Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UwiGZU3vJOn02FUmjJlIEXAVXZ8.roa
File: UwiGZU3vJOn02FUmjJlIEXAVXZ8.roa (raw, json)
Hash identifier: WY+JrvmvOCqbrLYrHJXfiRrADh1Ryy2cvGOAklUXIjQ=
Subject key identifier: 53:08:86:65:4D:EF:24:E9:F4:D8:55:26:8C:99:48:11:70:15:5D:9F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01869C3641B2824337FE2D77B898B4EB420E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UwiGZU3vJOn02FUmjJlIEXAVXZ8.roa
Signing time: Wed 01 Mar 2023 08:07:26 +0000
ROA not before: Wed 01 Mar 2023 08:07:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203442
IP address blocks: 2a0e:97c0:bc0::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Mar 2023 10:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:36:41:b2:82:43:37:fe:2d:77:b8:98:b4:eb:42:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 1 08:07:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=530886654def24e9f4d855268c99481170155d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:ea:08:f3:9d:8c:33:3f:ab:cf:8a:d5:51:
ca:52:81:34:6d:19:5e:65:86:b6:16:b3:9e:e0:f0:
7f:68:d0:3b:53:a4:1c:00:76:44:db:24:4b:a5:02:
d2:e4:04:e3:16:3a:ad:b1:13:b0:6d:66:20:51:17:
df:f4:3a:e9:73:2f:ba:0a:78:67:2a:5d:6e:5b:65:
f6:a1:9b:e9:bc:31:49:bd:a1:b3:ce:68:ab:f2:c7:
bf:de:46:01:40:ed:4e:f5:20:89:aa:e7:1e:82:3b:
09:57:b0:f8:46:cb:84:d9:f8:16:94:b5:f6:42:1d:
23:53:8c:cd:04:40:97:d5:e7:73:25:47:8e:bc:60:
c2:6e:03:24:5e:a3:3e:d5:2f:ae:9e:02:be:db:d1:
a8:fe:66:83:8f:49:8f:f3:b2:55:cc:63:72:f1:cf:
d4:12:89:b1:62:d2:50:f1:ba:cb:d4:3a:73:8f:e9:
3f:8d:3d:9a:3b:a9:15:d1:37:1d:e9:db:d9:e5:52:
33:d2:aa:04:7f:47:78:24:57:bc:fa:9f:05:94:2a:
d4:5f:b8:f5:68:04:25:46:7d:55:7e:f2:90:42:95:
e3:4b:94:92:f6:d8:9f:5e:ea:7f:3d:8e:9d:d0:b7:
d0:ad:88:cf:5a:fb:1c:fd:7b:af:2d:04:c6:95:d9:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:86:65:4D:EF:24:E9:F4:D8:55:26:8C:99:48:11:70:15:5D:9F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UwiGZU3vJOn02FUmjJlIEXAVXZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:bc0::/44
Signature Algorithm: sha256WithRSAEncryption
27:a1:f4:1b:53:f1:62:82:3f:25:e6:2d:52:7e:63:b8:11:64:
40:e2:5a:50:3d:bb:eb:75:7d:88:df:cc:17:0a:d2:d9:15:54:
c9:55:1b:18:31:3f:cf:8c:cc:18:83:27:c6:71:64:8a:71:88:
58:66:4a:8e:74:fb:92:8b:c8:19:b7:39:44:f5:62:bf:d8:4f:
c0:2c:bd:15:8b:42:24:15:11:8d:3e:e3:02:4b:9b:99:6f:1b:
d7:01:2b:cc:98:ce:0e:dc:47:d4:59:f5:eb:61:b7:9d:f6:bb:
cf:75:3b:aa:57:fd:e6:b3:6c:95:45:2f:22:0f:f1:82:ff:4b:
1f:ca:73:a4:54:37:1f:93:fe:74:79:c8:30:51:53:04:95:2e:
fd:bc:d1:dd:1d:db:64:2b:c7:8a:e1:a7:b5:cc:a2:17:d1:59:
8b:2a:bf:8a:05:9c:b9:9d:f1:79:46:29:19:35:90:7b:da:fb:
30:18:13:bb:83:23:59:83:ff:a6:6c:5b:72:e4:5f:e2:d5:e8:
b5:f6:2d:e4:a4:51:d5:3b:4a:2f:4a:7f:39:05:90:14:80:c2:
53:a8:a0:e1:8d:c5:ad:1c:8a:97:3d:48:e6:26:f4:5f:8d:69:
e9:46:df:31:a8:5e:1d:02:dd:b1:9a:eb:1a:47:3e:64:21:da:
eb:17:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:04 2024 by rpki-client on console-ams.rpki-client.org