Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FzydcAKU9-AslKQxH1rGxyBvJfk.roa
File: FzydcAKU9-AslKQxH1rGxyBvJfk.roa (raw, json)
Hash identifier: cPbKNmw0dLDYcRpgu8URBhV/X/TY5nQXWaxYpeU/0Os=
Subject key identifier: 17:3C:9D:70:02:94:F7:E0:2C:94:A4:31:1F:5A:C6:C7:20:6F:25:F9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FF48CA21CF5C882CE10BBBD4480722FA8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FzydcAKU9-AslKQxH1rGxyBvJfk.roa
Signing time: Fri 07 Jun 2024 21:13:28 +0000
ROA not before: Fri 07 Jun 2024 21:13:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216457
IP address blocks: 2a0e:b107:27a8::/45 maxlen: 48
2a10:2f00:198::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 20 Jul 2024 19:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f4:8c:a2:1c:f5:c8:82:ce:10:bb:bd:44:80:72:2f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 7 21:13:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=173c9d700294f7e02c94a4311f5ac6c7206f25f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:08:07:b8:fc:6f:cf:16:d4:a7:e2:f1:9d:
e0:96:bc:e8:8d:93:f9:25:47:70:46:db:4c:73:3d:
4c:a6:cd:5a:ad:02:ff:27:d3:fc:81:6e:8c:8b:d6:
3d:80:dd:c5:ea:ef:e6:b0:3a:1b:03:e9:be:be:89:
65:11:da:e5:39:e9:8e:8d:f8:a7:5f:40:28:ac:02:
5e:c8:af:98:d4:3e:95:7a:f2:04:3a:0a:58:c3:90:
ee:e9:ae:87:6e:5f:97:58:86:33:6e:d2:04:22:1f:
8e:4c:5c:7d:c7:17:c6:2c:dd:20:12:dc:71:e2:12:
69:7c:16:a1:36:e0:bf:0d:f8:3a:da:ed:40:07:73:
be:67:0c:62:b0:b1:ed:8e:19:54:a1:d9:e2:a3:93:
55:97:76:ad:5d:b5:67:53:13:be:02:12:71:7a:d4:
00:3c:ca:75:96:26:7d:94:6e:1a:58:19:e0:79:1f:
1c:9e:7f:0a:b5:d5:c3:e6:f0:56:3d:a6:2f:78:d5:
5a:d7:55:21:12:57:76:3d:80:b1:94:c9:0c:95:9c:
d1:4f:cd:41:7d:4f:53:f8:69:b3:b4:21:ad:5c:b7:
f3:67:89:dd:b1:81:6a:90:c4:46:73:b6:6b:09:f4:
9e:0d:9a:e2:4c:26:6a:47:bc:57:b4:88:4d:39:3a:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3C:9D:70:02:94:F7:E0:2C:94:A4:31:1F:5A:C6:C7:20:6F:25:F9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FzydcAKU9-AslKQxH1rGxyBvJfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27a8::/45
2a10:2f00:198::/48
Signature Algorithm: sha256WithRSAEncryption
c9:f3:f8:84:3b:24:40:fe:50:db:a4:f9:b2:64:cf:52:bf:d8:
d0:21:8c:43:9b:5a:9e:e9:f5:c3:fd:80:bb:e8:4c:87:56:dd:
81:e8:07:d0:ab:b6:54:53:40:32:54:23:77:ac:36:ac:2f:e5:
d9:05:91:f4:1f:5f:79:bf:75:fa:be:3c:dd:3e:72:2d:a6:70:
80:89:12:e3:5e:90:8c:97:dc:cb:70:6d:e5:0f:75:67:d3:7b:
20:0d:2e:12:6d:43:62:3f:30:e7:93:0e:68:96:2d:62:7c:6b:
27:f4:73:29:6b:0d:bf:93:a8:0d:6b:e5:f8:b1:d4:eb:40:15:
e9:44:2d:06:72:0d:b2:5f:44:09:ac:54:ab:ef:2c:2a:2b:55:
5e:83:2a:38:de:c7:eb:14:f9:6d:9c:de:68:9f:6c:a7:e9:28:
12:eb:44:65:bd:28:dd:9f:53:25:2b:2b:e3:4a:0b:dc:b4:8f:
57:ad:de:d9:10:5d:b7:24:df:25:db:ab:bd:51:4b:3b:8b:7d:
2d:4a:15:b6:3b:f8:e9:46:a5:37:4a:49:d1:47:26:8f:cb:98:
6a:e2:fa:13:f9:09:2d:da:87:0c:77:2b:fa:c6:bb:b8:a7:f7:
88:45:12:39:40:3f:e0:e8:2d:33:aa:d4:06:d7:9a:30:0e:fa:
f3:99:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 21:31:49 2024 by rpki-client on console-ams.rpki-client.org