Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VpFokiNIxWUodrJ8IUtAtNIOYlE.roa
File: VpFokiNIxWUodrJ8IUtAtNIOYlE.roa (raw, json)
Hash identifier: rQWsr8/7oz8O6e5IXfP4naE58509S6AiCRd06MCIjKM=
Subject key identifier: 56:91:68:92:23:48:C5:65:28:76:B2:7C:21:4B:40:B4:D2:0E:62:51
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189307AF10A3A7CFE6E91D0B91384A8910B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VpFokiNIxWUodrJ8IUtAtNIOYlE.roa
Signing time: Fri 07 Jul 2023 13:11:50 +0000
ROA not before: Fri 07 Jul 2023 13:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204841
IP address blocks: 2a0e:97c0:d30::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Dec 2023 15:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:7a:f1:0a:3a:7c:fe:6e:91:d0:b9:13:84:a8:91:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 7 13:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=569168922348c5652876b27c214b40b4d20e6251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:27:0a:e4:2e:09:eb:2a:f4:84:5d:81:26:
03:db:10:58:9e:8b:fc:3a:5d:f7:e2:a8:73:25:12:
3b:0b:de:93:51:d6:6d:e8:39:e1:af:fe:8b:be:fe:
d5:67:16:f6:51:21:5e:1b:65:53:5c:ef:8f:18:ab:
6d:c5:46:df:bc:ee:b1:df:fe:21:0e:a4:09:10:30:
85:b1:48:3e:e9:2a:75:d3:72:c0:d8:63:3e:3e:57:
ab:c3:22:33:bd:e2:2e:83:7f:5b:d7:b6:aa:dd:f0:
c9:42:16:6b:3b:8a:6e:7a:44:a5:23:7c:8b:87:26:
1b:b8:8d:e9:3b:c8:37:cd:d7:76:59:a3:ef:af:84:
ff:63:da:00:40:b2:ee:bd:f2:a0:18:f6:9a:e5:36:
5e:1d:17:a2:f6:45:85:43:e0:ed:59:b2:6e:ce:9d:
e5:08:48:30:0c:80:7f:9b:34:a7:dd:97:d7:e4:f6:
cc:ca:88:bb:85:1d:e9:c2:f2:dd:e2:6a:e9:c4:35:
b7:7c:1b:44:7d:fb:df:62:b5:45:c4:07:e0:00:63:
09:d0:dc:8d:5b:da:70:3d:2f:20:5e:f3:49:51:87:
35:ec:2b:26:a6:1f:78:76:f4:c8:5a:eb:90:a7:83:
7a:c9:59:36:d5:9f:02:e5:c3:30:a5:e1:8a:40:0e:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:91:68:92:23:48:C5:65:28:76:B2:7C:21:4B:40:B4:D2:0E:62:51
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VpFokiNIxWUodrJ8IUtAtNIOYlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d30::/44
Signature Algorithm: sha256WithRSAEncryption
6c:e4:52:38:46:cd:bb:90:ab:67:51:de:87:a8:66:5d:48:7f:
2a:00:b1:8a:87:4d:33:d4:c9:18:fc:4d:c4:71:a5:6d:d5:53:
9f:6b:f7:e0:15:cc:82:b7:71:6f:2a:3a:81:b6:7e:4c:b5:98:
52:a7:30:7c:0e:8d:83:e0:c4:a2:26:3c:7f:70:da:87:8a:c8:
77:74:81:02:c5:42:61:20:e5:f4:c8:42:b1:62:59:7f:b3:2a:
68:c6:cd:d1:db:65:35:5d:53:a9:d8:e2:f1:2f:86:80:95:a3:
d9:d0:70:a9:a6:3c:bf:63:f7:36:6c:90:9f:2a:44:bd:46:52:
8c:bd:e5:3c:ef:64:7a:55:89:5a:2b:50:bb:b5:aa:af:7c:23:
6e:84:d5:82:21:c5:b7:42:87:ea:97:59:fe:1f:a4:11:90:ad:
ca:f9:b7:5a:5a:1a:d9:4d:30:73:d2:a5:0d:ab:7d:3d:f4:00:
ec:bb:29:39:0a:d2:ae:0f:bd:7f:36:fd:b7:ba:6f:0d:07:81:
ff:bf:50:22:2f:72:4e:aa:ce:9a:ad:23:d5:a3:04:f8:6c:a6:
be:2b:24:93:6c:57:85:fc:9a:57:07:44:86:fa:54:a4:c4:61:
f4:c5:87:6f:83:dc:66:ea:64:79:04:93:d4:3a:01:a1:64:89:
45:15:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:32 2024 by rpki-client on console-fra.rpki-client.org