Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JGiEWQoaVrD4it7j4yVEpjPyUpM.roa
File: JGiEWQoaVrD4it7j4yVEpjPyUpM.roa (raw, json)
Hash identifier: 6UPOqzkHOZNAWh6soFQnAHE2RdAV0Cw0exfy6nel5Qc=
Subject key identifier: 24:68:84:59:0A:1A:56:B0:F8:8A:DE:E3:E3:25:44:A6:33:F2:52:93
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018730D88BBB2604868ECA2DBA50936975C6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JGiEWQoaVrD4it7j4yVEpjPyUpM.roa
Signing time: Thu 30 Mar 2023 04:48:30 +0000
ROA not before: Thu 30 Mar 2023 04:48:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142382
IP address blocks: 2a0e:b107:1790::/48 maxlen: 48
2a0e:b107:1795::/48 maxlen: 48
2a0e:b107:1792::/48 maxlen: 48
2a0e:b107:1794::/48 maxlen: 48
2a0e:b107:1791::/48 maxlen: 48
2a0e:b107:1793::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Jun 2023 10:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:d8:8b:bb:26:04:86:8e:ca:2d:ba:50:93:69:75:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 30 04:48:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=246884590a1a56b0f88adee3e32544a633f25293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:bc:07:c7:cc:f8:df:29:7b:f8:8a:bb:75:
82:2e:0b:f7:6c:6a:3d:4f:0f:88:bb:d9:73:6a:dc:
38:67:a8:66:e4:56:a3:77:3a:07:81:1c:25:97:59:
2a:f5:67:e7:ed:a4:53:a3:78:42:9e:86:d9:77:d9:
f4:89:c7:0e:b0:49:30:94:1b:c0:65:a6:9d:4c:f5:
4d:c8:70:3f:65:90:1b:40:dd:5b:b0:f4:19:ba:53:
fb:d8:26:cf:08:d5:ff:bd:2e:9d:2a:9f:3d:4e:f4:
af:73:e5:51:15:a7:33:a2:5b:cf:b6:f8:54:1a:c1:
c2:b7:7b:f7:15:20:0a:9f:a0:c6:2f:63:ff:41:a1:
c1:42:37:dd:46:c6:d1:66:9f:01:c5:bd:3c:23:83:
e8:c8:d1:12:eb:1d:d1:26:9e:3c:c0:20:1e:d1:40:
6d:1e:ff:4a:9d:d1:a8:87:f1:03:a9:9a:ce:57:fe:
6d:56:23:44:37:f4:1f:f3:21:65:b2:b9:16:f6:a9:
af:d8:04:4f:34:80:66:ed:32:93:bc:00:1c:1c:58:
df:12:c5:4c:79:80:65:73:bf:b1:90:d6:93:af:a1:
b6:5f:c1:06:2c:82:24:83:dd:cb:9f:2b:ca:a1:5d:
2e:9e:c2:f0:d9:f2:a4:5f:b7:a4:a3:e5:bc:f8:73:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:68:84:59:0A:1A:56:B0:F8:8A:DE:E3:E3:25:44:A6:33:F2:52:93
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JGiEWQoaVrD4it7j4yVEpjPyUpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1790::-2a0e:b107:1795:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
79:f9:78:d7:bb:24:a5:1a:81:36:0d:5e:46:8a:d0:c1:47:7d:
b3:a4:38:64:1b:ec:c3:27:60:04:4f:68:81:1b:22:5b:fd:3f:
b3:bb:c0:f5:23:79:bf:85:7b:9b:98:86:6f:1c:85:13:84:d0:
61:0a:a4:5f:f4:f0:90:7f:3f:5c:80:70:84:ff:e5:9e:96:50:
3b:95:27:f2:ce:35:03:4d:a2:08:5d:b0:2b:42:f0:66:65:2f:
36:49:37:eb:a5:dd:cd:42:57:9c:ed:09:aa:0c:bd:37:b0:e9:
ce:39:fb:39:61:ac:e9:e5:72:cf:45:63:d5:1f:ca:da:23:db:
aa:d0:3a:61:09:9d:08:db:6f:b0:23:74:d0:45:b5:ca:53:62:
69:f9:8e:bc:1a:66:71:12:10:86:66:96:94:ff:14:86:92:93:
63:69:26:7d:31:99:0d:4d:2b:8c:67:dc:81:ee:e7:c3:f3:85:
d3:ea:f7:bc:6b:9e:d1:23:0b:ff:eb:c2:e8:85:98:80:88:43:
c7:48:67:88:6a:64:a7:19:44:62:1c:e6:99:0b:88:55:79:8f:
4a:6b:be:fa:d3:61:ea:59:53:35:3a:fa:ba:5f:0e:91:5e:43:
22:88:62:46:d3:a7:7f:1e:d9:e0:b7:5c:66:5d:79:bc:0c:a9:
c6:cb:dc:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:29 2024 by rpki-client on console-fra.rpki-client.org