Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DtzLvjkX6yRGrJBnhQhZYpFGDf4.roa
File: DtzLvjkX6yRGrJBnhQhZYpFGDf4.roa (raw, json)
Hash identifier: 5/vvHYZooQC2oFajp6sFLoMZSuopaidQiiH1eS6A/yg=
Subject key identifier: 0E:DC:CB:BE:39:17:EB:24:46:AC:90:67:85:08:59:62:91:46:0D:FE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCBF27A964CEB8BD13F70BB71F642B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DtzLvjkX6yRGrJBnhQhZYpFGDf4.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 2a0e:b107:27de::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 20:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:bf:27:a9:64:ce:b8:bd:13:f7:0b:b7:1f:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0edccbbe3917eb2446ac90678508596291460dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:cb:2b:6c:8c:de:71:f0:ca:23:6c:33:32:
c1:3c:b1:3c:a6:cf:4c:0f:00:91:60:8a:12:71:4d:
13:e0:16:9b:8f:cf:e3:bf:6f:8c:37:5b:ba:70:2a:
10:97:f5:6d:0d:e1:2f:bd:53:e3:d2:c5:b7:fa:e5:
53:5d:4d:f3:97:76:d4:17:ae:9f:e9:4e:8f:e6:ff:
81:48:c2:6d:6f:bf:e3:09:c5:84:2b:fd:82:45:13:
56:15:53:61:ed:3a:b9:ab:ff:e0:0f:8a:5e:2b:88:
34:fd:e0:c9:be:61:70:40:a6:59:ce:8c:6d:23:13:
55:45:b3:fb:cb:e2:86:01:db:40:13:34:27:55:e1:
81:e0:14:64:ed:ce:20:2c:37:f9:cc:93:ec:d1:87:
24:64:e5:d1:3a:56:bd:94:14:6f:53:74:42:b4:09:
ab:e4:ff:c4:3d:a9:15:69:9a:c2:bc:ab:6b:4e:57:
2d:5e:59:e7:f1:57:d8:b0:aa:58:04:55:14:6d:37:
79:a0:b6:7d:88:c7:23:7b:a6:77:e0:34:64:04:46:
33:0a:f4:6c:8a:02:23:84:d5:e7:3a:63:b1:5b:90:
9c:c1:86:07:b5:bb:0f:9a:a9:1c:4e:5a:e7:a3:2b:
34:a5:44:af:79:bd:f1:e6:6d:02:0c:b6:77:8a:f6:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:CB:BE:39:17:EB:24:46:AC:90:67:85:08:59:62:91:46:0D:FE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DtzLvjkX6yRGrJBnhQhZYpFGDf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27de::/48
Signature Algorithm: sha256WithRSAEncryption
c9:8f:85:39:37:19:bb:69:ea:b4:8a:65:28:ef:0a:c1:ab:e0:
56:37:d2:f1:7f:89:a6:25:88:8c:8c:8c:d3:92:06:22:92:e4:
5d:25:f3:a7:4d:99:29:6e:4d:fd:71:d6:db:c5:c0:ea:c3:da:
08:70:21:20:6a:cb:ee:df:ff:51:ef:43:31:e3:c2:f1:f3:01:
fc:15:a1:79:7b:b7:78:c7:e0:b0:aa:cb:03:68:ad:a6:0e:81:
19:2b:c6:b4:4a:7c:56:18:aa:c1:96:4f:02:60:3b:c2:d7:de:
a8:04:c3:f8:dd:80:68:ad:99:ab:05:21:91:69:3d:ba:d4:f7:
b7:16:70:e4:a2:b2:35:73:20:67:c1:be:27:45:bf:e8:20:cd:
2f:11:1d:bf:40:a3:ba:a0:9d:f8:6b:de:d4:23:92:b2:5e:75:
48:4d:f4:c3:9a:e6:be:4d:da:d7:0a:f5:cc:fa:cc:f2:06:3f:
13:ff:a3:e7:88:cd:f5:06:54:b6:38:94:be:09:7d:11:1e:42:
7b:44:88:3e:72:20:61:46:4c:38:3b:24:15:6f:91:be:e8:e3:
e6:28:b4:24:6d:c2:96:9a:9d:c7:76:bb:80:f5:6c:0b:92:23:
d5:32:73:06:00:e8:c1:dc:7f:90:6e:22:5d:7d:65:18:3e:f7:
11:95:0a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 23:33:32 2024 by rpki-client on console-fra.rpki-client.org