Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SLUXPbINIlQYHeSpwDZ8l98GLiY.roa
File: SLUXPbINIlQYHeSpwDZ8l98GLiY.roa (raw, json)
Hash identifier: Iwdv7z46gpAiBvMmygGk6aTKPlN5ivNC/68BIdOTous=
Subject key identifier: 48:B5:17:3D:B2:0D:22:54:18:1D:E4:A9:C0:36:7C:97:DF:06:2E:26
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCF9579DDA8F19C198565824889597
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SLUXPbINIlQYHeSpwDZ8l98GLiY.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200879
IP address blocks: 2a0e:b107:2090::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Apr 2024 13:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f9:57:9d:da:8f:19:c1:98:56:58:24:88:95:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48b5173db20d2254181de4a9c0367c97df062e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3b:5e:c0:03:1e:22:92:f4:7b:c6:c6:a8:aa:
f4:79:2e:cd:c5:1b:b6:a1:f8:1d:6a:2c:48:3f:73:
4c:22:40:c9:92:1c:f8:bd:21:c2:17:51:e1:f9:f6:
51:01:bb:aa:6a:5e:94:e7:1c:39:cf:b3:60:63:29:
06:da:7f:e5:10:b8:6c:eb:19:dc:a5:f8:7b:86:64:
90:40:86:e0:95:33:34:c2:13:ee:79:67:c0:49:1d:
ff:a5:1e:71:11:89:84:00:84:bc:14:a3:b2:d0:c5:
47:a9:b3:17:8a:75:94:e1:09:36:12:a6:4e:71:85:
dc:9d:d5:0e:12:42:6b:5f:6e:ad:85:4a:3b:f8:91:
8f:81:8d:4b:f6:ef:53:62:87:51:2c:04:d6:96:2f:
50:06:4c:26:1a:7d:72:e0:eb:5c:af:aa:a7:cf:b1:
76:a1:ac:f2:94:54:50:6e:43:2d:bf:8f:09:fd:69:
47:f8:5f:25:4a:12:87:a8:43:38:3a:26:5b:44:00:
0b:b7:d3:75:06:6e:2d:20:a4:2b:d2:c1:88:20:02:
6f:34:91:eb:79:ca:31:d5:fa:4d:82:31:f7:87:1b:
3a:76:9b:ab:91:89:82:9d:e8:8e:b8:e6:07:18:3f:
89:d7:85:f1:3a:70:d6:32:7a:b0:1e:d2:7f:15:90:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:17:3D:B2:0D:22:54:18:1D:E4:A9:C0:36:7C:97:DF:06:2E:26
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SLUXPbINIlQYHeSpwDZ8l98GLiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2090::/48
Signature Algorithm: sha256WithRSAEncryption
ca:29:76:d7:42:23:12:d7:38:74:11:4b:41:2c:f3:3e:b5:0e:
b3:00:09:6b:27:51:eb:42:32:55:3a:27:8a:07:06:6a:3c:80:
a9:b2:75:4f:5b:b2:93:f7:bd:06:f7:79:63:38:a8:08:b9:ea:
1c:57:c0:a2:26:e8:e4:1d:f9:df:20:51:4a:2f:2d:9e:d0:3d:
39:5c:fa:a9:ea:81:9b:5d:ee:d3:f9:79:11:e1:8e:62:ba:d5:
e3:b2:7a:3d:4e:e4:6b:39:2c:7d:5c:7c:a6:86:01:55:ad:23:
c0:86:01:78:96:25:d3:b8:20:71:7c:4b:35:a6:dd:3b:96:6d:
3a:3b:b2:af:3f:12:07:25:49:03:67:0d:f9:52:72:c3:3b:74:
27:82:8c:ba:21:c8:fb:33:3f:97:7c:27:36:5a:d9:89:b5:bd:
c5:f1:63:ec:0c:59:c1:3f:11:24:48:b9:0b:43:5e:e0:82:cc:
81:d7:13:df:a4:db:0b:ef:09:f5:a9:6a:ef:f5:fa:69:5f:c0:
56:ec:42:9b:d0:70:7b:b8:c9:7c:3c:d6:eb:fc:e8:dd:26:03:
06:3d:db:5b:ae:6d:49:9e:2b:fd:5f:de:94:dc:83:95:ff:71:
7d:60:36:a4:8b:69:1e:37:07:2e:48:7e:30:09:d8:a0:ef:77:
e6:45:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 17:28:23 2024 by rpki-client on console-fra.rpki-client.org