Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M4tQLJG3SeZDpu_YxxR28xAEz2U.roa
File: M4tQLJG3SeZDpu_YxxR28xAEz2U.roa (raw, json)
Hash identifier: QL8rlCK/lV1ppvJ8ghsIWDmv/MwrldXOahtLP6kRdC0=
Subject key identifier: 33:8B:50:2C:91:B7:49:E6:43:A6:EF:D8:C7:14:76:F3:10:04:CF:65
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD4C05C8E775DB524F5489FD981C72
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M4tQLJG3SeZDpu_YxxR28xAEz2U.roa
Signing time: Tue 02 Jan 2024 10:34:35 +0000
ROA not before: Tue 02 Jan 2024 10:34:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213105
IP address blocks: 2a0e:b107:a60::/44 maxlen: 48
2a0e:b107:10f0::/44 maxlen: 48
2a10:2f00:138::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Jan 2024 16:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:4c:05:c8:e7:75:db:52:4f:54:89:fd:98:1c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=338b502c91b749e643a6efd8c71476f31004cf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:94:25:6b:ee:db:dd:72:fc:6a:c5:83:94:
90:d7:00:dc:92:46:57:f5:1d:9c:ef:76:1b:ac:d3:
bd:d6:1b:cb:63:7b:30:b0:c0:90:52:c9:cb:34:d2:
71:dc:bb:0a:7f:10:16:c9:7a:90:35:a8:94:04:19:
b6:b7:82:00:0c:3f:7d:d4:83:1c:ed:01:31:5d:06:
c2:b9:c7:fa:b0:61:1a:56:11:89:01:3f:f4:90:eb:
87:ef:f5:c5:4a:75:59:c3:b9:6a:c1:b4:26:02:33:
1b:5c:1e:1b:63:44:a5:60:ee:72:cc:88:3a:85:7d:
f5:3f:80:91:7e:a6:e6:d0:c3:dd:bd:7b:69:c5:cb:
3f:d0:39:e4:63:38:50:4a:02:02:dc:a2:16:9e:67:
1d:7f:32:60:ec:c7:9c:37:81:85:45:b2:2c:a1:f8:
4a:02:4c:e6:9d:c4:1f:b6:e1:07:49:c7:fc:47:e0:
34:2a:86:64:57:bd:29:b7:88:99:8a:cc:5b:a5:ed:
39:83:58:5c:50:2b:72:71:b5:f2:76:fc:b2:90:f9:
91:4d:15:87:9d:5d:e2:42:91:90:3d:e0:68:d8:c8:
15:0a:b8:45:da:56:da:ba:0b:f7:02:8f:0b:35:28:
ae:e1:e3:64:08:61:a5:e6:e3:97:33:09:cf:66:9a:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8B:50:2C:91:B7:49:E6:43:A6:EF:D8:C7:14:76:F3:10:04:CF:65
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M4tQLJG3SeZDpu_YxxR28xAEz2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:a60::/44
2a0e:b107:10f0::/44
2a10:2f00:138::/48
Signature Algorithm: sha256WithRSAEncryption
3b:0a:de:b5:ec:27:8e:d2:31:5f:57:40:e8:a5:e7:09:0c:53:
3d:dd:80:0c:9d:e2:a8:9c:77:16:61:6d:25:c2:1c:21:cf:99:
a3:21:b7:d2:8e:1e:7f:61:40:05:9d:cc:9c:d4:a4:fb:67:2d:
23:ce:61:7a:69:9f:97:bc:b2:43:cd:a8:d3:0a:b2:0b:9f:61:
de:14:03:de:c0:65:28:ad:b1:6c:12:27:a9:94:68:30:99:59:
cd:05:6b:44:5a:44:1b:29:60:8a:5c:19:a5:0b:e3:fc:e3:50:
d0:45:08:47:44:ce:5a:e4:3a:99:f4:f2:1e:54:5e:03:0c:45:
d4:be:34:30:d7:46:66:78:8b:06:1f:b4:4e:cc:8d:ba:c9:6c:
28:76:a5:5a:59:5d:c8:01:63:18:40:ff:55:6d:86:7d:87:19:
a4:65:9b:40:52:7d:79:bf:0f:ae:1b:38:17:75:f8:21:62:53:
38:d1:d0:da:c6:4e:a6:3e:b3:7d:62:2c:b2:44:f1:f6:94:97:
9c:11:67:c5:a6:f8:1a:b5:ff:37:77:8d:07:d9:09:3d:92:94:
81:27:42:99:b4:bf:86:1f:3b:71:37:35:9a:f7:01:c6:78:88:
8f:6a:08:fa:4b:76:1d:ff:e5:98:8a:6e:d4:bf:66:f1:77:b9:
41:a4:b6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 17:31:00 2024 by rpki-client on console-fra.rpki-client.org