Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ug6MJuSCo1qxlT8eJeRr6HJ3ilw.roa
File: Ug6MJuSCo1qxlT8eJeRr6HJ3ilw.roa (raw, json)
Hash identifier: eDjdqJUcUZ3C+hMOPDw4Pz4K7nxGfSHg+TRsGRw5Ej4=
Subject key identifier: 52:0E:8C:26:E4:82:A3:5A:B1:95:3F:1E:25:E4:6B:E8:72:77:8A:5C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187B92F5FE5E192D86ED52EA82090F1BB4B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ug6MJuSCo1qxlT8eJeRr6HJ3ilw.roa
Signing time: Tue 25 Apr 2023 16:11:42 +0000
ROA not before: Tue 25 Apr 2023 16:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198747
IP address blocks: 2a0e:97c0:380::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Apr 2023 23:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b9:2f:5f:e5:e1:92:d8:6e:d5:2e:a8:20:90:f1:bb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 25 16:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=520e8c26e482a35ab1953f1e25e46be872778a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:ac:c5:72:a0:b9:e3:93:60:f2:2b:6b:5d:
fc:9f:a5:74:6c:6a:e0:b6:b4:b6:64:12:87:1a:65:
1c:32:a3:48:40:39:49:e3:ce:20:e4:d8:e6:7b:7c:
a5:b6:c1:8a:3c:d8:ce:c5:77:80:0f:d9:d1:10:de:
80:05:c2:2e:57:7a:6f:83:d6:7d:95:c6:bc:88:b4:
93:cd:f8:f9:06:ac:0e:f7:68:d8:a1:90:81:cc:30:
b3:3f:b5:00:11:ff:f2:7c:91:77:68:cf:70:85:63:
2e:96:cc:99:be:d4:46:a5:f0:b2:88:28:bd:5b:0e:
00:62:91:61:66:17:8c:17:70:d8:9f:34:4d:d8:c9:
c3:8f:d2:df:a8:3b:45:2a:34:46:24:4c:27:ad:d1:
6f:8a:6f:67:ba:2a:88:4b:6f:2d:0c:3f:61:0a:6c:
61:dc:b5:bf:3b:5a:30:35:cc:93:83:12:f5:59:50:
52:31:ec:d7:f8:0e:c0:51:b9:75:6a:2b:e9:95:8e:
fd:58:8b:34:b7:a8:c9:27:ad:ab:da:af:fd:85:8f:
97:1b:10:a6:6c:f1:42:96:af:a9:64:78:71:12:9a:
bf:93:bd:ec:3a:fd:2d:24:09:46:dc:9f:42:7d:4b:
61:8a:fa:80:44:e1:a6:79:e4:7e:38:63:9c:00:70:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0E:8C:26:E4:82:A3:5A:B1:95:3F:1E:25:E4:6B:E8:72:77:8A:5C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ug6MJuSCo1qxlT8eJeRr6HJ3ilw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:380::/44
Signature Algorithm: sha256WithRSAEncryption
94:46:a1:de:05:4c:19:80:cc:73:fa:4f:26:55:02:52:12:78:
39:34:38:b6:48:69:bf:cd:54:a6:30:45:9c:ff:1b:87:78:40:
72:e6:36:c0:75:ef:cd:56:f2:85:d0:b2:a4:a4:84:57:8c:a6:
1c:25:00:04:db:41:d4:ac:9b:db:bc:c8:af:d7:4e:96:69:7e:
43:2d:da:86:2a:9e:3a:a2:43:ce:5a:f7:87:54:c2:a7:e2:08:
7c:48:3f:23:d8:8b:92:0f:34:6d:bf:73:1f:08:7e:60:3e:cf:
3c:c4:af:76:12:e5:88:8e:e2:65:99:20:5d:57:ea:2b:54:f9:
c5:fd:6e:f3:7f:95:01:f5:0f:24:bb:6b:d3:c6:4e:95:a9:ce:
fe:2c:99:9e:86:8c:42:10:ad:52:5e:c0:62:52:1a:a8:c6:46:
50:02:47:02:b2:55:ee:08:af:e9:10:1a:02:57:12:f7:00:e1:
48:bb:ea:cf:8d:7e:ae:22:17:6b:9a:63:45:e4:9e:56:be:57:
e1:88:7b:f8:0d:2b:1b:b2:91:21:24:83:49:72:ab:1b:ba:a3:
57:55:c7:55:2e:b6:78:48:63:0b:b2:fa:e6:8a:d2:d0:3a:7a:
56:7d:ce:ce:61:bd:24:b1:78:a6:ad:77:79:3c:73:e2:27:22:
fa:9b:d4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:04 2024 by rpki-client on console-ams.rpki-client.org