Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DPAxrDbggdEi23wXYcyEdIVcrDM.roa
File: DPAxrDbggdEi23wXYcyEdIVcrDM.roa (raw, json)
Hash identifier: 4rwmwgK09MpfSuVhzERjxZ612FiD9swnSODihA2Ewtw=
Subject key identifier: 0C:F0:31:AC:36:E0:81:D1:22:DB:7C:17:61:CC:84:74:85:5C:AC:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188B60692BA9889FD0C9C8DCA9E8A17DECE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DPAxrDbggdEi23wXYcyEdIVcrDM.roa
Signing time: Tue 13 Jun 2023 18:31:03 +0000
ROA not before: Tue 13 Jun 2023 18:31:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211138
IP address blocks: 2a10:cc44:202::/48 maxlen: 48
2a10:cc44:204::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Aug 2023 17:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:06:92:ba:98:89:fd:0c:9c:8d:ca:9e:8a:17:de:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 13 18:31:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cf031ac36e081d122db7c1761cc8474855cac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:7b:aa:0d:e0:cc:0a:4f:55:b8:4c:e9:dd:
5e:8d:0c:9e:62:f4:67:91:d7:98:11:e6:ab:11:d8:
2f:d1:33:d3:66:31:f2:bd:af:8f:7f:08:3c:fb:3e:
5b:6a:1e:f0:c6:62:17:62:28:24:ee:02:cd:3b:23:
a0:58:2d:fc:55:d5:ba:a3:40:a6:8f:a2:c7:bc:cb:
37:99:45:a5:da:66:08:7f:d9:ce:36:c1:19:ff:ea:
9f:5f:1c:f8:7a:9a:15:fe:be:67:16:14:36:5f:3c:
e6:12:ea:5e:ca:14:d3:79:1a:fb:25:35:ae:e6:94:
28:d5:3d:ce:ba:d2:9f:c5:8f:4b:04:80:03:9d:8d:
b3:bd:4e:9c:60:85:1d:04:60:ee:23:db:19:c3:7a:
e2:96:9e:c1:8b:88:14:09:ec:b4:98:d5:cc:2e:9b:
f9:d0:4a:e3:59:1e:d7:f6:97:8c:6d:d1:e2:c6:32:
54:8f:34:ab:d6:8d:02:7b:d5:9c:66:8a:0d:f7:3f:
9a:42:ef:df:b8:b4:f7:45:c4:14:bb:15:ce:58:06:
ad:f5:00:72:76:0c:9e:e9:ff:fe:30:23:26:8a:99:
8d:cf:a1:62:e5:51:d5:d6:8d:49:2f:49:5c:0e:7a:
9f:3b:46:51:c3:8c:79:cc:14:6a:e2:15:8b:6d:8b:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F0:31:AC:36:E0:81:D1:22:DB:7C:17:61:CC:84:74:85:5C:AC:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DPAxrDbggdEi23wXYcyEdIVcrDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:202::/48
2a10:cc44:204::/48
Signature Algorithm: sha256WithRSAEncryption
58:6d:c4:dd:04:79:22:80:b6:ab:d8:f0:8b:55:23:b8:a9:ab:
4d:81:e9:5c:66:b4:af:cf:74:b5:f6:c3:3e:db:31:ed:6f:6d:
36:9b:f4:82:16:c2:ec:4b:a1:12:c4:3d:5e:85:06:fb:04:89:
fe:ea:b0:54:7b:8f:3f:f9:2a:45:b0:96:b3:e4:f6:fa:88:fe:
b5:11:62:36:1e:32:38:7d:0a:a6:b5:e2:d3:1d:1b:48:e4:5b:
22:6d:c8:25:44:27:51:b9:c4:6b:2a:ce:15:0d:51:00:48:56:
3a:90:c1:b5:18:09:94:00:c9:e5:87:ad:51:ee:f6:77:e0:b9:
f6:86:b3:e8:be:d4:4a:f1:8d:6e:d4:a2:3d:b6:9e:48:fc:a0:
1e:9a:34:b9:c0:38:d2:f3:4e:a3:6f:ed:25:a0:5d:14:b0:dd:
24:cf:d2:0f:a5:98:9f:09:a9:43:c2:8a:c8:dc:2e:f3:bb:25:
9f:b5:6f:de:5b:ef:e5:07:8e:e2:07:7d:ac:9a:53:9c:15:8f:
63:29:82:4a:bb:f1:04:07:ff:f6:e2:9c:4f:d8:b9:27:0d:52:
ae:f4:bf:47:30:a3:fd:da:2d:87:ed:9c:c5:82:54:88:6a:30:
03:0b:26:30:a6:02:a8:d6:85:3d:a4:07:2c:1f:cf:f8:9e:7e:
dd:f8:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:57 2024 by rpki-client on console-ams.rpki-client.org