Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U3Jw7VSUryOUQm6-X4744zVp67Q.roa
File: U3Jw7VSUryOUQm6-X4744zVp67Q.roa (raw, json)
Hash identifier: HI87alpPu3Ax6PbU3MOeY6cwSe0PuNxa2WkiPJ7Q5Ik=
Subject key identifier: 53:72:70:ED:54:94:AF:23:94:42:6E:BE:5F:8E:F8:E3:35:69:EB:B4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187B90EFFE03162E3A3E29DEA96E4118F04
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U3Jw7VSUryOUQm6-X4744zVp67Q.roa
Signing time: Tue 25 Apr 2023 15:36:20 +0000
ROA not before: Tue 25 Apr 2023 15:36:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198747
IP address blocks: 2a0e:97c0:380::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Apr 2023 15:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b9:0e:ff:e0:31:62:e3:a3:e2:9d:ea:96:e4:11:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 25 15:36:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=537270ed5494af2394426ebe5f8ef8e33569ebb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:68:92:ab:f1:af:c9:d3:35:ba:af:1c:89:
e7:b4:cb:67:c9:98:5f:41:eb:b8:f7:31:c7:05:08:
f8:df:8b:a5:5c:d2:c9:3c:c0:38:d3:9a:45:53:ec:
bb:6e:78:95:ca:4a:46:af:1f:57:c3:6d:a9:77:38:
cf:15:fd:c3:a6:ff:f6:00:1c:16:1e:15:08:d6:07:
18:ae:f1:a1:31:d6:3d:ea:74:0b:9b:f3:43:23:2a:
c9:b0:7f:40:90:d3:a2:66:64:20:31:21:42:31:c8:
29:9d:e1:07:23:d7:56:1c:c3:52:23:43:9e:da:31:
10:1d:81:6e:5d:8b:26:09:e6:26:d1:15:dc:32:46:
fc:a3:89:ed:fe:57:d6:dc:52:8b:83:ae:60:ce:f5:
be:8f:de:7d:ef:0a:84:44:45:c8:dc:1c:0a:f3:67:
a5:63:09:34:8b:ba:76:20:bc:f4:b8:47:75:d4:42:
d5:16:58:7a:98:97:3c:dc:c7:74:54:79:5c:8c:98:
bb:c6:01:73:50:be:9d:ab:c6:49:63:c3:e6:3d:94:
2a:14:0f:e7:4e:2f:e9:d4:cf:94:76:34:45:9d:9e:
5f:cc:00:1a:17:40:a4:22:e6:ed:72:5d:23:0d:55:
24:b4:1d:c1:09:9a:0b:e4:06:7d:c4:bb:17:de:bf:
c9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:70:ED:54:94:AF:23:94:42:6E:BE:5F:8E:F8:E3:35:69:EB:B4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U3Jw7VSUryOUQm6-X4744zVp67Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:380::/44
Signature Algorithm: sha256WithRSAEncryption
32:59:c7:68:5a:99:f9:d1:ea:08:10:91:e4:08:be:02:80:2c:
2a:c9:ce:25:20:d1:60:8c:e4:55:75:5a:96:d9:6f:87:17:2f:
59:97:e9:62:36:7d:4a:23:6c:19:b7:1b:ec:1f:9d:99:1e:97:
26:81:20:62:dd:33:cc:38:db:35:e5:7f:2f:90:02:ef:a5:60:
09:ae:6c:54:69:8f:ed:66:26:58:54:5d:01:e1:4e:0f:b5:3c:
92:f9:5f:aa:12:e3:6b:43:e1:54:5f:55:df:59:10:71:aa:3d:
5b:f3:bf:cf:97:48:f2:5a:73:ae:01:d9:cb:bb:8a:32:a3:d9:
5e:e3:4f:39:d5:74:8f:79:8e:87:ea:b4:44:ba:0a:e6:b4:d7:
c8:bf:fe:35:25:b4:96:8c:6a:1e:96:2a:4e:b5:23:5c:7f:9b:
17:93:0d:af:aa:b9:ad:03:88:15:87:09:f8:71:db:28:6e:65:
bc:46:e9:fc:eb:bf:73:d4:5b:a0:4c:c6:d2:cd:9e:b0:89:c7:
24:bc:fb:22:93:c1:48:fb:cd:7e:72:20:9e:84:99:3c:50:ba:
f4:a9:7d:63:f8:21:96:0f:c9:66:1f:76:08:3c:a5:03:4c:54:
b2:36:b2:f7:5a:61:97:e4:89:fa:9a:ae:49:f0:94:18:35:e9:
2a:d1:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:04 2024 by rpki-client on console-ams.rpki-client.org