Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JHrcJfrZofIXFrOkHWz8pAiZwf0.roa
File: JHrcJfrZofIXFrOkHWz8pAiZwf0.roa (raw, json)
Hash identifier: kxAyUmQOwxPQq6VppI5Zh1GKG5hgkgYMA8UQGCd1Y+s=
Subject key identifier: 24:7A:DC:25:FA:D9:A1:F2:17:16:B3:A4:1D:6C:FC:A4:08:99:C1:FD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EDECEA1EE1D95E4E2487B71D4C8C90FE0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JHrcJfrZofIXFrOkHWz8pAiZwf0.roa
Signing time: Sun 14 Apr 2024 22:51:07 +0000
ROA not before: Sun 14 Apr 2024 22:51:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199266
IP address blocks: 2a0e:97c0:2f0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Apr 2024 22:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:de:ce:a1:ee:1d:95:e4:e2:48:7b:71:d4:c8:c9:0f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 14 22:51:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=247adc25fad9a1f21716b3a41d6cfca40899c1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2b:b6:84:6e:70:eb:6f:43:94:21:75:c6:27:
24:b8:67:28:37:2e:47:f3:0c:5d:d0:a3:b8:d3:47:
a4:68:61:be:af:e4:ef:b6:5d:9c:0b:a9:9f:2e:8d:
e3:98:82:c2:0d:70:04:ee:2c:8b:ef:df:28:44:83:
d3:56:01:83:ff:a1:4a:73:57:39:da:31:33:08:9e:
3c:c1:0f:27:a1:1c:b4:c0:2b:5f:6e:28:eb:b5:da:
71:e3:6b:52:29:b4:64:48:58:b9:1f:e7:7d:96:67:
ea:09:a6:a3:be:28:a2:ba:82:1d:d4:98:99:1d:63:
d0:ea:84:3a:16:4c:3e:8f:4d:bf:ed:b6:1a:cc:3e:
97:ec:da:09:d6:89:d7:dc:8b:e3:02:46:cf:2d:2a:
66:05:dd:d7:98:b9:23:d6:d2:e4:64:54:68:47:f5:
46:07:b4:8d:c3:b4:30:45:c9:13:b6:a5:7c:f5:88:
0b:5b:25:79:9c:06:dc:c5:d4:2b:63:56:fc:6e:99:
bf:e4:80:fd:e4:b8:70:ad:53:b2:d6:12:70:c7:a1:
56:b6:92:bf:15:41:a9:d3:fc:7b:44:eb:57:9e:c8:
0d:48:74:4c:c5:6c:a9:70:72:4b:79:2b:7f:db:08:
31:2a:75:56:15:5f:29:74:c8:6e:54:ce:0f:08:65:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7A:DC:25:FA:D9:A1:F2:17:16:B3:A4:1D:6C:FC:A4:08:99:C1:FD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JHrcJfrZofIXFrOkHWz8pAiZwf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:2f0::/44
Signature Algorithm: sha256WithRSAEncryption
11:b7:c1:45:cd:69:f8:ee:65:5a:c7:37:47:5c:26:b2:62:03:
80:3b:9c:c2:ac:78:32:4d:de:62:92:2c:e6:48:6f:d4:c6:56:
a0:7c:c3:b4:c6:e5:72:d6:fa:70:91:1a:e6:32:3b:70:d8:b6:
84:96:44:e8:e4:54:70:8e:32:8e:36:86:ef:3f:db:32:a6:21:
73:b1:57:f9:e4:78:79:5f:25:27:08:62:fa:f4:0a:5f:de:db:
ad:51:86:fe:5b:df:5d:9f:fe:06:b5:e1:27:b8:a2:4c:a6:be:
6a:50:82:97:cc:8b:c2:bd:86:c2:fe:88:12:c1:30:bd:12:c5:
1b:64:8b:1d:df:8f:0e:15:f5:90:36:a6:c3:c2:27:bd:ce:4d:
95:25:da:2b:69:ae:cc:7a:f3:23:f1:d3:08:31:f5:83:cc:31:
34:43:6a:06:93:2b:8e:36:48:0a:82:cb:38:58:de:e8:7e:c1:
95:66:f3:2f:ab:29:a0:30:dc:65:eb:53:6c:78:78:7d:2f:fd:
da:a2:d5:5b:a5:71:4c:0e:2b:de:18:b5:54:c4:15:10:dd:6a:
70:a7:96:6a:08:b3:6a:23:8e:2f:c9:54:97:2c:bb:3c:a6:1f:
b6:e3:1c:cd:62:cf:5c:a1:43:25:23:78:f6:a6:e4:cb:32:93:
a5:8d:92:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 00:25:03 2024 by rpki-client on console-fra.rpki-client.org