Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JfZOGgakcFpzt9E-KuFRiNNESBk.roa
File: JfZOGgakcFpzt9E-KuFRiNNESBk.roa (raw, json)
Hash identifier: bY4lzgBEdhUgoFsKMTGTigVlF7I8K8jDPPJ38DuzziM=
Subject key identifier: 25:F6:4E:1A:06:A4:70:5A:73:B7:D1:3E:2A:E1:51:88:D3:44:48:19
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7D2D651975B2D4A78A4661AC84A50
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JfZOGgakcFpzt9E-KuFRiNNESBk.roa
Signing time: Mon 02 Jan 2023 05:15:19 +0000
ROA not before: Mon 02 Jan 2023 05:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208191
IP address blocks: 2a0e:b107:16::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:d2:d6:51:97:5b:2d:4a:78:a4:66:1a:c8:4a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25f64e1a06a4705a73b7d13e2ae15188d3444819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:18:90:d3:3e:53:f2:8a:0b:2d:91:6e:b8:
17:47:25:8a:e2:d3:08:0e:6f:ed:54:3c:1d:ee:d0:
aa:c7:df:93:cc:22:a1:c3:0a:e1:24:f5:7d:d1:dc:
bc:17:fa:d7:de:c7:cd:2b:e3:dd:8b:79:42:e1:32:
58:0b:cc:fb:de:14:c6:31:38:df:95:bf:fd:d7:2e:
57:2d:fc:3f:07:95:ae:a7:c9:12:45:78:33:4c:1c:
ec:a9:c8:aa:2b:93:a5:57:9d:5e:49:a0:16:9e:43:
0a:fa:7b:f0:dd:22:b2:80:7f:cb:16:57:d9:85:9c:
89:e1:a8:a0:80:c0:ec:d5:85:eb:46:6a:94:88:ca:
f9:ae:aa:c7:da:a1:ee:1d:77:a1:6e:37:0c:02:39:
1d:2d:ce:95:e6:5c:3a:e1:f3:64:03:bc:f6:37:55:
5a:11:31:90:83:2f:b4:e5:c5:91:ab:97:9b:3a:bc:
44:71:3f:3b:6d:66:51:31:c1:34:be:54:46:27:d4:
82:15:67:79:40:fb:1d:86:50:b8:a9:9c:bc:a3:a0:
ec:43:db:fa:73:fb:67:88:55:99:58:ec:fb:46:1d:
0f:9c:c6:a4:dc:10:27:65:a2:76:1e:96:53:ba:4d:
c3:a0:4b:41:c1:93:7a:a7:02:33:4c:48:cc:df:f4:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:4E:1A:06:A4:70:5A:73:B7:D1:3E:2A:E1:51:88:D3:44:48:19
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JfZOGgakcFpzt9E-KuFRiNNESBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:16::/48
Signature Algorithm: sha256WithRSAEncryption
3c:56:27:34:52:41:58:c6:d9:75:4b:70:31:c7:16:55:67:3f:
af:fc:76:ac:fa:cc:1c:90:70:6e:5c:30:45:fb:42:2f:a8:b4:
db:bb:58:b5:ed:71:f8:27:16:f3:57:b6:38:d7:82:e8:33:ce:
be:49:ac:52:4d:7e:c5:7e:97:36:98:40:71:0e:6a:00:66:ae:
62:16:a3:86:d3:0d:7e:fd:df:e3:9f:04:bb:00:bf:6d:d2:24:
7b:6d:72:ca:78:b8:f8:53:f4:7b:60:21:57:d0:97:33:4b:7d:
61:e9:e9:59:88:36:88:e3:6d:1b:34:90:8e:d7:6b:3b:c1:52:
19:03:2f:9b:61:53:d9:f8:ae:af:88:2c:60:c6:0b:72:24:85:
81:0c:31:16:85:c2:2d:3e:a0:66:5b:1f:c8:0e:ad:e1:77:25:
5d:f8:10:d8:a5:8c:d7:69:1d:31:ef:9d:ca:1e:2a:90:46:27:
9b:09:94:a6:9c:55:39:d8:0c:fe:e5:bb:a8:ef:33:46:b1:59:
78:44:c0:74:1c:73:6c:e7:c2:7f:36:c5:7f:60:1b:db:ee:d7:
d9:82:ad:ca:41:55:0a:d2:61:5c:6b:f2:9c:c3:f2:a0:15:09:
ac:93:42:c0:dd:ec:8b:91:27:d1:04:8d:3f:92:8a:53:19:31:
17:a7:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org