Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JSXsEWR1MogXKwmKlgfzgzG4ES8.roa
File: JSXsEWR1MogXKwmKlgfzgzG4ES8.roa (raw, json)
Hash identifier: R2p6eWKYCFF/vhHh65LSklNIt/ie3vHG8UJcxinkPRQ=
Subject key identifier: 25:25:EC:11:64:75:32:88:17:2B:09:8A:96:07:F3:83:31:B8:11:2F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018843951B80BDEFA4D947F673D84FBFB46A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JSXsEWR1MogXKwmKlgfzgzG4ES8.roa
Signing time: Mon 22 May 2023 13:10:25 +0000
ROA not before: Mon 22 May 2023 13:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202256
IP address blocks: 2a10:ccc7:9000::/40 maxlen: 48
2a0e:97c6:4000::/34 maxlen: 48
2a06:de01:800::/38 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 May 2023 07:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:95:1b:80:bd:ef:a4:d9:47:f6:73:d8:4f:bf:b4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 22 13:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2525ec1164753288172b098a9607f38331b8112f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:92:26:0c:f1:96:c6:56:2b:cc:85:5a:31:
40:65:c9:48:c8:b4:87:4b:ee:0b:09:ba:5b:66:5b:
0b:79:60:12:6d:70:7b:b2:1e:c5:0a:5b:a2:31:bb:
1b:ad:ab:c9:f4:3a:43:74:8e:7c:7b:f7:39:f3:82:
8a:02:5d:7c:dc:37:fb:3c:05:6e:03:fd:ce:f4:8f:
fc:7b:85:9f:e8:0f:d4:21:05:f9:9c:1c:c3:42:9a:
93:3e:9b:ff:2a:e2:21:87:72:89:95:ae:03:de:3c:
bd:d3:30:34:9c:ea:3c:81:94:2f:f0:d3:9e:11:ec:
38:bb:c2:71:30:83:5c:d1:87:d9:af:c0:e1:cc:7b:
e9:f7:5e:1a:42:ec:7c:6e:64:4c:0f:dc:ae:dc:c2:
f2:8e:bc:c5:8b:5e:e8:b7:9d:b0:73:c6:53:4d:a7:
1e:eb:a9:75:b1:db:54:f6:63:25:90:01:dc:4e:92:
04:52:b5:3e:ff:46:d9:9b:41:76:f6:c4:6f:a2:22:
bd:75:3b:3d:72:e0:c7:6e:33:4d:44:96:30:2f:76:
6e:5a:d4:50:e2:1e:e9:62:9e:2f:d2:c8:ee:c1:f3:
5b:a4:c2:0a:e9:b7:08:90:68:45:1b:0c:1a:f4:92:
b8:8b:bb:75:90:3b:21:2c:73:13:5a:11:4c:a2:27:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:EC:11:64:75:32:88:17:2B:09:8A:96:07:F3:83:31:B8:11:2F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JSXsEWR1MogXKwmKlgfzgzG4ES8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:800::/38
2a0e:97c6:4000::/34
2a10:ccc7:9000::/40
Signature Algorithm: sha256WithRSAEncryption
13:27:f8:6b:48:02:52:0f:eb:aa:f9:d1:af:6b:a9:d9:15:13:
c7:18:52:ba:f5:d0:13:8f:e3:19:c6:38:d1:90:1a:8b:0d:53:
4f:ac:c6:c4:65:b7:0a:c5:3e:5e:e0:31:5d:62:86:83:71:d8:
27:ca:4f:f4:23:25:13:2b:35:60:cb:2e:38:f9:20:62:2b:9f:
59:20:94:c9:18:24:30:2d:37:e8:14:d1:4f:53:aa:b7:c9:93:
8a:1d:51:49:e3:aa:27:44:f9:5c:e9:87:3d:bd:ea:8e:fb:fa:
10:cd:de:b1:6a:1c:f9:90:b4:f2:6a:f9:df:cb:3a:b6:12:a7:
ba:2c:45:ab:08:5f:b2:1e:67:8a:35:d9:4d:e2:d9:ad:84:87:
3c:06:fd:42:32:be:e9:08:b1:bc:c0:81:45:5c:18:20:b1:ce:
5b:94:04:d8:4a:d6:5e:f5:63:26:39:76:a2:0a:fc:83:f7:49:
b9:62:19:89:55:10:a8:e4:c3:61:b1:8b:4f:a6:ba:7a:eb:b2:
8f:f9:dc:ac:52:79:92:51:3c:80:8d:c0:d7:60:8c:aa:44:15:
9a:0f:e8:8e:94:60:27:e2:ef:92:f6:76:c8:f6:02:36:a7:d4:
09:61:20:6e:03:a6:bc:1c:34:89:3b:9d:d0:23:40:bd:6e:42:
f2:86:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:29 2024 by rpki-client on console-fra.rpki-client.org