Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rjh7zv6fOe5CDz1XmH0ddBs-3RE.roa
File: Rjh7zv6fOe5CDz1XmH0ddBs-3RE.roa (raw, json)
Hash identifier: abfJDDnwBTRVkWBlm9o3kEvgqiKHzpQi+3I0eZUFus8=
Subject key identifier: 46:38:7B:CE:FE:9F:39:EE:42:0F:3D:57:98:7D:1D:74:1B:3E:DD:11
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185DE40AA8FC83A9BF1A6D2DEB175A598BC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rjh7zv6fOe5CDz1XmH0ddBs-3RE.roa
Signing time: Mon 23 Jan 2023 10:50:57 +0000
ROA not before: Mon 23 Jan 2023 10:50:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59922
IP address blocks: 2a10:cc44:112::/48 maxlen: 48
2a10:cc44:110::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Jan 2023 16:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:40:aa:8f:c8:3a:9b:f1:a6:d2:de:b1:75:a5:98:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 10:50:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46387bcefe9f39ee420f3d57987d1d741b3edd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:f7:8e:48:51:cb:2e:69:bc:c3:f1:15:c0:
ef:b2:38:7d:a9:8e:33:9d:f4:d5:0b:8c:7c:08:75:
7b:fd:6e:97:41:5c:de:72:d0:9e:6d:7f:56:6e:1a:
e3:e4:d8:e4:d5:bf:a2:0d:0f:a4:b2:28:bc:6e:bd:
e3:b6:2b:24:0f:54:44:b7:a2:16:d1:c0:d6:99:06:
09:47:60:3e:6c:4a:34:06:59:1e:21:bb:94:a5:b5:
37:27:77:d6:b7:43:61:38:58:4f:04:16:c0:05:89:
6e:ee:34:04:51:c5:51:b8:f5:d9:08:57:8d:29:0a:
d1:a5:40:f2:0d:ee:55:d8:08:0f:f3:d3:64:bd:61:
54:20:ab:f0:bb:15:05:97:a5:3e:30:c3:ae:a3:73:
26:01:9b:c2:07:fe:cf:8d:f9:3f:1c:8c:29:60:87:
cb:a1:e4:5b:b3:38:82:af:44:22:78:f6:ce:e5:57:
08:b6:26:05:10:90:4d:2c:da:0d:25:ea:2a:23:3d:
38:f5:8c:5f:85:73:d0:5e:5c:dd:9a:bd:c9:9d:05:
c4:fc:3c:8f:91:da:9b:a7:2f:26:e3:39:72:47:28:
4b:4c:49:fd:69:9d:a8:6b:7d:1d:a6:8a:89:44:16:
b2:cf:c7:0e:67:f8:53:4e:44:41:b5:cd:e1:83:bf:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:38:7B:CE:FE:9F:39:EE:42:0F:3D:57:98:7D:1D:74:1B:3E:DD:11
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rjh7zv6fOe5CDz1XmH0ddBs-3RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:110::/48
2a10:cc44:112::/48
Signature Algorithm: sha256WithRSAEncryption
c2:aa:aa:10:38:93:61:76:d0:ad:d3:dc:70:c4:c6:64:82:88:
a4:c4:e5:77:b0:f9:ec:b0:05:9f:93:73:1d:e4:6d:03:e1:c4:
13:ca:29:59:47:28:5a:ad:a0:6e:79:aa:18:22:d0:7a:3d:44:
b8:0d:72:99:8a:68:be:4f:09:fc:ce:54:66:17:fd:45:ae:29:
e1:21:dd:7b:40:e1:b1:92:3b:44:14:6b:c0:9e:28:51:76:72:
ca:2e:d8:93:62:a2:62:47:98:c2:65:5a:70:57:1d:69:95:a6:
fe:df:66:ad:15:49:51:37:89:78:11:75:00:a6:92:53:a7:a5:
5a:34:d3:2f:7a:66:50:03:15:46:08:1b:00:f9:13:3e:2b:35:
4c:4e:0f:19:9b:46:0b:b6:b4:e1:9c:69:83:d7:e8:07:99:3a:
61:cc:e2:4c:a6:f7:f8:df:44:0b:02:e3:5d:03:85:fc:72:79:
cc:33:0d:0c:76:9d:0e:ac:79:d5:66:be:a5:35:76:83:d6:1f:
a4:80:f4:e9:3d:21:2c:da:eb:60:73:58:3b:5a:39:0c:c6:e6:
d8:77:85:7d:a2:d4:9b:b7:30:6a:0c:b3:57:73:9b:a4:8e:c3:
9a:0c:47:9b:82:40:e8:70:4e:6b:b1:b2:99:20:da:d6:90:c9:
2b:b8:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org