Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiwyjUho6GXRNnR8N_8Xc8_Qvv8.roa
File: TiwyjUho6GXRNnR8N_8Xc8_Qvv8.roa (raw, json)
Hash identifier: JKTPOoX+asBlQIuzYYBDDqwcSfFVsP/v4H1PDz65DuE=
Subject key identifier: 4E:2C:32:8D:48:68:E8:65:D1:36:74:7C:37:FF:17:73:CF:D0:BE:FF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01865D0C3941EF00F5E11417BAA67BDBD057
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiwyjUho6GXRNnR8N_8Xc8_Qvv8.roa
Signing time: Fri 17 Feb 2023 01:45:27 +0000
ROA not before: Fri 17 Feb 2023 01:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210738
IP address blocks: 2a0e:b107:1e70::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 18 Feb 2023 01:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5d:0c:39:41:ef:00:f5:e1:14:17:ba:a6:7b:db:d0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 17 01:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e2c328d4868e865d136747c37ff1773cfd0beff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:ad:7b:47:c1:5b:2a:2e:3b:c6:23:28:53:
d4:b6:df:70:e8:36:67:06:f9:6f:04:ae:07:94:be:
51:90:59:3d:47:f7:19:25:b4:6f:ce:cc:ba:18:ea:
37:b1:57:c1:f5:24:0a:ad:98:cd:68:5b:a1:63:0a:
7d:de:47:3d:d4:35:08:b4:fd:03:9b:5d:6e:d0:61:
43:d9:cb:75:ec:7a:62:fe:27:91:72:4d:44:84:c4:
01:e2:02:ed:3e:e5:00:0b:bb:10:ec:d3:0d:db:f5:
50:fa:58:9e:a0:24:9e:82:c3:09:62:7f:c6:3b:16:
3e:9d:40:54:aa:50:bb:4f:74:81:70:de:90:3e:7c:
a2:3d:1e:3c:04:93:2b:8d:00:2b:51:23:0d:c0:c2:
46:e3:38:86:19:e0:bf:fe:cd:76:37:0e:e0:56:a0:
c4:12:93:ac:00:c4:26:60:ef:eb:04:ca:29:c6:a1:
6b:75:2e:33:a2:5a:1a:b3:71:1d:60:f5:77:dc:22:
de:2b:01:03:20:f6:f2:0c:be:7d:ae:04:78:c2:6f:
04:f8:d3:ec:cb:72:f0:9b:02:eb:e4:bb:9c:c1:0d:
21:e8:f1:45:8c:0b:3f:7f:54:26:8a:c1:86:4e:d5:
72:b3:55:38:cc:8c:ca:58:df:8e:a2:82:60:b2:2e:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2C:32:8D:48:68:E8:65:D1:36:74:7C:37:FF:17:73:CF:D0:BE:FF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiwyjUho6GXRNnR8N_8Xc8_Qvv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1e70::/44
Signature Algorithm: sha256WithRSAEncryption
5c:93:1f:62:42:e6:09:47:25:37:49:9c:d5:9e:6a:95:64:73:
36:10:59:b9:da:1b:7f:4c:6e:f5:29:67:db:98:4a:96:b2:fa:
3f:36:7d:32:26:6d:08:e7:7b:4a:10:ba:51:ef:f6:0c:9a:85:
33:5c:31:4a:3a:75:e0:e4:76:2a:f7:74:ee:d3:87:c1:c0:44:
fe:4a:76:6f:97:97:f5:04:e8:1e:fb:12:02:99:65:2e:9c:2c:
f0:1f:98:d9:5f:43:f0:ca:92:b3:e5:e5:54:cd:2a:fa:e3:81:
58:fd:6f:66:b0:f8:c8:74:ab:22:51:c1:db:af:ac:fa:b5:f5:
9b:a6:bb:5b:45:fd:b0:5d:dc:8d:fc:95:83:09:bc:76:a2:20:
7b:8b:a0:b3:e2:c8:ed:ce:e7:f4:09:80:b2:61:39:22:10:03:
fe:5a:b3:09:35:d3:9a:57:11:5e:52:9e:a4:dc:06:6f:9f:78:
45:f8:76:d9:6e:ba:c8:f1:8e:3a:d6:69:e9:d9:8b:dc:9c:bf:
e3:39:ad:39:52:61:7b:15:fa:2c:82:ee:5a:7c:5c:9a:b8:ea:
23:94:83:64:dc:d3:3f:c2:96:3b:e9:1a:32:83:76:e0:f4:66:
e6:05:dc:66:9e:a6:a0:2a:99:4e:c7:f6:c0:a5:d7:31:c5:c8:
f0:b7:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:32 2024 by rpki-client on console-fra.rpki-client.org