Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G29YoqAFxzCPjkvwScbLzaCW2wk.roa
File: G29YoqAFxzCPjkvwScbLzaCW2wk.roa (raw, json)
Hash identifier: 8hhg+Pa4ZMWxHU23g0CUKa7VjqevEn6/XjKrUHJHsqI=
Subject key identifier: 1B:6F:58:A2:A0:05:C7:30:8F:8E:4B:F0:49:C6:CB:CD:A0:96:DB:09
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187F183490BB20E5AF9E34F521AD47C9F6A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G29YoqAFxzCPjkvwScbLzaCW2wk.roa
Signing time: Sat 06 May 2023 14:42:05 +0000
ROA not before: Sat 06 May 2023 14:42:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207466
IP address blocks: 2a0e:b107:1fd0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 May 2023 08:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f1:83:49:0b:b2:0e:5a:f9:e3:4f:52:1a:d4:7c:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 6 14:42:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b6f58a2a005c7308f8e4bf049c6cbcda096db09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:45:f3:ff:a0:32:49:44:72:78:ce:39:9e:
5f:45:ec:61:45:18:96:30:f7:27:c8:cf:e3:ae:e6:
95:24:6e:0b:03:3f:02:2c:c7:03:ea:ce:ee:65:86:
0e:53:8c:4a:f9:09:5f:3a:17:66:ef:78:51:ad:fe:
93:4c:dd:89:a6:00:26:60:92:ea:04:03:19:19:a2:
89:e8:e1:34:14:e3:4d:23:05:a4:03:a9:d4:4e:c5:
20:4a:3d:e4:76:82:c3:22:9a:06:b0:cd:c1:8b:96:
61:67:ca:58:0f:cf:f8:3c:98:e5:ea:c5:76:ee:78:
2e:39:43:fa:ec:d8:b6:b4:e6:a2:08:6d:a1:c2:37:
8e:d6:fc:3a:a9:5d:22:a9:03:54:2e:8d:72:77:de:
20:4a:d4:7e:48:b9:04:3a:84:fc:ce:88:86:90:ce:
27:c7:f9:6f:af:25:83:f1:03:8d:56:90:2b:04:ff:
a8:de:11:ee:3c:06:79:74:1f:a8:2f:a9:7f:f7:70:
77:d3:55:6d:46:78:76:5a:96:01:c2:a7:ba:cf:76:
ee:f0:3f:81:0d:64:bf:c3:67:d3:0f:bc:43:af:17:
60:a8:7c:01:35:cc:1d:2d:9d:14:cd:48:25:c4:8a:
38:69:d2:88:0c:c3:09:bb:d1:77:93:10:0a:53:64:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6F:58:A2:A0:05:C7:30:8F:8E:4B:F0:49:C6:CB:CD:A0:96:DB:09
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G29YoqAFxzCPjkvwScbLzaCW2wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1fd0::/44
Signature Algorithm: sha256WithRSAEncryption
18:cb:63:fc:c4:41:29:65:a8:65:90:cd:e3:9d:43:cc:98:fc:
2b:3f:d7:05:2c:34:fd:64:88:4f:1b:77:1f:7a:cc:b8:bc:0c:
f4:f0:7a:da:f3:3b:ef:60:2f:e0:97:97:51:cc:37:1a:ac:cc:
3e:18:4f:91:76:80:42:d9:6b:c9:b6:f0:0a:36:0b:8f:54:ee:
b5:db:f1:e8:5b:f2:6f:e7:b8:f8:d9:89:fc:f8:6e:29:bd:02:
d7:02:91:a6:66:22:fd:bc:43:4e:dc:c4:d6:c6:5e:bf:df:04:
d9:bf:d1:f9:41:94:28:f7:51:72:69:a8:f3:7c:f2:54:45:ed:
da:91:82:89:58:ca:48:88:15:4b:22:e7:fa:11:1f:26:94:1d:
36:ef:71:b8:80:44:35:dc:6d:39:ec:6f:ff:b9:4e:57:cf:d1:
00:5d:1d:b7:78:54:51:80:e0:d8:9c:7a:ac:0b:3c:66:27:58:
18:7a:50:15:c5:e2:9d:0c:16:b1:01:42:48:3f:9b:d7:96:5c:
5d:f1:09:9b:59:00:82:21:64:c5:e2:62:fd:50:aa:d0:83:6b:
b1:b3:ee:dc:fe:f1:e6:86:8e:b3:11:cb:2d:0e:c4:74:87:7c:
c4:76:c3:c7:3b:8f:e7:fc:10:5b:28:64:83:f3:a1:b3:91:b7:
f4:7e:59:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org