Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BKIe0ig_TIgmA4iw_wRrkqt-H5M.roa
File: BKIe0ig_TIgmA4iw_wRrkqt-H5M.roa (raw, json)
Hash identifier: pr1SKFtA6ThcQx9sy0BbsimchKCODXtrWr1EpKm/jQk=
Subject key identifier: 04:A2:1E:D2:28:3F:4C:88:26:03:88:B0:FF:04:6B:92:AB:7E:1F:93
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CF54C82964360B8F3394FEE789BB1D39E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BKIe0ig_TIgmA4iw_wRrkqt-H5M.roa
Signing time: Wed 10 Jan 2024 21:34:41 +0000
ROA not before: Wed 10 Jan 2024 21:34:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215751
IP address blocks: 2a10:cc40:cc40::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 16:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:4c:82:96:43:60:b8:f3:39:4f:ee:78:9b:b1:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 10 21:34:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04a21ed2283f4c88260388b0ff046b92ab7e1f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:bd:6d:65:e0:42:d1:52:5b:24:03:0d:98:
7f:4a:a5:b9:78:54:f0:84:ca:57:23:44:ef:8b:a6:
19:11:ec:8b:f8:45:6d:26:b7:a4:7c:61:23:f3:d7:
66:aa:b7:32:25:73:d2:0d:5c:79:95:15:ab:7e:95:
3f:50:8f:92:b5:7a:cf:56:5b:1f:2a:31:4e:20:1a:
a4:53:b6:e0:75:ca:ad:ad:30:d8:df:25:fc:03:d7:
d0:72:61:e3:67:6e:6f:25:97:ea:2d:8a:09:18:a0:
88:78:d5:ed:8f:c2:ea:2f:54:dd:47:eb:fa:07:31:
d7:5c:f4:25:02:29:d7:b8:6e:86:e2:d1:c0:33:dd:
04:95:22:7e:d5:a6:90:29:d2:4e:f7:c3:ab:74:6a:
0d:dd:69:36:ca:ec:61:53:08:ab:c0:35:52:4f:a7:
47:ba:c1:c2:f8:e4:41:5c:9d:ff:07:f7:f2:9d:62:
e1:8d:d1:3f:57:00:07:4d:27:2f:3e:71:8f:77:01:
49:43:44:28:19:7c:39:2f:da:e8:38:52:54:8e:dd:
ee:a9:ce:bb:43:cd:a3:97:39:ce:62:80:25:fd:f0:
c6:5d:5e:03:4a:d5:20:ea:7a:85:ea:a5:b5:c4:5c:
e7:de:b5:06:47:42:81:74:87:0b:a6:1d:2b:1e:d7:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A2:1E:D2:28:3F:4C:88:26:03:88:B0:FF:04:6B:92:AB:7E:1F:93
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BKIe0ig_TIgmA4iw_wRrkqt-H5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:cc40::/48
Signature Algorithm: sha256WithRSAEncryption
cd:3d:50:a9:f1:36:30:d1:1b:b5:13:10:7b:6e:de:1a:c1:66:
8f:ca:47:2e:e9:75:21:20:07:63:af:48:4f:a9:11:cf:a8:79:
ff:e9:e7:e9:8d:c1:c7:68:4d:7a:43:d1:43:b7:83:ae:77:d6:
de:5e:b0:d6:55:33:2b:5f:c3:ca:1e:1f:72:ec:0c:9f:02:f9:
3b:71:82:1f:75:ad:61:af:4e:66:20:22:f5:c5:cd:94:38:d2:
fe:fb:f0:12:96:49:24:f5:56:36:c9:a6:8d:72:8d:32:10:e3:
a2:b6:cc:25:11:13:d2:7b:de:a6:6f:2d:08:11:36:60:6f:c2:
25:28:e4:c1:7a:bf:6a:f3:85:f2:14:81:e8:0c:fd:ff:79:63:
45:6d:d8:28:30:79:61:7e:92:17:ac:f9:03:83:a0:c0:37:74:
33:2d:2d:05:fc:0e:4e:19:6e:d0:0a:41:5f:e8:22:50:bf:86:
d0:fe:ef:6e:06:3e:bb:e3:43:b4:6d:08:be:f6:c3:31:bf:e0:
91:f4:0e:d6:62:c3:d8:a8:9b:1f:e4:55:53:67:34:89:43:01:
9c:06:18:76:e9:46:9f:b7:46:6e:92:9f:f1:a6:51:9b:ad:a5:
ea:71:57:a9:06:2b:28:cb:f1:e2:23:c8:57:90:5b:fb:ed:e1:
46:ae:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 20:58:30 2024 by rpki-client on console-fra.rpki-client.org