Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SbyEHWc_o7AreG1i5rBFa9NOlC0.roa
File: SbyEHWc_o7AreG1i5rBFa9NOlC0.roa (raw, json)
Hash identifier: lmWE9IQwUWfmCiGEzB3ssKwBBDRn64ttzehAkYiupHM=
Subject key identifier: 49:BC:84:1D:67:3F:A3:B0:2B:78:6D:62:E6:B0:45:6B:D3:4E:94:2D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E78F49817B08EC12F51AA02A46B7B3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SbyEHWc_o7AreG1i5rBFa9NOlC0.roa
Signing time: Mon 02 Jan 2023 05:15:01 +0000
ROA not before: Mon 02 Jan 2023 05:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134478
IP address blocks: 2a0e:b107:ea2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:8f:49:81:7b:08:ec:12:f5:1a:a0:2a:46:b7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49bc841d673fa3b02b786d62e6b0456bd34e942d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:2b:05:f2:51:c0:6b:27:bf:23:2c:5e:53:
1d:08:70:9b:81:f3:9c:a8:c4:85:e6:e2:ef:09:f3:
0a:23:8f:a0:37:82:dd:58:25:5c:ab:2f:48:86:3f:
59:b3:50:19:18:46:51:7f:ce:04:b4:e1:de:0a:3a:
67:b9:e4:e9:06:1c:66:be:6a:dc:98:63:8f:41:7f:
3d:17:37:e7:96:1f:bb:0a:b2:1a:4d:23:b2:bd:13:
dc:23:49:e8:dc:40:8c:70:03:3b:35:05:2b:62:76:
f3:61:89:f1:ff:50:75:61:10:4b:c6:74:9d:3a:2e:
2a:6e:9e:c5:6e:d1:0e:0b:20:cc:91:6f:f1:1c:9e:
54:c0:dc:8e:39:16:2b:c4:8b:23:7e:bb:9b:8b:ab:
21:ca:fd:85:b5:89:ad:02:98:6c:88:44:b8:6f:a4:
ae:6a:49:4d:86:c4:2e:f2:61:ec:a5:98:cc:48:ba:
02:95:5f:56:ab:7a:10:41:40:c8:67:83:de:9a:f8:
ef:e9:95:00:e0:a0:00:14:d9:1a:42:2a:c5:19:ac:
37:04:a6:41:bb:18:bb:ec:8e:80:89:90:ba:f0:6a:
f5:69:e9:a0:62:01:74:60:02:7e:b5:7a:84:9e:f3:
ed:d1:4c:d2:fe:6e:5d:dd:17:dc:5e:66:a5:a2:ae:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BC:84:1D:67:3F:A3:B0:2B:78:6D:62:E6:B0:45:6B:D3:4E:94:2D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SbyEHWc_o7AreG1i5rBFa9NOlC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ea2::/48
Signature Algorithm: sha256WithRSAEncryption
12:c1:bc:c5:e5:f0:06:40:41:cb:69:39:6e:50:37:df:50:20:
b5:89:19:a4:05:56:03:54:24:1f:4d:98:64:03:ac:ad:ee:13:
b6:c4:a3:57:ed:ec:5e:5e:8f:7c:fa:fa:29:d0:5b:64:8a:9c:
5b:1b:37:bd:13:44:04:b5:36:74:c1:84:76:f8:d2:4e:2a:7a:
2a:19:00:a1:32:6f:83:94:01:65:57:46:7f:fd:9f:3a:49:57:
58:dd:8d:ce:f1:9c:e5:13:8c:3a:06:f2:04:a1:e4:3d:c2:b2:
de:63:f1:1d:e5:e1:57:46:02:c7:ba:ea:be:c1:8d:c7:87:52:
47:14:c2:fe:77:af:6b:67:88:a4:24:f3:86:b0:bd:91:4d:4f:
5a:f9:b4:3d:8a:6a:79:20:e6:c5:38:a9:72:aa:8d:d0:2d:c6:
aa:af:47:4e:fc:77:8b:cb:ac:3e:2e:2b:ae:bc:1a:07:37:39:
48:b9:e8:c1:b4:9e:33:20:ab:0f:0f:1d:dd:55:ec:b9:10:9b:
88:30:5b:b7:02:b8:7a:69:71:53:d9:ec:e4:b7:67:f1:66:3e:
58:35:11:c2:1e:f6:c7:52:f7:03:15:c9:b7:c2:7b:81:71:16:
05:6e:36:d5:cf:68:3f:97:ce:5e:d0:af:c3:76:32:2b:f8:ff:
b6:9c:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org