Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TAlSe5ZhcBI_ND-_5hVjuOVGeD4.roa
File: TAlSe5ZhcBI_ND-_5hVjuOVGeD4.roa (raw, json)
Hash identifier: eV2gU2Oqs7gZ6P0Ue/BlslxWL1bGQWX6e2Hy9hAcRG0=
Subject key identifier: 4C:09:52:7B:96:61:70:12:3F:34:3F:BF:E6:15:63:B8:E5:46:78:3E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185B2B20533C783E23C9162B786F13D79A7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TAlSe5ZhcBI_ND-_5hVjuOVGeD4.roa
Signing time: Sat 14 Jan 2023 23:51:29 +0000
ROA not before: Sat 14 Jan 2023 23:51:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202256
IP address blocks: 2a0e:97c6:4000::/34 maxlen: 48
Validation: Failed, certificate revoked on Wed 18 Jan 2023 00:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b2:b2:05:33:c7:83:e2:3c:91:62:b7:86:f1:3d:79:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 14 23:51:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c09527b966170123f343fbfe61563b8e546783e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:a7:06:d6:07:11:37:d3:d0:2f:2d:ca:79:
ef:7a:e1:fb:83:99:ae:c1:3a:7d:11:c7:7c:fb:cb:
fd:42:c8:a7:6f:ec:74:e9:f4:6a:84:68:f3:cc:45:
9c:14:82:0c:71:c0:1f:3c:07:d2:dc:80:31:4d:c7:
5d:b0:62:e4:5a:92:bd:5f:14:63:97:eb:01:37:ab:
ae:1e:ef:20:e8:00:3d:6e:4b:1e:a6:bb:cc:d5:dc:
d9:8e:87:37:16:7f:37:b5:b0:f0:4a:70:5a:57:78:
f7:3d:a4:b9:b4:08:51:0d:7b:43:81:96:8f:f0:8b:
60:e6:45:27:93:a7:76:c0:e6:64:3b:52:51:4b:e4:
13:39:08:92:1c:9d:84:6f:d1:bc:87:87:0e:76:ab:
a3:8f:38:98:3d:7e:ba:a9:0b:a9:04:3e:61:88:c2:
3a:d8:68:52:23:2d:fe:6b:3b:11:49:df:bd:98:08:
8e:80:11:41:a8:55:be:ec:ab:e9:89:3b:48:3d:72:
f1:a5:9b:cb:a6:ee:ec:30:a4:ff:f0:f5:76:82:ff:
25:83:e1:32:1c:00:87:f3:36:36:54:ae:7c:a5:5a:
4b:a9:22:c0:74:e2:d0:61:6f:c5:c0:23:a8:5e:20:
b6:77:da:99:8f:25:33:4d:f6:ea:2d:13:62:4e:5e:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:52:7B:96:61:70:12:3F:34:3F:BF:E6:15:63:B8:E5:46:78:3E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TAlSe5ZhcBI_ND-_5hVjuOVGeD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c6:4000::/34
Signature Algorithm: sha256WithRSAEncryption
57:a6:6e:48:72:01:0f:71:40:71:42:a8:83:cb:e9:9f:aa:a5:
5c:c3:d3:56:b2:d2:7b:f6:09:59:1f:ff:15:6b:5c:66:71:f2:
1b:0c:cc:76:b2:44:8a:ea:bd:be:6c:b3:05:c5:f8:c0:49:57:
aa:2c:e7:bb:59:55:f0:37:51:45:dd:b6:bc:87:89:d0:a3:3d:
66:33:92:50:a2:df:a1:3c:41:4b:c3:a2:76:15:0f:c6:e2:6a:
fe:99:83:d8:47:0c:95:8c:b6:5a:2a:b2:a8:00:61:5f:1c:21:
01:86:55:5e:8c:55:a6:e5:a4:2a:a4:00:31:80:bf:20:ab:d9:
00:10:9c:48:d1:ab:6f:db:37:03:ef:d1:e6:b5:df:17:38:cb:
78:44:1c:26:17:d0:76:e3:d2:7c:b1:1a:37:7d:87:b5:47:a2:
b0:d2:b2:e0:0a:ef:be:43:c6:b0:e6:cd:63:f2:17:cc:cc:cd:
bb:68:36:a9:eb:ff:70:bb:f7:bd:2d:16:e8:04:bb:da:cb:ec:
63:77:44:21:11:dd:60:6b:5e:41:f1:03:3a:ca:d3:bf:4a:7b:
21:d3:61:43:f7:7d:5a:74:35:29:87:7b:47:0d:b5:a0:d9:7b:
e0:27:96:6e:9f:e5:fb:3f:52:e2:97:30:04:1f:ca:80:e8:a0:
d4:8c:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:03 2024 by rpki-client on console-ams.rpki-client.org