Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MhfqeNnZqbMCQ_Slu7UBN9Yedh4.roa
File: MhfqeNnZqbMCQ_Slu7UBN9Yedh4.roa (raw, json)
Hash identifier: 7s4Mkb8Kwq2uc6yJUlVtMcGM6rGZVU1RgTjCZ/1MiuU=
Subject key identifier: 32:17:EA:78:D9:D9:A9:B3:02:43:F4:A5:BB:B5:01:37:D6:1E:76:1E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E82A71155DEBFD45B595AE9B78D11E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MhfqeNnZqbMCQ_Slu7UBN9Yedh4.roa
Signing time: Mon 02 Jan 2023 05:15:41 +0000
ROA not before: Mon 02 Jan 2023 05:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213316
IP address blocks: 2a10:2f01:240::/45 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Apr 2023 11:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:2a:71:15:5d:eb:fd:45:b5:95:ae:9b:78:d1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3217ea78d9d9a9b30243f4a5bbb50137d61e761e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:28:f8:8f:91:0f:e7:69:d1:1e:66:61:85:
5d:6b:76:68:b9:38:23:62:15:d5:44:19:6c:6a:b1:
8e:ea:c1:72:a4:ae:e2:7e:b8:a3:54:0a:7e:15:87:
67:9e:a6:c2:4a:c6:f1:63:43:81:bf:b7:15:32:cf:
a4:22:b8:22:e2:a8:f3:21:a9:c6:50:b7:3e:d9:02:
f9:15:b1:b4:cc:35:f0:74:a8:9d:32:09:ac:e2:b5:
05:8a:43:4d:dd:c2:9c:8e:d0:2a:4c:d9:59:8e:ad:
01:49:6b:cf:67:31:bc:c8:c1:66:80:9c:a6:22:74:
b8:bc:54:ca:89:6f:30:ae:c1:57:47:89:c5:f6:d0:
e4:36:13:ec:8f:67:25:00:8d:e8:56:f1:60:92:1d:
e9:3e:ee:a9:75:07:94:c1:3b:bc:66:31:77:13:5c:
73:ec:52:15:48:df:86:1f:20:58:30:3c:84:9b:fa:
97:6d:e5:f1:65:13:ce:87:66:21:89:0f:ea:2c:11:
0e:de:68:a2:8c:e7:39:55:ab:f7:ac:72:fa:73:cc:
4a:09:6a:15:40:6b:1a:21:fe:d4:d2:80:de:da:46:
d7:0a:8f:43:56:9a:b8:32:81:b3:77:87:8c:bd:cc:
02:99:96:9c:1d:7f:39:d1:f9:c7:be:d0:7b:98:e4:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:EA:78:D9:D9:A9:B3:02:43:F4:A5:BB:B5:01:37:D6:1E:76:1E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MhfqeNnZqbMCQ_Slu7UBN9Yedh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f01:240::/45
Signature Algorithm: sha256WithRSAEncryption
43:ec:74:e7:22:98:d4:88:2c:bb:46:62:4b:da:27:34:43:47:
da:04:46:d2:06:d8:de:25:2a:6d:cb:7e:fa:ef:4d:81:9f:6b:
2d:98:46:ef:a1:44:ae:51:50:5e:54:f6:29:da:20:0a:3d:89:
9c:c6:95:0d:40:87:86:7b:d0:71:e2:39:54:70:5f:04:d4:c4:
2f:98:02:95:c6:19:4f:ac:5e:bb:fd:d7:7f:ad:ed:bc:f5:c5:
33:0d:f3:8b:03:d8:bd:29:82:78:e8:1a:fd:ce:3a:db:07:d0:
7b:68:39:25:98:d6:f0:47:7c:57:e9:ab:cf:4d:24:ba:df:f0:
e7:b0:f9:e3:16:5d:92:d2:e7:a6:67:a5:4a:31:61:bb:93:5d:
ea:b1:b8:aa:75:0b:26:ca:27:82:6b:05:21:0e:76:cd:6a:99:
53:05:23:89:cf:37:c5:2e:08:2a:a5:51:f9:29:de:75:ed:33:
03:b5:e6:a9:bc:23:84:71:ad:d8:a8:db:cd:32:96:f5:4a:35:
f0:f0:f5:50:84:f0:1c:6c:98:c3:3a:2b:d2:48:61:3b:21:f2:
91:fb:48:ed:42:af:05:ec:4f:62:c0:c2:9c:c6:21:16:53:56:
b5:fb:84:9d:ca:11:34:4e:ad:c6:59:44:60:14:f7:d9:d0:26:
d8:25:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:30 2024 by rpki-client on console-fra.rpki-client.org