Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U3RE8dI-78zyJiTY85bWNIeCZvI.roa
File: U3RE8dI-78zyJiTY85bWNIeCZvI.roa (raw, json)
Hash identifier: /JLYP8iCpqi58mJZJNrYfCmEzwB+fPV8AClqgQrX5s4=
Subject key identifier: 53:74:44:F1:D2:3E:EF:CC:F2:26:24:D8:F3:96:D6:34:87:82:66:F2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AD3B419A885A6481F630B5F0ED729
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U3RE8dI-78zyJiTY85bWNIeCZvI.roa
Signing time: Tue 24 Jan 2023 16:09:41 +0000
ROA not before: Tue 24 Jan 2023 16:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204307
IP address blocks: 2a0e:b107:ac0::/48 maxlen: 48
2a0e:b107:ac2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Nov 2023 14:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:d3:b4:19:a8:85:a6:48:1f:63:0b:5f:0e:d7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=537444f1d23eefccf22624d8f396d634878266f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:47:b3:ce:8f:59:92:ea:1c:39:38:43:32:
8b:d2:2a:a7:35:91:15:4c:15:e5:d2:8f:f8:12:cc:
bf:9a:65:59:3b:76:4c:f1:f7:c9:21:e7:07:ed:b3:
1d:28:d2:dc:6e:9b:fa:8b:4f:f3:e1:93:c4:a2:cf:
e1:57:dc:ba:97:ad:87:ce:75:e5:18:1a:78:f2:c3:
d3:8d:87:fc:ee:26:9a:c3:b5:39:dc:c4:86:57:40:
6a:a3:9c:e3:e7:a9:ff:18:ef:17:ff:8e:2f:e3:8e:
49:1f:6d:99:14:8c:3a:43:da:f9:26:e3:1b:4e:f4:
51:cb:f0:76:33:8e:6e:27:6e:38:ac:2a:a5:3d:b5:
61:fc:7f:39:e4:6f:24:03:6e:5c:20:7c:75:17:ee:
22:c1:ae:37:c7:d3:ff:35:2c:63:a0:df:7b:e4:c0:
ad:74:00:44:79:6e:93:fc:1c:dd:9c:56:dc:cf:29:
de:06:3c:67:2c:dc:8a:92:9a:15:19:23:98:ff:96:
4f:fb:ab:c8:68:dd:c9:49:d1:95:73:f1:d4:1f:ab:
00:79:79:a4:5e:9b:8b:d9:44:bb:c6:2b:59:fd:89:
c3:57:ed:06:45:20:24:65:8f:94:95:2f:94:86:76:
18:60:9b:b8:1c:c7:76:0a:08:ca:eb:4a:ec:44:10:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:74:44:F1:D2:3E:EF:CC:F2:26:24:D8:F3:96:D6:34:87:82:66:F2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U3RE8dI-78zyJiTY85bWNIeCZvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ac0::/48
2a0e:b107:ac2::/48
Signature Algorithm: sha256WithRSAEncryption
90:f1:81:f5:70:c4:27:91:2c:0e:68:55:53:70:91:9d:58:ee:
b8:c0:db:7f:4f:6b:7d:92:a5:21:48:32:69:5f:f8:a7:59:c4:
03:50:ae:fb:88:f7:52:bd:30:fb:4c:21:e5:59:f9:42:2d:6d:
ca:9b:cb:7b:d7:c7:49:af:d5:e0:18:32:ec:12:c4:41:fc:e7:
b5:4a:dc:a0:fd:3a:d3:cf:e9:74:59:25:1b:b2:5b:ea:ff:6e:
c4:55:4d:7f:da:cc:05:dc:00:b2:fd:00:a1:02:ba:e5:ab:26:
a1:87:f0:97:23:b7:b9:8b:3f:8e:bf:21:35:8f:8f:47:11:65:
8d:92:da:7a:da:08:a3:7e:7f:a5:d0:2f:02:36:50:23:bd:f9:
84:b8:2c:75:4a:d1:10:7d:c3:3a:75:43:4d:10:40:3f:e6:c8:
88:40:c2:6e:7b:55:f9:93:c3:e5:4e:a0:f7:38:4c:cc:b7:79:
6c:c0:6d:9e:de:27:84:66:8a:59:d2:f2:90:ce:ac:71:4a:08:
20:8f:70:d6:0a:a0:3a:f6:74:ef:63:e3:1b:21:03:bc:d6:8f:
df:91:b5:8c:42:58:4a:5e:c6:da:f0:f6:e1:b2:6a:4c:78:eb:
09:c6:f8:5b:05:fa:29:8f:bd:05:9e:23:a6:dd:cc:03:a3:90:
4c:83:6e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:32 2024 by rpki-client on console-fra.rpki-client.org