Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vk4HEwsIpxXrNKDM_0c2vkaLFrM.roa
File: Vk4HEwsIpxXrNKDM_0c2vkaLFrM.roa (raw, json)
Hash identifier: N1fXjkf8J2MCHkIpEEmoEcJAYsloB9sMYjJj+K7f4zY=
Subject key identifier: 56:4E:07:13:0B:08:A7:15:EB:34:A0:CC:FF:47:36:BE:46:8B:16:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185DE40B46F957AF2F7627882CC9E2E3ACD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vk4HEwsIpxXrNKDM_0c2vkaLFrM.roa
Signing time: Mon 23 Jan 2023 10:51:00 +0000
ROA not before: Mon 23 Jan 2023 10:51:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212227
IP address blocks: 2a10:2f00:15e::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Jan 2023 16:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:40:b4:6f:95:7a:f2:f7:62:78:82:cc:9e:2e:3a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 10:51:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=564e07130b08a715eb34a0ccff4736be468b16b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:c4:9f:cc:6c:c6:c8:bb:95:80:13:48:c0:
b3:2c:8e:25:bf:5e:de:2c:fd:82:2a:a3:22:fb:0d:
28:ca:34:f3:ca:2b:66:61:c3:90:24:19:06:f1:67:
76:73:54:e6:ca:df:ed:29:0c:2a:61:a6:3a:c0:f7:
a4:fe:95:f8:29:d6:32:b6:b6:28:02:f4:d4:22:46:
46:f9:4c:d3:73:a1:d5:ca:2e:91:3e:c8:4f:2b:d7:
86:8b:9c:ff:57:83:63:43:44:1c:dd:f1:75:00:8c:
7a:68:6f:29:c4:ee:f1:40:7b:b1:45:a5:14:da:2a:
4c:8a:c3:54:0c:0c:8b:82:20:dc:cc:59:73:54:d9:
5b:d5:59:79:b6:a5:b6:fb:9a:16:32:05:fb:76:fa:
bc:1f:16:46:f9:ad:b2:69:f7:45:37:72:4c:84:bd:
61:bf:3a:8b:87:fa:a6:c3:91:40:4a:51:b4:07:15:
80:36:37:55:ce:1d:c7:f3:0d:27:39:12:ba:00:a9:
b4:15:e3:1a:7f:08:2a:f3:4c:f5:0f:e3:8b:8e:f2:
2e:46:da:69:f4:22:3b:33:dc:81:33:4a:17:16:f5:
7a:bd:dd:d5:d4:6c:4c:63:2b:ed:f2:a4:ab:5c:d7:
42:ad:48:c3:4f:43:28:77:9f:59:d7:9f:29:76:fb:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4E:07:13:0B:08:A7:15:EB:34:A0:CC:FF:47:36:BE:46:8B:16:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vk4HEwsIpxXrNKDM_0c2vkaLFrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:15e::/48
Signature Algorithm: sha256WithRSAEncryption
51:d1:88:4c:9f:a3:99:bd:81:94:1e:f0:d9:34:2b:71:c1:70:
c2:91:0a:ed:f2:ab:d7:f6:3a:d9:c0:2a:dc:3a:ab:e8:23:f0:
04:92:da:f2:d0:4f:37:b9:4a:bc:a1:c2:ea:c0:86:22:79:79:
aa:14:a9:9f:77:84:ea:bc:36:88:5a:34:7b:f1:31:be:9a:9a:
7d:fe:d2:07:39:e7:59:67:08:84:2c:db:1d:b8:08:4e:af:95:
79:65:61:7b:ca:41:a4:97:b4:3c:5f:66:cb:3c:90:b3:71:d0:
6a:11:66:36:16:a6:78:47:e5:d6:7d:6f:9f:4a:b6:b0:b0:6c:
14:42:4e:02:f9:a7:03:ba:d1:a0:e5:2f:49:d6:a7:89:b8:5d:
ef:36:d9:ed:6d:ca:61:4c:02:42:92:2e:a6:16:31:6c:fe:d9:
3a:e5:87:50:82:9e:59:c2:1c:3b:43:de:57:74:22:41:d5:fa:
45:ea:da:13:63:98:ee:8d:fc:27:64:15:7f:76:b6:b8:a2:d4:
f8:e7:09:09:7e:ee:02:13:8e:1d:1b:5c:fa:ef:d9:4f:34:7a:
17:8d:7f:8d:fe:f4:96:e4:d0:bf:51:54:ad:11:eb:22:2a:0e:
db:ce:8b:a3:bb:ce:0a:8c:a4:2b:88:a2:22:b7:9f:72:c3:c3:
ef:31:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:32 2024 by rpki-client on console-fra.rpki-client.org