Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UXDR3nNfhZn2ielzciLW97LXbjo.roa
File: UXDR3nNfhZn2ielzciLW97LXbjo.roa (raw, json)
Hash identifier: ogXajyMePW/VXeyH9gGVBCTns+tAdk9O3AQKIoCgD50=
Subject key identifier: 51:70:D1:DE:73:5F:85:99:F6:89:E9:73:72:22:D6:F7:B2:D7:6E:3A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD294D24C94373D1083505B85C93FE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UXDR3nNfhZn2ielzciLW97LXbjo.roa
Signing time: Tue 02 Jan 2024 10:34:26 +0000
ROA not before: Tue 02 Jan 2024 10:34:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210686
IP address blocks: 2a0e:97c0:8a0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 17 Mar 2024 23:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:29:4d:24:c9:43:73:d1:08:35:05:b8:5c:93:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5170d1de735f8599f689e9737222d6f7b2d76e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:7c:66:09:ec:01:09:c0:be:2a:de:1f:b4:
6b:6a:95:78:86:64:d5:b7:0b:0e:a9:89:70:03:0a:
d4:ea:70:34:8c:4b:98:85:0f:fc:7f:bf:81:e8:85:
75:84:17:c3:f8:8f:04:fd:9e:45:f2:68:30:72:10:
c4:84:4b:4a:15:7b:53:4d:65:3b:06:ee:29:9d:ef:
98:4c:38:2c:b1:7b:97:c2:36:8c:2b:1d:f5:b6:6e:
60:20:d4:a5:b0:f4:2b:e3:27:25:1a:d5:99:70:7b:
49:81:ab:eb:07:ef:4d:85:92:f2:9c:a4:48:59:78:
80:a7:ca:4f:da:58:22:d5:6a:3b:d6:82:96:ed:ce:
f7:fa:0c:64:85:09:c1:7b:ec:26:bf:44:41:72:42:
c7:1b:f4:96:00:ac:7c:51:46:25:65:4d:56:f0:75:
5d:b3:0f:4f:89:38:a1:d3:33:23:04:bb:b2:47:8c:
22:76:e4:3d:7a:1e:72:46:29:9e:5b:94:a3:c4:68:
95:18:b2:ce:3a:76:81:ac:20:9f:80:8c:d3:b2:a3:
a4:03:cb:fb:40:47:90:69:67:ee:dc:bc:1c:6d:1a:
ae:ea:4a:29:dc:b7:89:ef:ac:1d:bb:f7:cf:63:ef:
9e:82:f8:0f:84:72:db:c1:c2:28:ba:88:1f:95:ab:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:D1:DE:73:5F:85:99:F6:89:E9:73:72:22:D6:F7:B2:D7:6E:3A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UXDR3nNfhZn2ielzciLW97LXbjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
82:1a:fc:54:9c:16:91:0e:aa:07:8d:e0:d2:12:eb:2a:fc:5b:
62:ab:f1:57:c8:10:f6:06:42:e0:ae:cd:3a:0b:cc:62:4a:d7:
d1:4d:88:6f:68:dc:59:07:45:eb:f7:0b:0c:9e:40:98:ab:e7:
99:29:1a:ce:40:d6:c5:f0:fe:86:ce:47:a4:61:74:e6:94:fb:
d6:fe:e7:c9:b2:c1:8a:53:1a:b4:21:84:fc:ed:28:ce:97:82:
d5:83:10:08:87:c4:3a:6a:b1:21:7e:69:61:8c:34:85:e3:1e:
ba:5d:85:9e:6f:06:40:b3:26:20:e2:5b:c5:78:e5:7a:7d:bb:
e8:57:f9:10:d7:db:b5:e2:25:28:b9:19:7d:a6:c4:3a:c4:fb:
09:83:b9:8e:4c:0e:8a:41:da:5a:8e:25:d1:8b:18:36:62:b8:
ab:cc:58:af:cb:ac:55:61:ad:b3:1c:d0:04:fb:1f:e4:f6:be:
cf:fa:d5:61:2c:81:4c:6e:f8:fe:26:61:d4:92:a0:d7:c1:96:
c6:20:50:06:96:ef:ed:cf:98:f5:17:f0:93:bd:0a:47:d8:55:
d2:5c:fd:cc:43:9e:49:3a:bf:07:87:e4:9d:85:1a:78:1e:2a:
e9:c0:6a:89:bf:a9:0d:0f:c5:74:be:16:72:57:eb:3b:1a:17:
bc:b2:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 02:38:20 2024 by rpki-client on console-fra.rpki-client.org