Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PsdTTXU2tO8RWcwDBIP0g2V8RH8.roa
File: PsdTTXU2tO8RWcwDBIP0g2V8RH8.roa (raw, json)
Hash identifier: dEun06Yhrk5pUI8XWGNYA+K+ZxIvX1jRpxVXh2L5xKM=
Subject key identifier: 3E:C7:53:4D:75:36:B4:EF:11:59:CC:03:04:83:F4:83:65:7C:44:7F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48B138D71C12E342F33DCCC5015368E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PsdTTXU2tO8RWcwDBIP0g2V8RH8.roa
Signing time: Tue 24 Jan 2023 16:09:57 +0000
ROA not before: Tue 24 Jan 2023 16:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400542
IP address blocks: 2a0e:97c0:a46::/48 maxlen: 48
2a0e:b107:b11::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 Mar 2023 02:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8b:13:8d:71:c1:2e:34:2f:33:dc:cc:50:15:36:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ec7534d7536b4ef1159cc030483f483657c447f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:c6:43:8c:da:70:d3:da:7f:ce:db:24:d8:
40:cc:44:a3:75:0d:fe:69:df:8a:e1:d6:f8:f7:9c:
be:fa:a8:80:aa:62:14:c8:89:f8:1c:3c:ad:31:16:
1c:33:3b:a6:e5:be:f4:b5:2a:2d:c9:c7:dc:51:df:
1e:a7:18:29:97:0a:84:1d:53:02:0f:26:fa:50:28:
7b:27:62:a5:86:dc:8d:b0:bd:c4:0a:3c:43:50:84:
18:99:26:c9:bf:3d:27:1a:b2:4d:ef:91:f6:fd:fa:
df:56:da:cd:23:a4:c8:d1:c3:49:73:3f:89:a0:31:
b6:a1:78:8d:fb:a1:3b:85:45:09:59:29:31:14:a0:
43:f7:f5:3e:81:2c:c6:c5:fb:e3:3f:7f:81:bb:ba:
f8:df:56:57:91:df:47:1b:2b:87:20:fc:ac:8d:a7:
55:49:62:1e:68:05:cf:67:91:73:d1:e7:85:86:ff:
cd:5a:cf:fc:c2:38:60:33:6b:55:40:a7:9b:a1:ce:
63:d5:ee:73:a6:58:23:d4:83:c2:b2:9c:0b:3f:89:
d3:fc:86:40:57:88:94:a8:ce:ed:b6:56:7a:be:94:
92:51:93:28:59:c6:38:46:62:74:32:3a:d3:3d:67:
d1:73:4b:1e:e5:74:32:83:8f:dc:56:61:6b:d6:0d:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C7:53:4D:75:36:B4:EF:11:59:CC:03:04:83:F4:83:65:7C:44:7F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PsdTTXU2tO8RWcwDBIP0g2V8RH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a46::/48
2a0e:b107:b11::/48
Signature Algorithm: sha256WithRSAEncryption
a1:19:60:c4:48:64:a5:fe:4a:dd:b1:8d:cf:b9:86:c2:7a:c2:
88:51:0c:72:48:9e:01:3f:94:62:fc:12:da:36:88:08:69:51:
87:34:1c:d5:aa:39:13:2c:e0:71:b0:e0:65:cc:1c:fd:60:f8:
ae:d3:85:75:ae:d7:ad:35:de:aa:7e:c9:ea:62:59:4c:3f:80:
3f:62:1e:56:a3:f2:32:2a:d8:f9:28:95:48:ab:a4:d2:ca:21:
a1:6c:fe:83:de:7f:0f:c6:30:b7:44:7e:82:0e:49:0b:f5:e4:
41:d9:ee:59:5a:05:9b:83:7a:00:df:6d:a6:32:a2:4b:7e:bc:
cd:da:bc:c3:d4:1c:67:0b:af:54:f2:21:19:12:94:98:b5:d9:
8c:18:7d:d4:a5:a7:b7:18:ec:9e:01:22:00:cb:07:33:0f:f9:
40:6b:fa:f6:d2:08:2d:47:f5:25:86:c7:ee:ea:06:1e:8f:89:
08:9c:20:19:9a:36:fc:98:c2:5b:ee:94:3c:97:a3:52:37:70:
c5:b2:7b:04:98:d1:41:6a:88:3c:1b:b2:9d:0d:cb:f2:22:8a:
34:45:0d:fb:26:77:e1:08:d1:c6:6c:66:bb:0d:9a:0c:8e:b2:
58:d4:ae:49:5b:cc:a1:59:83:9b:12:d9:73:33:ce:1c:cb:16:
97:4f:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:02 2024 by rpki-client on console-ams.rpki-client.org