Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GjtS7ti0s99Bm646sOhqlebDrOA.roa
File: GjtS7ti0s99Bm646sOhqlebDrOA.roa (raw, json)
Hash identifier: zaUdBp8X3PtvbSqLVZmriXLXCScIHUGTBmgDSx1b6Nw=
Subject key identifier: 1A:3B:52:EE:D8:B4:B3:DF:41:9B:AE:3A:B0:E8:6A:95:E6:C3:AC:E0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BCF24CE73933C3F2F7BF5549478B54358
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GjtS7ti0s99Bm646sOhqlebDrOA.roa
Signing time: Tue 14 Nov 2023 18:42:57 +0000
ROA not before: Tue 14 Nov 2023 18:42:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 2a0e:b107:27d0::/48 maxlen: 48
2a0e:b107:27d1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Dec 2023 14:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cf:24:ce:73:93:3c:3f:2f:7b:f5:54:94:78:b5:43:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 14 18:42:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a3b52eed8b4b3df419bae3ab0e86a95e6c3ace0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:00:9b:3e:3f:a5:ec:9f:46:0c:3f:4a:a2:
7c:09:be:62:8f:68:05:b5:cf:f4:48:c4:79:f7:6b:
f5:fe:86:ab:45:fe:b2:47:7b:2e:88:01:70:21:76:
7a:fd:fe:92:d1:f3:7a:7a:8c:bf:be:cc:0a:a5:22:
25:b9:b3:1e:e7:e8:a9:d5:95:30:ee:68:de:28:a4:
53:9d:0d:89:4f:72:2c:19:56:cf:db:ac:6d:31:3c:
21:20:19:55:c1:01:1d:05:f4:26:37:25:fc:42:a4:
da:65:64:51:fc:a8:49:ed:f5:a9:3d:8c:19:a7:ed:
f8:29:b1:83:40:0a:c9:e7:54:25:e7:da:af:fc:ec:
7d:bb:21:54:ab:27:04:c6:c5:72:e6:75:99:dc:cc:
67:7a:a8:4e:8e:4e:80:f3:59:2a:7e:1f:c4:3f:2f:
5d:7b:41:c7:aa:39:7e:6f:1b:c2:b2:45:7d:4a:f8:
d8:55:f2:19:38:9c:03:99:25:e4:18:17:2d:ba:0d:
bf:aa:38:c2:03:89:70:92:19:d6:08:16:9a:51:36:
71:52:ef:ad:3e:29:5e:aa:ab:61:79:e8:9a:26:90:
45:9a:22:b9:27:04:62:fe:6e:9f:cd:e6:a2:8d:f6:
16:42:47:3c:a4:c9:ed:17:12:b3:fe:00:1f:fb:bc:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:52:EE:D8:B4:B3:DF:41:9B:AE:3A:B0:E8:6A:95:E6:C3:AC:E0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GjtS7ti0s99Bm646sOhqlebDrOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27d0::/47
Signature Algorithm: sha256WithRSAEncryption
0e:d7:18:0b:5c:7b:2b:0b:d9:18:c4:6d:f8:83:7f:88:ec:e3:
75:b9:83:4c:71:5a:eb:43:a0:36:be:39:c6:31:88:a6:08:14:
46:11:25:04:a4:42:9f:a7:d8:82:50:03:bb:57:34:46:da:2d:
29:8f:cf:99:03:39:75:d2:e4:13:6d:31:f2:24:e5:d1:0b:fa:
27:96:55:b3:c3:39:da:4c:11:b2:d2:3c:01:bc:f7:a6:4e:30:
77:4e:b7:8a:15:ab:a4:3b:bd:ed:bd:0c:d9:e8:d2:e8:cb:5c:
c3:42:96:99:9b:d9:dd:09:29:24:a6:df:ef:2f:96:5b:5c:1d:
83:a8:f7:5c:b4:6c:61:06:f3:71:20:05:e8:ab:e0:f3:49:fc:
b2:b7:9e:69:8a:4d:81:76:83:4a:bb:e1:14:d0:b9:8c:8a:77:
95:21:bb:75:77:aa:76:2d:23:02:b7:ea:30:e1:8f:db:6d:96:
f2:5e:64:8f:6e:7a:08:43:5d:97:c6:1e:cc:a1:a3:f3:7e:32:
57:34:5d:fb:4c:e3:44:8d:79:98:bc:54:3f:e5:ec:54:12:58:
6c:49:38:38:c0:8d:59:fa:d4:61:b8:7f:31:c3:75:57:8a:08:
a1:1c:e8:49:0c:ab:ec:b8:54:06:85:d8:4b:23:68:bc:7d:e8:
e3:0e:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:58 2024 by rpki-client on console-ams.rpki-client.org