Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0KYAJyLD7XpeDAj7TBJN_-ZNQI.roa
File: F0KYAJyLD7XpeDAj7TBJN_-ZNQI.roa (raw, json)
Hash identifier: OEGszASXzrM+ABu95dloDQyYHMSn27+n00uoN+1RM5E=
Subject key identifier: 17:42:98:00:9C:8B:0F:B5:E9:78:30:23:ED:30:49:37:FF:99:35:02
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018B5BC0B08282B099B50CBF10BAEDDB42E4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0KYAJyLD7XpeDAj7TBJN_-ZNQI.roa
Signing time: Mon 23 Oct 2023 08:57:16 +0000
ROA not before: Mon 23 Oct 2023 08:57:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216112
IP address blocks: 2a0e:97c0:de0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 28 Oct 2023 18:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:c0:b0:82:82:b0:99:b5:0c:bf:10:ba:ed:db:42:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 23 08:57:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=174298009c8b0fb5e9783023ed304937ff993502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:5b:b3:ac:ed:ab:e2:79:ec:df:22:d5:a5:
89:a2:a0:09:7c:48:72:2c:85:ae:8d:74:79:97:29:
45:0c:42:a9:c3:9c:73:90:02:e3:46:93:9d:e6:67:
c3:34:11:c7:b0:86:d4:7f:79:0e:6c:60:6e:b7:d6:
88:a5:68:7c:e1:24:6c:69:70:6c:5c:60:d8:5e:05:
cc:2f:ff:bc:47:18:7e:de:1b:52:a8:b2:fd:bc:56:
d5:ee:f3:13:97:70:e9:59:a1:86:90:2e:86:19:4b:
14:8a:c8:3a:fc:e1:2f:0c:a9:3c:10:8b:1b:03:cb:
ca:33:24:77:92:aa:a6:5b:b9:75:d4:15:04:5f:2b:
83:f3:ca:81:f8:88:5d:99:eb:4e:c4:56:8b:bc:74:
e9:d6:8c:3d:95:7d:f4:de:e0:75:52:83:f6:de:92:
42:8b:f9:24:d7:7b:67:22:c6:1a:8b:26:5e:5d:28:
77:67:41:57:6a:2b:6e:69:fb:7b:ae:8c:4e:6f:5c:
62:4e:85:25:ae:90:ef:2e:d3:46:cd:e1:a2:71:1f:
d5:29:5e:2d:31:03:2c:85:f7:05:d0:2b:0a:c7:74:
52:44:8f:a4:c4:a6:85:57:ec:c1:2a:40:15:ab:f5:
b8:1c:1a:79:d2:23:24:6d:ef:24:c0:f9:9a:13:e3:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:42:98:00:9C:8B:0F:B5:E9:78:30:23:ED:30:49:37:FF:99:35:02
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0KYAJyLD7XpeDAj7TBJN_-ZNQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:de0::/44
Signature Algorithm: sha256WithRSAEncryption
bd:68:c9:69:c1:5f:ce:9f:8c:23:1b:0c:ad:d4:c1:bc:02:44:
15:c8:18:6e:a7:c6:b2:dd:27:32:da:2a:98:8c:2e:bb:4c:a0:
42:08:f0:97:83:9c:13:2d:4f:3e:13:ed:a2:95:1a:d3:a5:5d:
c9:25:17:7f:09:11:20:ac:9f:4d:da:99:84:18:6e:49:5a:81:
58:b9:61:20:a6:fa:fd:c7:fb:c6:5d:f9:00:f9:d3:1a:be:2d:
12:8f:a4:75:a7:b9:93:f1:db:29:76:de:38:b2:97:a0:58:a8:
fa:b8:8f:62:0f:b4:d3:34:86:b7:c5:5f:c2:0f:bc:c3:53:1c:
d6:18:a6:87:d5:c0:b2:3f:a5:50:e0:58:ef:b0:6f:0c:c9:b7:
9d:b3:b6:67:47:a5:af:c2:73:ef:07:74:4c:04:ce:81:ca:56:
9c:94:58:2f:25:73:7f:f2:f4:05:c9:80:46:7b:1b:a9:a9:5e:
18:26:cb:ad:8b:17:72:c9:9a:5d:08:c1:67:5c:bc:b2:de:10:
d7:1c:64:a3:5b:59:13:e8:fd:ab:29:ba:4c:05:01:59:99:11:
1a:f1:1d:3b:27:07:22:d8:52:0d:e6:e4:12:63:c6:fb:9e:01:
8a:99:6e:b5:18:31:b3:f1:2e:7f:98:60:63:c6:bb:8d:59:30:
15:eb:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org