Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Br6szYDgqGjbMNmYVh6kfI7szJ8.roa
File: Br6szYDgqGjbMNmYVh6kfI7szJ8.roa (raw, json)
Hash identifier: rjo0xx9uxsAFAEMi+tgaPQdzj7p+BMP8Cv20HBhn6j8=
Subject key identifier: 06:BE:AC:CD:80:E0:A8:68:DB:30:D9:98:56:1E:A4:7C:8E:EC:CC:9F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD3C0BCD4189A69E24442D72F3F4EA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Br6szYDgqGjbMNmYVh6kfI7szJ8.roa
Signing time: Tue 02 Jan 2024 10:34:31 +0000
ROA not before: Tue 02 Jan 2024 10:34:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211781
IP address blocks: 2a0e:b107:390::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 03:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:3c:0b:cd:41:89:a6:9e:24:44:2d:72:f3:f4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06beaccd80e0a868db30d998561ea47c8eeccc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ea:b2:ee:e5:a8:94:20:20:3d:e9:9b:6e:ef:
5b:c7:e9:25:cc:9e:20:06:47:c5:33:2a:75:2a:ac:
3f:08:b3:87:6a:35:9b:37:e6:b1:83:90:d5:cd:b2:
ad:30:a9:21:3a:17:3c:de:bb:77:1c:2e:3e:12:25:
25:62:a7:11:dd:ca:0e:c3:f3:58:d4:0f:51:44:67:
38:70:c7:1c:a9:22:c9:15:a8:96:b3:98:9b:04:e1:
5b:f9:d6:51:b4:ae:f9:b5:ae:84:e4:41:c3:63:e8:
d1:45:ec:ce:03:c2:39:49:5e:e9:ed:00:19:e3:8c:
7a:af:fe:dc:ea:7f:09:93:4a:73:fd:b7:77:7e:3d:
f3:40:cd:99:3d:dd:89:1b:10:9b:eb:67:ed:5c:3a:
9d:e3:7e:fa:a7:b8:2b:0d:5a:6f:86:9c:f0:cf:b4:
df:c8:54:09:58:07:b1:b4:ce:63:6f:2a:c3:26:7f:
85:96:84:ef:7b:ce:ed:8f:1a:29:fb:53:74:43:38:
23:9b:a0:59:08:cd:c0:1d:16:0a:78:3f:31:c8:38:
d7:6a:62:e0:75:69:e2:0e:7d:4a:a4:52:75:ce:eb:
56:ce:a5:d1:7f:d5:83:41:41:8f:ff:58:98:78:40:
3f:f0:55:a7:4a:f0:78:c8:1f:08:87:f6:0f:bd:af:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BE:AC:CD:80:E0:A8:68:DB:30:D9:98:56:1E:A4:7C:8E:EC:CC:9F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Br6szYDgqGjbMNmYVh6kfI7szJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:390::/44
Signature Algorithm: sha256WithRSAEncryption
7e:20:44:b5:9f:a3:ca:c3:09:08:1f:bb:e8:b3:97:7c:76:99:
c5:43:c4:94:11:66:1d:e3:5b:85:4f:06:44:bf:d7:d1:14:d4:
db:00:a0:8a:64:38:f0:65:37:ba:34:0b:9c:cf:d9:36:fb:62:
83:a5:cf:72:8f:e2:b5:3f:ba:a0:39:89:4b:91:b9:dd:ae:6d:
03:d7:20:95:ee:f9:03:9c:37:38:fa:21:70:7f:3e:8c:3a:e1:
3a:08:09:98:ba:70:2e:dd:ba:82:01:79:5e:47:76:6d:14:2b:
98:38:47:8f:dc:0b:cb:92:e0:a6:d6:bf:fb:2a:3c:22:db:f6:
7c:ba:69:6d:11:82:52:eb:fa:e8:95:d9:a7:e7:69:44:79:3a:
cd:cc:25:69:27:5a:bb:6d:f3:22:2a:13:35:20:55:e7:9c:8e:
82:ef:0f:6d:31:c9:1b:2e:66:d4:d0:20:2e:1b:41:c1:18:a9:
02:72:8b:66:c0:d3:7d:8a:e5:70:a6:b5:b8:e0:a9:79:d6:3b:
d2:5c:15:e6:8d:a7:13:96:42:d2:0a:d6:1a:3b:57:6a:2a:a0:
7d:c1:f3:a3:80:96:9d:c3:39:62:04:71:bc:ff:2c:bd:9a:0d:
00:c8:48:45:44:6f:a6:82:bb:91:7d:33:6b:c0:33:d2:2b:3e:
6b:ab:46:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 04:14:56 2024 by rpki-client on console-ams.rpki-client.org