:0e:78:d5:93:13:8c:e6:5c:8a:e3:a8:20:66:8a:cb:c3:
14:d0:9e:4f:98:95:6d:a3:ac:80:d6:f6:ae:00:82:40:1d:4b:
c1:c8:3a:e0:d4:e9:59:8d:a2:c3:51:dd:63:43:00:94:e9:3e:
7a:b3:47:fa:89:a5:dd:ee:b8:c4:d7:b5:08:20:18:eb:17:2e:
95:30:cc:32:b7:47:47:bd:35:e3:80:c7:b6:25:04:df:12:a3:
19:a7:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:13:27 2024 by rpki-client on console-ams.rpki-client.org