Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TFOuNljjCCyzSStG27q69Yu7zaA.roa
File: TFOuNljjCCyzSStG27q69Yu7zaA.roa (raw, json)
Hash identifier: RCF96nZC21ipyNrg1jMlybM7MaQ4ZhEBgjO3z5a8G3E=
Subject key identifier: 4C:53:AE:36:58:E3:08:2C:B3:49:2B:46:DB:BA:BA:F5:8B:BB:CD:A0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E9984DDE9FCF9766DB150C90F398DC580
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TFOuNljjCCyzSStG27q69Yu7zaA.roa
Signing time: Mon 01 Apr 2024 11:56:45 +0000
ROA not before: Mon 01 Apr 2024 11:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215296
IP address blocks: 2a10:ccc0:140::/48 maxlen: 48
2a10:ccc0:141::/48 maxlen: 48
2a10:ccc0:142::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Apr 2024 20:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:99:84:dd:e9:fc:f9:76:6d:b1:50:c9:0f:39:8d:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 1 11:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c53ae3658e3082cb3492b46dbbabaf58bbbcda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:0d:99:68:fa:73:f3:da:88:74:2d:b8:60:
d3:91:18:06:5d:7f:7c:7b:85:94:59:a0:82:09:ea:
81:f4:3e:91:39:69:33:70:32:fb:91:15:73:13:47:
28:e8:02:83:fa:34:9d:94:42:0d:85:1d:c9:8f:d2:
ef:33:12:70:c2:ec:99:27:9c:d8:ac:00:2e:66:06:
99:69:d4:e5:54:92:a1:f4:0f:17:29:f9:2f:ea:53:
7e:9a:5c:00:1a:45:2f:8c:48:42:13:1d:6c:18:22:
dd:61:c9:e6:61:5e:fc:bf:6a:97:a8:53:ed:61:ee:
67:75:0b:ad:f4:f0:8e:eb:f2:3c:59:87:9c:46:8b:
a5:62:96:c1:9e:74:76:bd:48:99:da:2f:9f:6c:dd:
b8:65:b4:43:ad:3a:50:b6:bc:2c:0b:35:90:fb:e9:
86:93:95:20:51:2c:32:3a:65:82:0d:05:31:84:31:
b0:dc:05:69:e1:16:1e:25:39:25:73:ae:fe:7b:c8:
1a:8f:68:a4:51:f7:28:98:5a:85:df:2c:11:f9:cb:
9e:b3:fa:e1:66:7a:88:59:53:b4:ea:a6:2f:69:eb:
34:1a:6a:c2:cd:7b:d4:70:a2:67:73:6d:d1:48:cb:
d8:26:0f:78:f9:ea:65:c1:32:16:13:98:c5:0a:14:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:53:AE:36:58:E3:08:2C:B3:49:2B:46:DB:BA:BA:F5:8B:BB:CD:A0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TFOuNljjCCyzSStG27q69Yu7zaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:140::-2a10:ccc0:142:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a1:16:96:e6:6f:24:dd:28:4b:dd:30:ac:ce:06:99:14:45:dc:
d3:c1:8f:5e:95:61:e6:dd:d5:5b:0e:d8:99:d5:29:52:de:09:
b2:96:10:d6:30:c9:d7:28:6b:f0:91:61:1d:62:6d:4f:e9:b8:
04:3f:37:59:e3:a0:c1:af:74:cc:d5:47:2e:24:69:c0:3f:8b:
c1:41:1d:43:cc:93:f7:a7:96:09:3f:f9:e3:cf:62:ed:85:bf:
db:81:e2:b6:56:fb:66:dc:bb:38:70:d8:14:45:89:20:f1:0d:
03:c9:c2:ce:50:78:cd:7c:4f:56:75:c0:09:fb:a9:2c:c4:9f:
26:f2:18:a6:25:95:5c:63:1d:0b:c4:4f:f9:ad:b8:7a:17:79:
43:84:9b:26:d8:f2:d0:c9:85:14:b2:b3:d5:e7:da:ff:a3:2c:
a6:dd:13:a6:c7:a4:e6:06:d1:22:96:1c:ee:6a:6f:05:89:7a:
75:f0:c5:09:2d:ba:f0:96:bb:1e:06:a6:74:c0:23:a6:3b:5a:
49:10:9b:4c:b4:fe:45:76:2f:46:9d:7a:75:4d:29:bc:ae:f9:
0d:67:58:67:4b:d4:1d:f2:4a:0d:18:1f:04:dc:30:c1:4a:8d:
a8:99:f6:26:cb:b6:6a:3d:0e:e6:60:89:f6:24:dd:0f:6b:8b:
3a:43:bc:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 1 21:12:57 2024 by rpki-client on console-fra.rpki-client.org