Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vxho6EkANVXNCzdxFByD2_xmbvQ.roa
File: Vxho6EkANVXNCzdxFByD2_xmbvQ.roa (raw, json)
Hash identifier: XDfSX/ZSRxczuRnol7LkbO8bE8FvOfg8sqmFPT1wBx4=
Subject key identifier: 57:18:68:E8:49:00:35:55:CD:0B:37:71:14:1C:83:DB:FC:66:6E:F4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7B5B8BBA4BA6E99CFE0B6462CF10A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vxho6EkANVXNCzdxFByD2_xmbvQ.roa
Signing time: Mon 02 Jan 2023 05:15:11 +0000
ROA not before: Mon 02 Jan 2023 05:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203943
IP address blocks: 2a0e:b107:5a2::/48 maxlen: 48
2a0e:b107:5a1::/48 maxlen: 48
2a0e:b107:5a3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:b5:b8:bb:a4:ba:6e:99:cf:e0:b6:46:2c:f1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=571868e849003555cd0b3771141c83dbfc666ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:e0:51:af:2a:df:53:1c:34:d5:10:7e:6d:
50:73:2d:c4:c4:18:f9:d7:42:ab:5b:49:89:7d:a0:
e2:26:90:e3:44:10:f8:79:cb:de:74:86:53:34:83:
53:48:59:5c:6c:0c:5e:ea:5a:f4:1f:cc:1b:b9:cb:
a8:01:6b:e8:db:52:b7:d5:8c:44:02:cb:d5:99:62:
74:a1:0a:c3:8f:2b:b0:56:c0:fd:69:45:15:26:9f:
a9:c7:e8:11:0e:34:51:39:bb:d9:6f:6d:4a:9e:7d:
12:b0:3c:b1:c7:d1:bd:8f:42:a0:53:04:a4:a2:b1:
8a:52:8a:dc:ad:bf:a7:d0:62:69:8f:be:88:5d:e8:
83:80:51:60:ea:9d:f9:72:c5:33:ca:11:1e:17:bc:
35:e6:47:25:ca:06:48:c8:13:ac:3b:f9:cd:af:7c:
b3:cc:ff:f5:71:ee:29:91:9f:8f:62:7d:3a:34:24:
03:c9:ad:df:28:9a:78:92:8b:f9:b0:5e:86:a6:e2:
a8:96:2d:a7:18:31:9b:19:4b:cb:a7:6a:57:2e:57:
7d:57:a4:b7:22:5a:f0:17:c4:38:84:43:de:b6:55:
9b:19:4e:ea:ee:fb:af:51:f5:d1:20:ec:e9:65:7a:
7b:56:e0:06:52:cb:42:ed:53:b9:c8:56:68:64:7a:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:18:68:E8:49:00:35:55:CD:0B:37:71:14:1C:83:DB:FC:66:6E:F4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vxho6EkANVXNCzdxFByD2_xmbvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:5a1::-2a0e:b107:5a3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a5:42:40:a5:eb:8a:e7:24:b5:b6:ef:6f:8b:c8:81:cb:6a:8e:
38:79:de:ca:09:7d:c9:d5:16:43:61:f8:d0:7e:a5:28:b7:08:
18:53:e2:e1:6b:02:90:e9:37:19:bc:62:41:8f:19:a5:6b:f5:
30:c1:60:45:8d:b7:be:20:b2:b8:e9:7a:65:5c:b5:1b:1e:22:
f2:1a:9f:61:74:d7:de:14:5b:98:43:e0:f6:e5:e2:f7:2f:7a:
1d:05:34:f2:40:83:65:12:d4:e0:a9:80:d7:0c:04:84:75:e5:
4d:78:2a:11:2c:da:85:b6:55:04:f2:ab:b1:3a:cb:8f:e0:97:
bb:71:d2:78:8a:16:65:87:e9:53:74:01:08:b7:c1:d9:ec:01:
65:94:86:f8:5c:48:80:6a:66:d0:3b:74:5d:91:32:66:53:78:
4b:dd:5b:c0:7d:b4:f1:23:b7:3f:ee:a6:43:67:61:f9:e4:ed:
fd:e6:47:a4:77:ae:d4:e0:16:af:a4:a7:03:8f:7e:23:32:b0:
9b:39:ec:84:46:2a:73:86:48:37:ac:f4:cf:17:f5:4f:46:b8:
3f:c2:78:fa:f5:ef:30:49:61:66:47:9b:f8:68:b9:7e:1f:82:
99:7e:af:06:87:da:2a:9c:a1:e6:67:a8:c7:5d:6c:2b:a8:03:
dd:53:c5:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:32 2024 by rpki-client on console-fra.rpki-client.org