Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BtAFGPyyIFKUhKd8EjGd0zT0cHE.roa
File: BtAFGPyyIFKUhKd8EjGd0zT0cHE.roa (raw, json)
Hash identifier: zb2/Oq9KgdBjjIPvOcpC1SlQVMzPI0cKg+1RGiTFDkA=
Subject key identifier: 06:D0:05:18:FC:B2:20:52:94:84:A7:7C:12:31:9D:D3:34:F4:70:71
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185DE40AF8BB088726082410C53303087D9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BtAFGPyyIFKUhKd8EjGd0zT0cHE.roa
Signing time: Mon 23 Jan 2023 10:50:59 +0000
ROA not before: Mon 23 Jan 2023 10:50:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210537
IP address blocks: 2a10:cc46:105::/48 maxlen: 48
2a10:cc46:130::/44 maxlen: 48
2a0e:97c0:600::/44 maxlen: 48
2a10:cc46:100::/48 maxlen: 48
2a10:cc46:102::/48 maxlen: 48
2a10:cc46:101::/48 maxlen: 48
2a10:cc46:104::/48 maxlen: 48
2a10:cc46:103::/48 maxlen: 48
2a10:cc46:106::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Jan 2023 16:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:40:af:8b:b0:88:72:60:82:41:0c:53:30:30:87:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 10:50:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06d00518fcb220529484a77c12319dd334f47071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:72:41:12:ba:a6:68:40:20:27:e0:cb:51:
a5:28:1a:3d:eb:ac:44:93:29:50:47:33:a9:7d:66:
bb:0e:77:22:b2:ba:d3:49:73:dc:f0:7c:03:7d:e4:
74:86:9b:41:be:67:2f:24:70:e2:00:c7:77:8a:40:
6d:2d:7a:2f:18:1c:53:14:46:98:0a:1e:da:28:c3:
99:ad:c7:30:9f:72:f6:5c:9f:2b:20:17:cf:b0:4e:
10:12:90:71:1d:f4:b7:56:15:bc:97:ed:c8:66:30:
0a:1a:cd:ae:b4:82:cb:80:f6:17:25:5b:cb:a2:37:
50:51:76:aa:0e:09:d0:41:73:55:6c:f1:ab:6d:66:
c5:90:55:72:3b:fe:b1:f9:54:45:6d:fa:35:f1:48:
89:37:e3:84:78:04:f7:46:20:98:7f:0b:e8:58:7f:
65:be:cc:9f:dd:4f:8d:2f:52:ac:74:ff:5d:12:b1:
17:aa:ee:38:25:a5:39:23:af:db:84:18:42:7a:40:
0b:44:81:64:7b:fc:84:b1:c7:7a:b4:46:8c:27:d7:
98:dd:0a:35:82:40:d2:94:ce:8f:7d:93:2a:c2:ae:
80:a7:5c:1a:f0:31:98:2f:88:0f:00:78:ab:73:c9:
04:c4:54:77:3f:a2:fb:79:41:fb:34:40:ac:c6:49:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:05:18:FC:B2:20:52:94:84:A7:7C:12:31:9D:D3:34:F4:70:71
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BtAFGPyyIFKUhKd8EjGd0zT0cHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:600::/44
2a10:cc46:100::-2a10:cc46:106:ffff:ffff:ffff:ffff:ffff
2a10:cc46:130::/44
Signature Algorithm: sha256WithRSAEncryption
20:74:db:69:65:d2:0a:f6:38:c5:4c:28:e3:0a:95:d7:90:cb:
d5:15:bf:1e:43:bb:bf:92:91:7d:86:00:7e:78:09:a2:e0:2d:
ba:a7:7e:cc:f0:d6:fe:5d:ea:9d:b7:6f:0c:12:27:5e:1a:8a:
83:6e:bc:e4:19:98:f7:c3:17:e3:59:7c:79:38:b3:88:3f:26:
71:86:b4:48:86:24:ba:6b:0c:62:40:da:34:ba:27:3d:2b:69:
22:df:b5:82:2a:58:00:e4:82:6c:4c:24:bf:7f:3a:c5:f5:bb:
4e:5d:23:cc:19:5c:a9:af:87:66:28:b5:6c:48:25:88:4a:a6:
51:5a:50:b0:9c:ab:2a:c5:e2:b8:c4:3f:2d:39:80:cf:18:36:
62:f5:07:e5:13:be:f5:86:44:1d:8b:99:ec:f3:75:0e:e7:21:
fd:fb:d1:f8:c6:4d:03:91:06:42:2f:ac:1e:11:43:04:dd:34:
a4:72:f1:76:6a:9f:d3:41:47:2d:e9:ad:db:be:81:92:be:ed:
d6:a0:2c:f8:68:81:95:09:d1:ef:55:89:ea:4d:b8:f4:86:68:
3f:02:26:74:22:2f:e5:72:9e:2b:2b:d6:22:59:bc:26:b7:a1:
d6:81:d4:ec:58:45:60:08:d7:16:80:75:39:51:2d:d7:48:fc:
b8:5d:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:56 2024 by rpki-client on console-ams.rpki-client.org