Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R4f5YuOpWMAhwqT9GdYbBvwH4lA.roa
File: R4f5YuOpWMAhwqT9GdYbBvwH4lA.roa (raw, json)
Hash identifier: wS3lbcIxTNqGU2dkfTxKfPth9le3M8poLPGSQSWnaJ8=
Subject key identifier: 47:87:F9:62:E3:A9:58:C0:21:C2:A4:FD:19:D6:1B:06:FC:07:E2:50
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A7A3030014D71F4B83A7C29EA564512E7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R4f5YuOpWMAhwqT9GdYbBvwH4lA.roa
Signing time: Sat 09 Sep 2023 13:44:52 +0000
ROA not before: Sat 09 Sep 2023 13:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 2a0e:b107:365::/48 maxlen: 48
2a0e:b107:f50::/44 maxlen: 48
2a0e:b107:367::/48 maxlen: 48
2a0e:b107:364::/48 maxlen: 48
2a0e:b107:361::/48 maxlen: 48
2a0e:b107:366::/48 maxlen: 48
2a0e:b107:363::/48 maxlen: 48
2a0e:97c0:aba::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 09 Sep 2023 17:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7a:30:30:01:4d:71:f4:b8:3a:7c:29:ea:56:45:12:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 9 13:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4787f962e3a958c021c2a4fd19d61b06fc07e250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:74:16:e7:5a:c4:5e:b6:bc:d8:be:ae:94:
a9:fe:66:77:ad:e0:c0:6a:9b:5e:cf:b8:e9:9d:16:
10:50:59:6f:ec:28:f6:92:f9:5b:47:8d:f2:58:d5:
7e:27:8c:e5:79:cc:a8:51:f5:b9:5b:dd:86:33:bd:
92:d0:bf:0f:fa:f0:70:fb:48:7b:1e:83:8b:4e:85:
73:88:a1:b3:d4:05:89:55:da:66:c9:e0:f5:55:5f:
e8:a1:1c:db:60:0c:63:1a:b4:cd:f8:4f:fc:b3:92:
19:42:45:65:85:d8:53:3a:83:5b:ff:d0:47:eb:f3:
84:86:95:d6:3c:d0:5b:18:de:43:88:ef:76:6e:17:
1e:2e:98:fc:7c:ca:44:0c:6b:6e:48:b1:98:e4:35:
10:48:5c:ee:9e:ab:b1:74:2d:4f:1d:0f:6f:97:84:
1c:00:9e:26:82:c3:cd:d7:39:be:ee:05:ee:8c:22:
c2:88:d0:9d:ba:1b:66:d2:f9:7b:bd:9a:b5:87:83:
4c:17:ca:b5:3a:f7:10:bc:e7:27:37:de:dd:b7:0b:
ba:ec:5b:80:0d:87:29:90:6d:7f:75:0b:f9:7b:07:
1f:36:60:0f:cc:3d:80:b6:f0:f1:79:d8:17:1a:65:
d3:e9:3d:ce:dd:d6:61:33:ac:77:7e:9c:aa:74:5e:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:F9:62:E3:A9:58:C0:21:C2:A4:FD:19:D6:1B:06:FC:07:E2:50
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R4f5YuOpWMAhwqT9GdYbBvwH4lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:aba::/48
2a0e:b107:361::/48
2a0e:b107:363::-2a0e:b107:367:ffff:ffff:ffff:ffff:ffff
2a0e:b107:f50::/44
Signature Algorithm: sha256WithRSAEncryption
c2:69:e6:d6:ed:48:e0:bb:2b:bd:50:e8:5b:2d:1a:d5:2a:b5:
95:db:b3:14:a5:b2:7d:5e:2a:9c:57:ed:10:ca:04:06:75:26:
65:4b:a2:99:77:e2:72:90:9f:61:8a:f4:d4:3f:5c:11:0b:f8:
f5:11:e9:a0:d0:2a:dc:18:7a:4f:e2:b7:b8:f4:fe:62:41:5b:
30:de:91:f2:e5:dd:d9:66:35:ca:0e:a9:43:55:c7:7d:9b:d1:
d6:2a:f5:63:66:ee:b2:73:2a:a5:bc:7d:c8:9d:81:9e:cb:69:
38:b1:51:55:50:c1:42:f5:64:92:49:ec:9a:e6:74:9f:30:ac:
fa:a0:fb:9f:80:05:6d:75:c8:36:44:62:2e:42:df:bc:2b:6a:
fb:ab:41:47:cb:b5:83:82:8c:87:cb:c3:5a:eb:d3:eb:39:6a:
52:ba:89:35:01:a5:9f:cb:96:86:62:9b:60:27:5f:cd:b9:c3:
b5:e8:98:e1:59:7e:1f:66:20:ac:52:3b:9a:66:7f:cf:5f:6c:
94:5a:e3:3c:0d:00:5d:c0:20:7d:72:09:a9:17:7f:77:20:33:
23:a7:87:fb:ea:5d:23:f7:e3:43:43:ac:db:c8:fa:44:99:c2:
40:05:83:ad:1e:78:6f:14:1c:a7:6b:0c:21:9c:6d:b9:59:e8:
5d:03:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org