Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ec2eGxNRNe_qHUPrJZn7PZUuP-Q.roa
File: Ec2eGxNRNe_qHUPrJZn7PZUuP-Q.roa (raw, json)
Hash identifier: w4Q3nX5N6MGlArrh8gjQrmaOYs18wqGcbxPhc38wdAA=
Subject key identifier: 11:CD:9E:1B:13:51:35:EF:EA:1D:43:EB:25:99:FB:3D:95:2E:3F:E4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185DE40B004E14280AC46DAD05CCBCA54E4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ec2eGxNRNe_qHUPrJZn7PZUuP-Q.roa
Signing time: Mon 23 Jan 2023 10:50:59 +0000
ROA not before: Mon 23 Jan 2023 10:50:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210667
IP address blocks: 2a0e:97c0:a40::/44 maxlen: 48
2a0e:97c0:a48::/48 maxlen: 48
2a0e:97c0:a43::/48 maxlen: 48
2a0e:97c0:a41::/48 maxlen: 48
2a0e:97c0:a44::/48 maxlen: 48
2a0e:97c0:a47::/48 maxlen: 48
2a0e:97c0:a42::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Jan 2023 16:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:40:b0:04:e1:42:80:ac:46:da:d0:5c:cb:ca:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 10:50:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11cd9e1b135135efea1d43eb2599fb3d952e3fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:e3:97:76:ac:2f:d3:7f:cc:3e:d4:80:e5:
10:79:8b:a8:ad:b1:f6:dd:14:a0:0e:18:21:78:62:
d2:f6:a4:c6:33:71:d6:8b:23:62:d9:c1:24:78:ef:
a2:59:3f:cd:4d:42:08:c4:92:45:70:1e:4b:c4:19:
6d:22:6c:a0:50:06:79:a3:f8:39:b2:9c:b0:2e:4f:
90:35:e7:03:5b:04:73:af:b1:81:d6:94:fd:cd:6d:
ac:de:1d:1d:18:9c:29:ba:7d:2d:d5:f1:a1:bb:77:
1f:93:80:1f:07:49:43:58:2b:66:0e:5c:03:72:ec:
63:a4:96:ef:e6:0e:c5:85:41:8b:82:16:37:15:b8:
73:ee:2f:92:01:9a:f1:68:65:d1:07:6e:ff:a4:50:
32:39:fd:fa:9d:d0:f4:c4:18:e0:af:e8:83:6d:a8:
98:6b:38:63:aa:32:b1:f9:7c:cf:16:af:f8:19:58:
6c:59:26:ae:77:62:37:02:df:3b:8d:ac:e3:33:e9:
e1:2a:54:26:17:6a:1f:c9:a3:fe:1d:4b:02:db:34:
1c:d0:91:99:3f:27:af:e5:ca:c3:d8:10:73:c8:50:
b8:8a:37:5b:b3:d4:02:58:4b:70:94:cf:34:00:06:
49:6a:4c:57:cc:43:af:1a:c6:b9:04:7a:9e:eb:35:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:9E:1B:13:51:35:EF:EA:1D:43:EB:25:99:FB:3D:95:2E:3F:E4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ec2eGxNRNe_qHUPrJZn7PZUuP-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a40::/44
Signature Algorithm: sha256WithRSAEncryption
54:2d:b1:aa:4f:48:b2:29:f0:e6:8b:f8:54:57:f7:33:de:05:
af:ad:07:bf:91:d0:41:db:a3:e1:45:77:25:0e:db:82:ed:33:
b8:57:1e:20:db:5d:a3:9e:c1:97:41:58:82:3e:5e:a0:9d:8e:
e6:64:db:fa:1a:f8:8a:ee:92:ef:eb:1f:85:8f:d6:61:9e:79:
71:6d:f9:d8:4e:81:f4:47:c7:3a:2e:f7:40:51:f3:48:b7:f8:
5e:51:eb:45:4a:fe:86:d2:14:a9:43:34:69:a4:78:26:50:eb:
17:98:48:5e:a2:ff:b8:29:dc:c6:c1:88:49:62:68:17:a7:42:
a8:19:69:25:db:97:ac:e0:42:b9:2a:28:4c:12:b0:b8:f3:10:
b9:6d:a2:fb:63:0e:6a:98:9a:a7:ec:85:22:4d:48:85:b7:94:
3e:dc:5f:5e:32:39:d8:a4:de:fb:89:c9:9b:01:1f:0a:ad:e5:
8e:9d:bf:c1:f3:80:bc:be:9d:e2:4d:35:10:b7:51:ec:6a:2b:
51:ba:af:67:91:74:1a:69:4f:51:1d:5a:a0:13:f0:74:8e:63:
0b:1f:bd:a3:a2:3f:17:6b:55:68:64:4e:ee:3e:0a:aa:29:f5:
e1:b9:52:e5:7d:b3:d1:d1:d4:5c:bd:b2:99:8a:bc:fd:3d:d7:
2d:8e:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org