Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ASINuFquN7P2-sZ3rRhkaTA7PCE.roa
File: ASINuFquN7P2-sZ3rRhkaTA7PCE.roa (raw, json)
Hash identifier: m9Z4Bha4w1Rr20dgBqONokFg17se2ml1/lkm9LFqxfI=
Subject key identifier: 01:22:0D:B8:5A:AE:37:B3:F6:FA:C6:77:AD:18:64:69:30:3B:3C:21
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AEE1A4267571E1B03A4383C80BECF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ASINuFquN7P2-sZ3rRhkaTA7PCE.roa
Signing time: Tue 24 Jan 2023 16:09:48 +0000
ROA not before: Tue 24 Jan 2023 16:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210842
IP address blocks: 2a0e:b107:1600::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:ee:1a:42:67:57:1e:1b:03:a4:38:3c:80:be:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01220db85aae37b3f6fac677ad186469303b3c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:57:27:8d:33:2b:a7:71:1e:cb:2f:29:33:
ea:ee:f0:bc:21:5f:cd:5c:69:73:4c:e2:b5:8e:a2:
33:5e:c4:23:40:8e:4c:9e:08:57:f0:30:fd:e6:21:
6e:9d:f4:0f:7c:68:60:bf:ea:b6:14:a1:67:51:5b:
9e:20:15:78:36:3b:68:8b:09:c4:7a:64:bc:66:9a:
08:e8:65:2c:72:6d:e0:f3:c5:c0:af:58:c8:8e:4c:
14:09:cd:a5:54:b8:f8:31:9d:bb:05:9b:81:42:23:
f8:82:62:ba:81:a5:79:12:ed:4f:15:88:bd:29:bb:
e3:63:9d:9e:ce:81:8b:e5:a9:32:e2:56:8e:1e:ec:
97:f2:e9:c2:eb:ea:1c:8c:27:01:60:57:94:4d:5b:
73:5d:6d:d0:ff:61:e3:16:55:1a:ee:99:e7:64:3c:
74:b5:bb:d0:0f:78:d8:d9:88:62:f3:4f:e9:76:f7:
e9:22:e0:15:06:49:aa:f2:c5:3a:75:08:16:6d:08:
cf:33:88:66:c2:88:c9:db:e8:bb:59:c0:0f:7f:9a:
31:10:12:b6:96:6d:d1:f5:44:c1:49:fe:a5:bc:29:
0a:b5:f7:5a:87:f0:13:28:32:ee:94:ec:81:dd:2b:
2e:45:81:60:08:13:72:80:ef:20:28:e6:0b:74:65:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:22:0D:B8:5A:AE:37:B3:F6:FA:C6:77:AD:18:64:69:30:3B:3C:21
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ASINuFquN7P2-sZ3rRhkaTA7PCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1600::/44
Signature Algorithm: sha256WithRSAEncryption
b9:70:5c:3b:75:9c:94:b7:42:5a:48:9a:22:10:28:02:0a:67:
ce:66:83:6e:f7:40:de:29:d2:ad:b2:c0:d2:05:89:b5:60:18:
68:53:3a:93:c4:7a:0e:3b:f5:b6:82:00:b3:97:63:78:91:ea:
ce:75:5d:1b:0c:40:4d:b3:78:0e:ce:82:ce:24:7d:9c:c4:1a:
43:90:21:32:b7:45:e5:df:aa:0d:a2:25:f0:1b:4a:aa:82:32:
e3:d9:e3:75:88:0d:82:e1:2f:f6:45:dc:f3:03:d3:97:14:e5:
80:23:e8:eb:af:a0:ec:c5:ab:9f:41:f6:5b:54:0c:1b:7d:64:
09:7f:5c:19:25:bc:d6:e5:65:6e:80:51:36:4f:36:33:c1:24:
ec:9b:69:bd:62:66:3f:57:ab:3f:43:3f:3f:70:9b:93:42:30:
5b:c5:59:22:f1:a3:41:37:c1:5b:7a:3e:5c:77:11:ab:df:84:
a9:05:e3:77:a6:79:01:f4:e3:35:91:f8:ac:9c:51:a6:bb:d1:
15:38:68:b4:0c:e4:71:19:99:8a:3a:84:01:d8:93:be:d8:bc:
62:34:2e:7f:f5:1f:fb:f8:51:42:ef:22:3a:16:54:2b:38:b7:
f9:a7:83:c7:a3:bd:b7:5d:97:6e:ff:91:08:9e:7e:3d:b0:52:
6b:2c:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:27 2024 by rpki-client on console-fra.rpki-client.org