Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JFIQMM8XX53Maq3QuaZ67eJbJi4.roa
File: JFIQMM8XX53Maq3QuaZ67eJbJi4.roa (raw, json)
Hash identifier: eOIHUAo8Id9EReKwRIUDlvDK9YzyxBABC+oaVwsZkGY=
Subject key identifier: 24:52:10:30:CF:17:5F:9D:CC:6A:AD:D0:B9:A6:7A:ED:E2:5B:26:2E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD5BEFB69D075289C84092E6CE32BB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JFIQMM8XX53Maq3QuaZ67eJbJi4.roa
Signing time: Tue 02 Jan 2024 10:34:39 +0000
ROA not before: Tue 02 Jan 2024 10:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398355
IP address blocks: 2a0e:b107:14ff::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Apr 2024 02:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:5b:ef:b6:9d:07:52:89:c8:40:92:e6:ce:32:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24521030cf175f9dcc6aadd0b9a67aede25b262e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:74:6b:55:0c:57:26:a2:8b:2f:2c:3e:98:
0f:32:34:5a:e4:5b:a7:12:eb:09:75:dd:7d:9f:4c:
53:ea:8e:57:66:5e:54:22:0f:40:7f:32:45:08:0b:
10:9b:87:9e:69:ef:d8:e2:e6:f0:ad:d5:ee:53:ea:
92:7e:2e:74:7d:ed:ff:5a:d5:d7:bc:72:ad:5e:8d:
af:f6:d0:83:98:75:59:2d:b6:e8:b3:7f:07:36:2c:
e5:d1:53:ef:2d:43:7f:49:20:6f:43:87:c2:8f:54:
b3:ff:14:b9:6a:97:9a:41:b1:f9:aa:18:91:06:fa:
4b:18:6d:bf:bd:36:99:51:4d:21:b9:b7:f3:2c:17:
f4:eb:e3:9b:0a:83:76:ac:23:d0:65:ac:59:8f:45:
ba:2b:e3:a7:70:4d:6b:2c:93:e4:6d:7c:ea:88:a1:
22:9d:18:fc:f0:45:28:66:86:96:ff:0f:0d:2c:22:
22:ba:6c:27:dd:d6:6e:48:05:40:3b:6e:0d:59:f8:
e4:b0:17:da:29:27:01:64:e7:fb:98:48:0d:eb:1f:
2a:bc:c5:cd:f4:1a:4b:80:d5:2e:99:81:b7:52:d9:
82:08:e2:ff:9d:2d:78:1e:16:ba:cc:f5:26:82:1f:
c7:8b:f3:62:a6:61:ca:bc:34:e3:08:96:96:67:5c:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:52:10:30:CF:17:5F:9D:CC:6A:AD:D0:B9:A6:7A:ED:E2:5B:26:2E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JFIQMM8XX53Maq3QuaZ67eJbJi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:14ff::/48
Signature Algorithm: sha256WithRSAEncryption
89:f4:57:b4:05:24:1b:37:ca:f6:1c:fa:57:8f:bd:a8:09:6b:
d7:a8:65:52:e3:7a:76:8e:6c:ba:dd:d0:05:00:a2:7a:47:69:
42:83:95:51:7b:11:f6:43:bf:0e:35:d3:80:ee:a6:bf:9f:3c:
8f:bd:ea:e4:30:0b:19:a6:24:a7:ce:99:0d:1c:0b:b4:81:33:
91:36:d4:53:b8:88:71:a1:96:33:26:94:2e:25:59:f5:93:1b:
88:c8:a1:a6:a4:b1:01:d7:24:4c:8f:8c:d0:5a:2b:6d:9c:b2:
57:e6:ea:cc:83:6d:d8:c3:50:bd:f1:f2:ea:bf:03:2e:a4:21:
8b:28:8f:0e:c1:b5:a4:b7:2d:a0:e9:75:79:37:ec:10:a9:8a:
79:60:af:d1:7b:8b:4c:df:43:30:81:58:0f:f5:61:86:49:bf:
f9:9e:42:27:28:f9:1f:64:7f:2e:7c:0b:7a:1e:df:cb:e1:4f:
84:f5:d1:6d:a3:91:84:45:5c:b7:27:53:1f:92:7a:f7:4b:4b:
22:41:75:8e:f9:2f:60:49:38:7d:9b:c0:ca:cf:0d:1c:b2:a9:
b5:90:ad:6d:e1:b5:54:c4:d4:58:20:1c:df:91:6e:da:6b:c4:
2c:05:40:15:c4:d6:65:1e:6b:3a:b7:40:17:ec:a6:8d:37:aa:
8c:5f:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:29 2024 by rpki-client on console-fra.rpki-client.org