Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VxbjaDswd57XavdONGAuS8IMEf0.roa
File: VxbjaDswd57XavdONGAuS8IMEf0.roa (raw, json)
Hash identifier: owLFQE7WYtxzfe5d2awVsIgsV2ey/252x46xsnwFCrA=
Subject key identifier: 57:16:E3:68:3B:30:77:9E:D7:6A:F7:4E:34:60:2E:4B:C2:0C:11:FD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D19472FB0A801CAD43666FD3A44E27897
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VxbjaDswd57XavdONGAuS8IMEf0.roa
Signing time: Wed 17 Jan 2024 21:15:12 +0000
ROA not before: Wed 17 Jan 2024 21:15:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215734
IP address blocks: 2a06:de00:de10::/48 maxlen: 48
2a06:de00:de11::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 19 Jan 2024 02:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:19:47:2f:b0:a8:01:ca:d4:36:66:fd:3a:44:e2:78:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 17 21:15:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5716e3683b30779ed76af74e34602e4bc20c11fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:9b:19:6f:ab:fa:01:17:26:fb:ce:86:64:
0f:45:6b:78:04:59:4b:d5:12:f2:cc:bf:35:20:39:
90:d0:89:62:bc:d2:1b:88:51:68:0d:9b:e6:5b:9f:
cd:ac:08:74:80:82:f8:d8:3e:4e:05:de:a7:51:26:
ad:18:2c:3e:70:e9:50:7a:71:78:92:75:12:37:f4:
c5:09:2d:b1:1f:8c:eb:c6:48:05:bc:a0:6d:d8:68:
3f:43:6f:9d:a2:45:80:9d:87:87:80:2e:32:a5:30:
b2:f7:85:69:3e:eb:66:4a:84:36:c3:a2:28:4a:a3:
b9:d0:e1:46:c4:ee:b7:8c:a3:d9:47:33:4e:03:f1:
79:56:6d:01:e0:36:e0:eb:43:a4:6e:ac:b4:86:6b:
82:0b:d2:b1:0b:fb:0f:04:25:87:c3:1c:c3:a9:bd:
ae:b5:9a:ef:f0:0b:a6:1d:32:dc:33:f9:7f:5a:70:
93:1a:0b:3f:24:b5:aa:d8:ad:e1:bb:df:6d:8c:d1:
cd:d7:30:52:37:5b:e3:0c:8d:2b:c8:1c:ce:17:dc:
29:fa:5a:7d:08:f6:32:53:89:50:e8:69:bb:20:7f:
43:a5:da:1e:f0:68:f5:a8:ee:af:50:5e:e9:40:1d:
82:6a:a2:c7:6d:d6:3c:7d:6d:c1:31:aa:7e:c9:96:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:E3:68:3B:30:77:9E:D7:6A:F7:4E:34:60:2E:4B:C2:0C:11:FD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VxbjaDswd57XavdONGAuS8IMEf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:de10::/47
Signature Algorithm: sha256WithRSAEncryption
69:67:1f:3e:93:5b:fb:06:94:13:65:0c:1d:21:8c:87:22:84:
7e:0e:84:3e:6d:fb:03:69:dd:30:c5:f4:37:6b:da:2a:7e:ce:
8c:a2:d6:bd:6c:83:0c:fc:e8:97:79:29:dc:00:15:c8:c0:07:
d5:12:1d:48:f2:f5:0a:8f:6b:1c:97:ec:7e:07:4b:57:e0:79:
4f:84:dd:a9:45:36:20:95:cd:f1:70:2f:d9:ff:51:9b:b7:f1:
6d:37:9b:43:a3:2d:10:13:99:87:1e:fd:15:fe:e8:19:32:13:
85:48:7e:55:99:c5:d0:5a:80:02:3c:8e:43:7e:ba:5a:2b:f1:
19:fc:78:4e:d5:58:3e:ab:76:9e:21:5f:b4:a9:b6:d9:7c:94:
6f:31:61:4f:97:48:10:00:2b:79:6e:c7:9f:69:2b:72:47:4d:
8a:87:c0:cb:a4:f2:7f:c9:2d:61:9b:6a:f3:ad:fc:cc:1c:7b:
58:74:15:c1:55:5d:c9:e7:5f:18:aa:b1:42:af:9e:e2:a7:4c:
00:97:de:70:70:9f:5b:bc:ae:30:ed:97:04:05:83:fe:e3:5d:
95:be:dd:74:2f:ea:52:48:88:d8:c1:d3:b6:60:02:fd:95:f8:
27:36:25:c4:90:ed:9b:9a:0b:59:42:7a:b5:78:1b:5c:ee:3b:
6f:e3:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 04:21:10 2024 by rpki-client on console-fra.rpki-client.org