Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RaOrMCiTy_8GxuIda9FOYfJ13WE.roa
File: RaOrMCiTy_8GxuIda9FOYfJ13WE.roa (raw, json)
Hash identifier: uMGRz7ENPVYqhm4OcVt/j2BOIoDPGRCIZmnaeKNEy4Q=
Subject key identifier: 45:A3:AB:30:28:93:CB:FF:06:C6:E2:1D:6B:D1:4E:61:F2:75:DD:61
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A56B39805943DF1B23B3974B4B262DC3C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RaOrMCiTy_8GxuIda9FOYfJ13WE.roa
Signing time: Sat 02 Sep 2023 16:22:05 +0000
ROA not before: Sat 02 Sep 2023 16:22:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43607
IP address blocks: 2a0e:b107:27d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 15 Sep 2023 20:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:56:b3:98:05:94:3d:f1:b2:3b:39:74:b4:b2:62:dc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 2 16:22:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45a3ab302893cbff06c6e21d6bd14e61f275dd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:2e:7c:0a:ba:a7:7d:d7:1b:f1:a0:75:aa:
6e:c6:bb:22:c5:7d:e6:e0:6f:73:a5:c4:cc:1d:5a:
47:9d:a1:ea:31:48:66:97:2e:d5:e3:bb:80:30:79:
81:25:f2:c3:67:1b:ae:80:30:a2:2e:cc:64:03:38:
e0:a8:50:d6:42:35:42:68:79:d0:25:2c:e7:13:ea:
c9:d4:65:40:5d:20:78:24:79:c2:97:ce:9d:eb:98:
93:ef:bb:ad:b4:6f:62:0c:f9:0c:59:f6:91:d2:b5:
67:a6:6b:31:f5:34:43:bc:a8:65:2a:7e:2a:39:4e:
e0:e0:c8:56:3f:9a:0b:b1:4e:26:8d:47:0d:f7:bf:
ea:0e:2f:dd:f0:01:ab:fe:b5:c9:26:75:f0:8f:e3:
d6:15:e8:17:41:4b:df:70:90:f2:c8:7d:dd:4b:18:
3e:fe:70:db:ba:f6:d8:b9:f1:2e:e4:b5:bc:d7:9e:
89:4a:2d:6c:32:55:e5:8a:64:b2:78:08:cc:4e:01:
ff:18:d6:0e:9d:11:40:f1:4c:30:49:bf:06:7e:90:
97:f2:32:d4:d6:22:7a:85:d4:a6:c8:c3:b7:e7:0b:
21:67:33:80:90:7b:7e:de:f4:ad:e1:46:b7:bb:1c:
45:54:51:60:7a:d5:55:89:1e:54:a3:a7:ef:28:22:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A3:AB:30:28:93:CB:FF:06:C6:E2:1D:6B:D1:4E:61:F2:75:DD:61
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RaOrMCiTy_8GxuIda9FOYfJ13WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27d0::/48
Signature Algorithm: sha256WithRSAEncryption
6c:45:e6:83:b7:b9:93:03:67:e2:a0:7d:75:e5:c6:38:db:6e:
c9:66:d3:8b:61:f5:0d:52:14:21:c5:fe:e1:2a:24:7b:8b:86:
1e:87:cf:74:ab:60:c4:b0:e3:69:a3:c9:e6:8d:c5:cb:70:7d:
86:a4:d6:f8:ba:e0:07:06:03:05:06:7f:f1:8b:5c:71:75:55:
ff:64:68:e3:ab:a5:e5:60:bf:0b:bb:f7:a3:c7:e7:2b:8f:8a:
6e:cc:4d:46:8d:79:61:77:ec:d6:ce:70:e5:c2:16:ba:68:39:
63:db:14:e7:31:0b:6a:19:cd:53:72:e8:90:a3:e2:14:77:82:
74:82:ab:13:82:eb:03:ac:20:6f:81:4a:95:eb:be:d0:94:60:
e8:1d:64:c3:ba:69:20:d1:74:5d:7f:f6:45:54:da:f6:3e:2d:
4a:89:8e:5d:5a:39:c8:e8:3c:4f:7a:6b:e5:c3:ce:67:49:22:
4e:a6:d7:89:82:3f:e8:13:c8:2a:7a:13:8a:f5:51:46:19:31:
eb:69:c8:9e:93:6a:d2:fd:ff:9b:8b:b8:04:bd:f3:1a:79:4c:
13:9a:f7:6b:e0:11:4c:c0:67:90:4f:7c:9d:4a:f0:bc:e3:a5:
be:d3:12:13:ea:2f:0a:68:c0:17:cd:42:fd:c4:60:2a:06:1f:
40:7e:f4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:03 2024 by rpki-client on console-ams.rpki-client.org