Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PxCBlMwJLJkZYE8-nOf8ZaXWV5E.roa
File: PxCBlMwJLJkZYE8-nOf8ZaXWV5E.roa (raw, json)
Hash identifier: ZbcueyJsvaq2GEgWYVt0fhaNtrZAif5Q1tkSvLcC57A=
Subject key identifier: 3F:10:81:94:CC:09:2C:99:19:60:4F:3E:9C:E7:FC:65:A5:D6:57:91
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7C44165545A5A9B27FFBCB52A8C78
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PxCBlMwJLJkZYE8-nOf8ZaXWV5E.roa
Signing time: Mon 02 Jan 2023 05:15:15 +0000
ROA not before: Mon 02 Jan 2023 05:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205398
IP address blocks: 2a0e:b107:19c8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:c4:41:65:54:5a:5a:9b:27:ff:bc:b5:2a:8c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f108194cc092c9919604f3e9ce7fc65a5d65791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:ef:c2:55:b9:f8:5b:1d:eb:9e:b6:9f:b1:
0e:ff:7b:a9:d6:e5:b4:4d:71:ff:01:4b:a6:37:76:
22:c2:42:e4:3c:c5:ff:b5:00:17:5d:0f:44:18:45:
78:45:4d:6b:80:a3:0a:ab:32:1a:a2:57:f0:b9:8f:
a4:e9:ba:5a:29:00:3b:93:2b:62:79:dd:8d:cc:7b:
e1:e1:2e:35:9a:69:65:14:f2:c3:96:56:b2:10:2c:
d0:39:bd:f9:03:50:35:bc:65:ac:71:cb:4b:0a:0c:
bf:b1:29:5f:fa:e0:c4:57:60:0f:c7:d3:af:05:1b:
62:b7:a3:dd:4f:73:88:e1:a0:b3:88:c1:d8:80:06:
a8:e9:e9:71:cc:11:cd:76:f0:ac:eb:41:d2:ec:bc:
00:37:8d:10:44:7c:cc:da:84:cb:7e:33:e1:ef:42:
3e:1d:23:17:1a:45:de:bb:8f:5b:b7:d0:97:9c:80:
6d:ed:2b:31:d2:6a:96:17:07:19:04:ef:59:9d:5a:
ba:93:01:42:57:04:5c:b5:4f:65:60:97:d7:87:bb:
ff:90:88:15:79:e3:1d:21:5d:36:2c:10:ad:80:7c:
65:7c:ee:80:a7:a6:cc:8a:8f:94:50:68:27:1b:64:
ce:18:29:c9:97:f4:26:1b:48:b9:b6:bb:57:db:cc:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:81:94:CC:09:2C:99:19:60:4F:3E:9C:E7:FC:65:A5:D6:57:91
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PxCBlMwJLJkZYE8-nOf8ZaXWV5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19c8::/48
Signature Algorithm: sha256WithRSAEncryption
26:d1:7a:73:b3:7c:a1:7a:68:15:8d:ec:88:d0:3b:5c:ae:68:
78:0a:be:d8:e8:0f:2a:da:08:a3:3a:53:3c:6e:ff:2e:f1:5a:
0e:45:95:c3:f0:80:10:91:86:5c:c5:50:42:33:de:26:33:1e:
01:58:1e:e5:e0:be:59:2e:fb:9b:1c:f4:6c:7e:5f:26:cd:75:
56:b7:9f:cb:22:1c:49:08:09:18:df:1f:7b:1d:4b:6a:76:28:
98:66:f1:6c:8b:ec:bf:a9:a0:cb:63:f9:f5:85:be:43:6e:8e:
1c:99:7e:1f:91:74:d0:a1:4f:d9:6d:88:1d:a8:9d:74:3d:04:
80:85:82:80:ff:01:ee:f5:e9:bc:bf:91:11:2c:95:05:d1:6b:
a8:36:2d:74:e0:fe:a8:4d:ac:71:99:c9:4a:09:7d:51:ff:13:
32:60:87:94:60:13:c7:58:f9:6f:c3:f6:61:83:d6:62:fb:3f:
95:a7:9f:f6:73:a0:e0:34:6d:55:c8:c4:92:2b:3f:b2:25:ad:
51:2b:6b:40:77:08:f0:20:c9:35:53:1c:05:01:03:54:10:38:
9d:c2:56:4f:41:f4:35:46:de:c9:a1:75:d0:a8:3d:76:af:98:
f8:69:c7:37:d8:4f:e2:69:ed:a3:a2:fe:6b:5d:5f:e4:fd:f9:
25:c2:5b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org