Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N8tsYdO5YIf8mqyLOfYGC2cD66k.roa
File: N8tsYdO5YIf8mqyLOfYGC2cD66k.roa (raw, json)
Hash identifier: qC4yfxdbH5GKPp0yGixUwnky/NCiJDNph3wCoAbIDQo=
Subject key identifier: 37:CB:6C:61:D3:B9:60:87:FC:9A:AC:8B:39:F6:06:0B:67:03:EB:A9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F95CD38CD07D89C7604C238AEF83EC7EB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N8tsYdO5YIf8mqyLOfYGC2cD66k.roa
Signing time: Mon 20 May 2024 11:40:05 +0000
ROA not before: Mon 20 May 2024 11:40:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202941
IP address blocks: 2a10:2f00:187::/48 maxlen: 48
2a10:ccc0:8cc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 20 May 2024 15:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:cd:38:cd:07:d8:9c:76:04:c2:38:ae:f8:3e:c7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 20 11:40:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37cb6c61d3b96087fc9aac8b39f6060b6703eba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e6:9a:5f:c9:6d:d8:d9:62:05:42:1f:17:0e:
71:ca:bf:ab:99:f3:17:46:05:d8:d7:bf:74:b9:29:
64:98:56:f0:01:0f:29:95:a5:22:ab:be:ce:c0:7e:
07:b1:2f:99:65:9a:75:7b:b6:e6:a7:f4:45:f3:ac:
8d:90:93:ab:30:36:b0:e5:aa:74:3e:2e:3a:be:e0:
fe:8d:dc:74:11:ca:ef:28:72:50:14:a6:0a:c2:de:
bd:8d:36:57:db:d0:5e:5f:79:31:22:3f:fa:d1:6c:
82:25:d5:d0:81:fc:d6:75:c0:60:b4:4b:c3:f4:bd:
8f:56:90:d8:4f:8a:2f:85:b4:6e:61:65:95:e0:38:
b1:57:85:ed:4c:c4:83:8f:cf:38:8f:8d:58:d1:1e:
8c:3d:33:ae:6d:f2:c3:a7:3a:53:c9:3d:5c:d3:27:
81:d6:56:02:2c:e4:3f:54:ea:e1:ed:7e:3d:dd:7d:
bd:9a:cf:2f:85:36:81:18:ae:c8:30:e3:2e:15:cb:
92:ae:48:76:02:dc:e1:e1:75:c6:f6:50:ec:bd:2e:
1c:04:59:9b:90:6f:09:c6:66:56:6c:20:6e:18:9e:
58:5b:59:6c:83:0d:c3:30:b7:fd:c5:6f:c4:54:20:
e8:12:09:69:11:1a:3b:cf:86:0b:3f:cd:45:e4:6e:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CB:6C:61:D3:B9:60:87:FC:9A:AC:8B:39:F6:06:0B:67:03:EB:A9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N8tsYdO5YIf8mqyLOfYGC2cD66k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:187::/48
2a10:ccc0:8cc::/48
Signature Algorithm: sha256WithRSAEncryption
06:51:61:7b:f9:6e:c4:ea:63:86:59:80:3e:64:82:a9:03:c4:
5b:57:7f:4d:45:eb:73:4f:69:88:ff:a4:eb:ff:e2:e1:6e:c0:
a7:7e:d8:76:37:bc:e4:94:ed:54:19:6a:6b:c7:57:d9:33:cb:
c8:f6:e5:52:11:41:56:c2:5d:9b:d2:f6:d2:4d:03:34:ee:82:
ac:ac:4a:ee:11:e0:7c:c0:96:94:2d:b7:86:50:47:88:0e:ce:
d2:45:f4:a6:91:20:cb:a8:3a:a4:7d:c7:8e:9a:60:79:23:e6:
17:b5:14:f9:34:af:26:92:23:95:61:cd:78:55:bb:d8:40:92:
7e:47:6a:67:c6:b6:ac:fc:60:37:f6:df:84:66:eb:b7:f1:da:
7e:33:e4:54:76:16:15:b8:1f:69:e5:c6:f7:cd:3c:f8:03:5d:
38:e8:ee:99:20:78:c1:6d:93:a2:45:d7:69:38:23:a3:90:96:
31:37:60:cb:6e:0b:f4:3a:3f:97:c3:12:cf:16:64:45:d3:86:
db:4f:7a:f3:cd:de:38:4b:e4:d9:a4:84:e5:6f:3c:48:55:a0:
ae:ef:23:dc:b6:2a:7f:0f:ed:03:cc:40:ab:56:36:72:89:c7:
52:6b:2d:a1:d9:4b:51:5d:80:5d:4f:c4:d5:21:49:40:83:8b:
3f:c5:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:01 2024 by rpki-client on console-ams.rpki-client.org