Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HREQcseqBvdjR0jDV6cSMa3FhJo.roa
File: HREQcseqBvdjR0jDV6cSMa3FhJo.roa (raw, json)
Hash identifier: 25qjlRl7u89ikN5z9dTr7yP73kKEKrG7/YQDxDKUUYc=
Subject key identifier: 1D:11:10:72:C7:AA:06:F7:63:47:48:C3:57:A7:12:31:AD:C5:84:9A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E791939FDBA63E69E7C8597941BC90
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HREQcseqBvdjR0jDV6cSMa3FhJo.roa
Signing time: Mon 02 Jan 2023 05:15:02 +0000
ROA not before: Mon 02 Jan 2023 05:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138632
IP address blocks: 2a0e:b107:1f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:91:93:9f:db:a6:3e:69:e7:c8:59:79:41:bc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d111072c7aa06f7634748c357a71231adc5849a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:84:47:2f:85:57:e6:a1:55:62:64:0d:5b:
28:72:ba:88:63:51:23:6c:ce:7e:dc:7e:b0:89:71:
79:63:18:82:5b:87:53:04:49:d5:66:40:fa:50:c4:
6d:90:f0:ff:9f:fd:0f:de:2c:34:dc:df:8a:e1:73:
5e:72:97:eb:d1:27:ed:ca:3e:99:ad:fc:53:23:d4:
06:43:a9:93:2c:56:ce:43:99:f9:17:fc:d1:15:81:
a7:fd:31:83:f2:2c:86:63:9d:42:3f:c9:d7:cf:d4:
34:15:2f:36:d5:4b:94:1a:d7:38:67:8e:61:d4:66:
de:d8:c9:3b:f1:b1:ea:61:3b:f6:db:ec:b8:ae:47:
41:03:65:89:f5:b7:2a:95:08:9b:56:44:74:83:81:
7a:af:14:6b:ab:1f:42:57:b5:9f:f4:1a:bd:7a:06:
fe:a3:ee:9f:92:ff:a2:7c:7c:aa:9c:81:4a:d7:8e:
bb:2e:8f:5b:49:62:35:e0:67:34:99:d1:91:5c:95:
3a:4d:ee:b1:0d:6c:b6:ef:8d:49:37:2e:97:94:8a:
8f:21:63:9c:a8:70:c3:a3:33:9e:c0:42:60:05:6b:
ab:91:a4:bc:0f:11:5e:92:f6:bc:97:c8:bb:1f:fa:
fe:16:a5:93:5e:65:79:25:25:f4:08:47:94:f0:67:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:11:10:72:C7:AA:06:F7:63:47:48:C3:57:A7:12:31:AD:C5:84:9A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HREQcseqBvdjR0jDV6cSMa3FhJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1f0::/48
Signature Algorithm: sha256WithRSAEncryption
b9:91:f7:3a:ee:5a:1d:3b:bb:bb:db:d9:d1:b1:21:03:f3:5c:
00:a4:ef:b1:66:6d:a9:07:9c:9c:38:55:e3:ed:93:dc:1d:07:
92:de:eb:d5:4c:1e:91:ad:3d:18:c3:d9:e2:1a:5e:55:6c:02:
d7:80:42:27:7d:9c:bd:27:75:45:8f:85:ac:a2:80:0f:70:00:
90:f8:2b:c4:23:02:ff:25:8e:84:e9:2d:b2:b0:a8:7e:c6:51:
e3:1a:52:b9:ee:c7:98:63:9f:05:cd:0d:bb:bf:10:42:1d:a2:
39:2e:17:83:99:1e:d7:a4:26:74:db:e4:40:1d:8c:b3:19:4b:
db:30:69:8b:bb:2a:96:98:a7:1b:09:3d:19:22:e7:54:99:74:
15:15:80:80:11:f9:c8:aa:de:f5:f4:31:ed:96:ec:49:d1:e2:
be:70:50:2a:4a:ef:b4:ab:e0:a5:d7:96:57:ef:1f:f6:1f:7a:
fd:36:7b:5b:b0:2a:d6:ca:11:41:9a:12:c0:e9:fd:e8:cc:1d:
39:77:ec:84:da:83:0e:3d:2e:24:4b:14:7e:89:0a:a4:0d:dc:
2c:0b:e4:13:df:3d:95:6f:c9:74:15:2f:bc:bd:73:90:14:dd:
c7:ed:01:47:22:51:26:c6:47:a5:7e:72:80:89:87:47:40:34:
c6:00:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:59 2024 by rpki-client on console-ams.rpki-client.org