Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KfY5Y-g-W97jO7pwnM7YIpY3yoY.roa
File: KfY5Y-g-W97jO7pwnM7YIpY3yoY.roa (raw, json)
Hash identifier: DEoN+7sk2oWxZGogvYXiCR344VxkmYoNFMArCkakYpA=
Subject key identifier: 29:F6:39:63:E8:3E:5B:DE:E3:3B:BA:70:9C:CE:D8:22:96:37:CA:86
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AC1517D22CFF2D178B12376EF70DE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KfY5Y-g-W97jO7pwnM7YIpY3yoY.roa
Signing time: Tue 24 Jan 2023 16:09:36 +0000
ROA not before: Tue 24 Jan 2023 16:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59922
IP address blocks: 2a10:cc44:112::/48 maxlen: 48
2a10:cc44:110::/48 maxlen: 48
2a0e:b107:13de::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:c1:51:7d:22:cf:f2:d1:78:b1:23:76:ef:70:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29f63963e83e5bdee33bba709cced8229637ca86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:1c:62:26:ea:b4:22:cc:2b:a2:df:f0:8f:
26:a0:35:3a:e3:f9:14:8d:3b:c0:3e:88:49:1b:c3:
3b:51:ea:78:b7:17:03:24:2a:e4:0b:58:cd:0e:c1:
b8:ed:96:6a:51:84:28:81:f8:a8:74:62:56:70:ac:
22:58:c6:34:d9:b4:7c:cb:16:a2:35:ac:92:37:25:
e7:76:2e:f7:19:38:34:fa:73:a9:aa:3e:15:e9:06:
cc:15:a0:da:6a:e5:b5:76:b0:51:25:ad:fb:9c:e4:
d2:a1:54:b6:87:d1:59:a3:84:64:db:86:ee:00:c3:
5f:72:49:0b:f4:ca:7f:02:b5:ca:b2:5a:a5:cc:f0:
5a:19:2f:1a:5f:33:66:5e:1a:83:4c:39:05:7d:f7:
67:41:85:f1:d0:80:5a:7e:58:6c:f8:27:cf:81:0a:
af:16:c6:02:72:9e:f7:88:7f:5c:dc:3f:5e:5d:68:
93:50:98:30:2b:75:29:78:8d:6e:f3:c1:99:26:a3:
73:cf:d9:1d:9e:ff:92:dc:90:07:4c:b8:62:18:ac:
a1:0d:26:86:eb:ed:39:8f:54:57:fc:20:71:a8:ce:
47:e9:01:7a:2b:c1:56:37:04:9f:ba:30:8e:ed:52:
21:a6:76:1e:aa:84:7f:51:75:30:58:f1:54:18:a4:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F6:39:63:E8:3E:5B:DE:E3:3B:BA:70:9C:CE:D8:22:96:37:CA:86
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KfY5Y-g-W97jO7pwnM7YIpY3yoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:13de::/48
2a10:cc44:110::/48
2a10:cc44:112::/48
Signature Algorithm: sha256WithRSAEncryption
03:69:bb:12:72:b5:26:10:7e:83:b5:59:2e:e0:b8:77:68:fa:
98:00:6a:7b:c6:5b:57:7f:df:01:ae:6d:81:06:52:59:69:5a:
9e:a1:0d:fc:c6:86:8b:5d:09:78:0b:25:81:0f:f0:6a:15:17:
3c:9f:02:7c:03:20:02:c0:dc:88:8a:5d:bc:cb:1d:58:39:eb:
a2:2f:56:94:27:99:c5:ab:eb:24:4c:17:45:00:ae:b3:15:b1:
bd:52:8a:17:76:75:07:e4:2c:6c:a9:b0:39:ba:bd:8f:c0:54:
a8:f6:1a:6d:58:99:1c:1d:18:f4:f6:09:df:49:0f:6e:8a:a0:
9b:68:ed:03:02:ad:ea:a3:7f:b8:3e:88:33:23:b5:b4:d7:ff:
42:b2:fd:55:01:ac:d4:94:ad:f8:cb:48:e9:a9:dd:c6:26:33:
48:47:4e:9d:2e:b0:8e:dc:1e:8f:e4:5a:fc:9c:b3:5d:94:8c:
8d:ae:27:42:c8:0b:17:4e:2b:30:6b:69:83:af:99:74:8d:bb:
3b:8c:9a:5a:76:41:9f:bc:f9:fb:ec:53:0a:c8:df:37:45:3e:
d3:2a:6f:77:15:25:d7:48:ef:ed:10:b1:0d:0c:32:fd:c6:af:
80:01:e0:40:2f:b0:f0:c1:3d:a3:da:fe:e3:65:a6:82:b5:f3:
7d:70:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:29 2024 by rpki-client on console-fra.rpki-client.org