Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L8Msg-h5wYPti7PbNES5y3nqAhw.roa
File: L8Msg-h5wYPti7PbNES5y3nqAhw.roa (raw, json)
Hash identifier: 2RnPftvgk2DgnUapM2ljXabHzR3wTGx9DOX3zsYl5Ho=
Subject key identifier: 2F:C3:2C:83:E8:79:C1:83:ED:8B:B3:DB:34:44:B9:CB:79:EA:02:1C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191B83195E0F0D12A679C93CD54B43549D5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L8Msg-h5wYPti7PbNES5y3nqAhw.roa
Signing time: Tue 03 Sep 2024 14:02:23 +0000
ROA not before: Tue 03 Sep 2024 14:02:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214366
IP address blocks: 2a10:ccc1:100::/45 maxlen: 48
Validation: Failed, certificate revoked on Sat 05 Oct 2024 09:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:31:95:e0:f0:d1:2a:67:9c:93:cd:54:b4:35:49:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 3 14:02:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fc32c83e879c183ed8bb3db3444b9cb79ea021c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:2a:cb:b0:27:1b:80:24:cd:b7:6e:9f:23:
2e:8d:1a:53:e4:5a:6a:6e:65:9b:f0:13:85:b6:26:
92:fd:34:df:87:6a:e0:23:a1:4c:44:66:7f:40:43:
c0:26:4c:5f:fe:eb:af:b4:87:eb:39:70:43:cb:5c:
18:bd:b1:1f:67:ef:ec:c1:24:10:fa:f2:e4:9f:5d:
2d:cc:db:48:ce:81:74:23:7e:f2:dd:41:38:02:e3:
06:72:95:96:c0:f7:f7:d6:3d:e3:e9:bd:7d:58:8d:
43:6f:ce:f9:8b:91:05:66:39:b8:cb:34:df:c8:44:
91:fe:b5:25:3e:2e:fa:2f:17:0a:97:47:fd:2d:b4:
cd:83:ee:c8:7d:68:36:a2:e1:f4:53:14:66:d1:be:
16:ca:b8:01:40:18:f2:a5:53:59:4e:da:a9:c8:41:
77:8c:40:df:b5:46:aa:92:28:47:cd:fa:50:19:56:
f9:be:2f:17:5c:22:9b:f4:90:70:0b:85:09:de:a4:
01:95:2a:40:2e:db:c4:0e:d9:e4:cd:a5:fb:b0:29:
f9:2a:17:2d:1f:31:c4:9d:02:58:e0:fd:22:86:30:
c1:4c:d9:ce:8e:9e:27:54:0a:ab:9d:79:d2:f2:72:
81:1e:16:ef:bb:9f:c4:e1:24:6e:33:36:00:e8:82:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C3:2C:83:E8:79:C1:83:ED:8B:B3:DB:34:44:B9:CB:79:EA:02:1C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L8Msg-h5wYPti7PbNES5y3nqAhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc1:100::/45
Signature Algorithm: sha256WithRSAEncryption
19:7e:7a:ca:7e:51:93:da:a2:7e:ce:2d:54:32:25:f1:24:0d:
d7:d9:53:61:ca:4c:5a:d6:3d:aa:16:ba:5a:bf:d3:29:ea:dc:
46:33:4d:44:ef:eb:a0:06:35:be:76:3c:bb:44:a1:b6:9b:49:
1e:8a:14:ea:20:39:fe:b4:22:88:08:07:16:b0:05:8b:04:4e:
63:ba:0a:65:de:67:3d:83:41:30:ff:8c:74:59:15:d1:bd:40:
2e:e5:38:2d:37:29:c7:a6:a8:c0:15:cc:1b:00:72:b1:d1:e3:
b3:22:a5:9b:e0:3a:cf:79:f9:81:3f:ed:71:01:0a:8b:f5:4f:
e0:be:b0:a0:3e:d1:1c:aa:80:3a:86:0b:1c:6f:d2:7d:63:16:
3d:ce:03:13:f0:17:b4:47:f3:44:56:e5:1d:6f:70:a5:bd:d5:
21:7c:48:ef:03:6d:19:f9:89:b7:64:1f:b3:14:35:3e:e8:ee:
3f:01:50:e2:fe:e8:91:e9:ef:53:8f:98:99:a5:71:16:07:ef:
95:13:40:c1:41:74:70:f2:a0:5e:a5:ca:e6:a5:b5:92:f8:d3:
36:6a:70:e2:1d:82:2d:13:b5:a7:3b:59:b4:92:0a:71:5b:41:
44:a3:56:1a:80:f4:31:43:6f:4f:cb:f4:60:e9:95:0e:55:1f:
9c:4e:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 13:28:19 2024 by rpki-client on console-ams.rpki-client.org