Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiEimtl3d755MKlcg7HLOCOIKuw.roa
File: TiEimtl3d755MKlcg7HLOCOIKuw.roa (raw, json)
Hash identifier: zyDFleU69aVE0snp8LEFlbuzyJcfaH0MXuxKCQlxmvc=
Subject key identifier: 4E:21:22:9A:D9:77:77:BE:79:30:A9:5C:83:B1:CB:38:23:88:2A:EC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186219EA5829C101E75FC63A9D790795534
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiEimtl3d755MKlcg7HLOCOIKuw.roa
Signing time: Sun 05 Feb 2023 12:48:10 +0000
ROA not before: Sun 05 Feb 2023 12:48:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202929
IP address blocks: 2a0e:97c0:510::/47 maxlen: 48
2a0e:97c0:514::/47 maxlen: 48
2a0e:97c0:512::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Apr 2023 15:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:9e:a5:82:9c:10:1e:75:fc:63:a9:d7:90:79:55:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 5 12:48:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e21229ad97777be7930a95c83b1cb3823882aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:77:2e:bb:0f:5e:f9:2a:78:3b:98:7d:4d:
c6:1e:be:86:c7:02:87:96:be:48:76:8b:0b:59:31:
13:d1:e7:57:da:6c:5e:2d:0a:c4:0c:eb:f3:1d:d8:
04:ee:d9:78:d8:b7:13:60:a1:55:70:f4:6c:7a:79:
de:d4:ff:17:74:d9:98:8f:f3:79:4a:02:10:b4:66:
a2:43:45:48:f8:85:cd:57:ec:9a:d8:41:2b:b7:b4:
6b:49:40:95:b9:bf:aa:a8:dc:c5:49:91:d1:bc:e3:
f9:d3:15:eb:dd:7e:26:29:0b:10:7a:68:31:93:2f:
65:ac:f5:31:58:41:37:2b:fd:b6:3f:02:0b:4d:9d:
b6:8c:3b:9d:9c:74:8c:ec:b5:05:46:d2:93:45:ed:
9d:f2:3e:f5:9d:b4:49:06:0d:da:ce:2c:0e:46:d2:
02:33:d1:07:ba:ba:fc:31:77:40:0b:8a:17:d2:dc:
3f:3c:00:25:63:7b:59:8d:db:a5:09:30:58:22:27:
c8:ab:41:95:87:5f:d2:63:ce:0d:35:e5:e8:e7:9d:
46:55:54:eb:af:f1:a1:9f:50:f9:0d:00:f8:ac:25:
c4:03:21:37:55:b8:f1:eb:1b:ee:81:5e:90:e5:5c:
55:bb:83:b0:44:5e:1b:b4:e2:7e:09:18:47:9d:00:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:21:22:9A:D9:77:77:BE:79:30:A9:5C:83:B1:CB:38:23:88:2A:EC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiEimtl3d755MKlcg7HLOCOIKuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:510::-2a0e:97c0:512:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:514::/47
Signature Algorithm: sha256WithRSAEncryption
8e:90:44:74:d3:ad:95:4c:b3:b9:20:16:c6:c2:c0:d6:d9:6d:
13:85:e3:f7:e0:cd:1d:06:09:06:a0:7e:6b:96:eb:a7:2e:50:
01:da:d4:cb:d7:8f:ee:3c:c2:8a:19:d7:42:64:36:9b:26:73:
68:51:53:53:b9:43:33:3c:a2:d5:a0:4d:2f:d0:41:71:7b:25:
83:f9:04:b8:75:78:57:fa:d9:d7:bb:e4:4c:5a:5d:14:63:88:
3c:31:eb:f0:7b:e9:a4:44:69:c3:1d:b5:8b:4b:5a:b6:bf:9b:
26:38:0b:0d:1b:8b:24:58:5d:b3:67:90:0c:1c:42:f2:08:d4:
65:cf:ac:46:05:18:3b:2e:40:b8:8e:96:e7:26:ba:6e:0a:1e:
cd:ed:13:30:42:10:09:34:83:ba:9a:3a:00:7e:b4:68:a5:65:
e1:e2:c9:b4:18:ae:ca:de:b8:a2:40:df:4c:52:79:85:d3:50:
f7:07:10:f0:01:c0:09:97:07:38:6b:a2:e7:8e:38:30:59:bd:
fb:0d:19:4c:75:9b:ea:82:2b:10:fa:0b:27:75:8e:34:33:10:
03:78:00:d3:d8:ce:dd:c6:7f:6b:1b:15:a6:09:42:47:53:c6:
2d:c9:8c:ee:0d:87:ed:86:fc:97:0e:8a:ff:03:fc:fc:6e:22:
b7:99:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:03 2024 by rpki-client on console-ams.rpki-client.org