Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DkArOI1X5QUEZBhSjxYIFXURzgY.roa
File: DkArOI1X5QUEZBhSjxYIFXURzgY.roa (raw, json)
Hash identifier: pb0Cakzr/IfXgsja65bgiEsitxeiy+/9bB6dacO2lQU=
Subject key identifier: 0E:40:2B:38:8D:57:E5:05:04:64:18:52:8F:16:08:15:75:11:CE:06
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E797886A0C291A67E31C7C8AFE15DC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DkArOI1X5QUEZBhSjxYIFXURzgY.roa
Signing time: Mon 02 Jan 2023 05:15:03 +0000
ROA not before: Mon 02 Jan 2023 05:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142289
IP address blocks: 2a0e:b107:15f0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:97:88:6a:0c:29:1a:67:e3:1c:7c:8a:fe:15:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e402b388d57e505046418528f1608157511ce06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:50:81:fa:b3:42:15:c3:83:b2:ce:af:a3:
45:7a:90:c1:88:01:0e:81:1c:d0:ff:bd:ad:7b:55:
c7:53:b4:23:57:1d:61:64:fd:96:04:71:7f:78:17:
dc:2c:26:73:2d:e3:c2:c1:be:2e:17:8b:09:aa:5a:
f0:c0:fa:16:f4:12:d8:4f:f0:ea:cd:f8:09:5c:c7:
ae:c2:c9:1c:a0:8a:f0:03:76:ea:23:86:12:f5:ac:
1d:7c:60:e3:57:2f:7e:78:d8:90:93:f1:ce:17:47:
12:a2:f3:f9:da:65:9e:a7:ee:2e:bf:3b:07:da:a5:
ac:99:84:1f:7e:6e:55:32:ad:08:d0:de:f8:5e:e8:
e5:04:10:09:68:62:9b:a0:72:5c:da:d9:eb:68:d5:
28:85:3a:52:4f:0f:54:65:22:7a:bf:d9:f6:98:c2:
45:7b:ef:61:a7:00:7d:71:b3:44:62:aa:1c:18:d4:
d1:05:54:01:5a:da:f9:38:06:b2:52:0c:2a:9d:33:
48:da:c9:68:33:85:db:f6:da:b4:e9:e1:22:8a:b8:
59:19:54:dd:2a:16:aa:c8:fd:09:a7:26:bd:79:de:
de:81:32:72:70:8c:c1:a9:be:a9:c2:3a:25:ac:81:
d8:55:64:96:06:18:07:39:12:e9:ba:df:f1:c0:b0:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:40:2B:38:8D:57:E5:05:04:64:18:52:8F:16:08:15:75:11:CE:06
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DkArOI1X5QUEZBhSjxYIFXURzgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:15f0::/44
Signature Algorithm: sha256WithRSAEncryption
7b:01:73:f0:39:23:82:05:d1:0f:83:f2:48:87:ad:c3:73:91:
a3:66:78:aa:73:1c:12:cd:67:4a:ee:10:27:80:d7:f4:04:47:
be:6a:50:66:81:26:fd:7f:8e:ae:c5:33:67:3a:3a:e7:27:42:
29:45:83:06:2d:0e:21:43:c8:18:4b:e1:cf:9a:3a:1d:d7:db:
2d:14:34:c1:11:86:93:cd:50:22:3a:c3:29:6a:94:1e:4a:35:
0c:dd:97:77:d7:6f:06:07:5d:33:bb:8b:6e:b1:6a:f2:ee:45:
f1:6c:d3:a8:b5:93:88:63:3e:51:14:22:22:2c:e3:ee:d5:59:
40:dd:8d:a9:48:b1:31:29:7d:d5:2c:c9:8c:22:ff:39:48:46:
37:dd:f9:93:02:4e:94:54:d7:55:9f:bf:24:05:72:c2:a7:c7:
0e:a3:10:4d:cb:3c:f3:49:7c:1d:00:3b:ea:fa:cd:c0:03:0d:
c3:97:3a:25:b2:2b:7c:b2:66:fb:37:c2:75:62:e4:2d:16:51:
2d:37:b5:06:e5:21:a5:47:e9:26:e4:fa:96:b9:bb:fb:a5:73:
96:45:49:43:ff:c6:4f:73:88:54:41:7b:4a:d3:34:23:42:e1:
62:8e:3f:c8:32:f3:51:3a:6b:79:92:1c:bf:52:59:b8:00:f3:
91:c3:bc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org