Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X6FDBbHAItc1wbPjyLrkrRIg05U.roa
File: X6FDBbHAItc1wbPjyLrkrRIg05U.roa (raw, json)
Hash identifier: neESrEHyMoSMJQxa4J/BAmKrYTIdsncZGbkH2CAvE30=
Subject key identifier: 5F:A1:43:05:B1:C0:22:D7:35:C1:B3:E3:C8:BA:E4:AD:12:20:D3:95
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01865DAA784177FA01CEF0501DE2A199CC37
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X6FDBbHAItc1wbPjyLrkrRIg05U.roa
Signing time: Fri 17 Feb 2023 04:38:18 +0000
ROA not before: Fri 17 Feb 2023 04:38:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51939
IP address blocks: 2a0e:97c0:5c0::/44 maxlen: 48
2a0e:97c0:5c0::/48 maxlen: 48
2a0e:97c0:5c3::/48 maxlen: 48
2a0e:97c0:5c1::/48 maxlen: 48
2a0e:97c0:5ca::/48 maxlen: 48
2a0e:97c0:5c2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Jul 2023 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5d:aa:78:41:77:fa:01:ce:f0:50:1d:e2:a1:99:cc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 17 04:38:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa14305b1c022d735c1b3e3c8bae4ad1220d395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:19:7c:ed:a2:f6:70:f2:30:5d:19:6a:13:
e4:c5:20:4b:53:39:69:8c:31:63:5b:21:d9:f7:b7:
8f:65:cd:02:42:64:54:bc:02:21:42:db:ca:d0:49:
be:1d:19:5b:7e:61:e8:81:21:76:0f:39:7b:c7:4c:
2d:6b:37:ca:92:10:51:cd:4d:57:9d:a0:69:76:16:
d8:d0:82:03:d8:40:30:c9:f8:2f:bf:a5:a7:09:24:
eb:8b:e3:65:6c:f7:31:90:96:0c:84:81:90:a6:b7:
bd:48:1e:0a:b4:8b:b4:16:2a:ee:41:87:1c:fb:be:
eb:ce:56:02:5f:04:6e:11:0e:69:78:d3:38:de:ee:
3f:b2:f8:bf:12:6b:df:0a:9b:12:51:f4:7d:bd:66:
ad:f9:d8:49:07:b5:49:ac:3c:11:54:c8:2c:c1:17:
9a:b0:34:6c:8a:37:bc:bb:43:26:e6:36:02:79:7b:
f7:2d:48:ca:76:ad:fb:b3:25:e2:b7:19:81:a6:a5:
b8:13:a0:e0:1a:25:c7:21:1d:29:b9:b1:f9:4b:be:
33:99:f7:fa:c2:90:98:59:21:8e:0a:98:76:bd:41:
58:d1:5b:17:bb:a3:4a:e2:f1:1e:49:7e:4e:28:4d:
93:17:22:11:16:78:74:c4:52:56:04:ea:5c:df:fe:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:43:05:B1:C0:22:D7:35:C1:B3:E3:C8:BA:E4:AD:12:20:D3:95
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X6FDBbHAItc1wbPjyLrkrRIg05U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5c0::/44
Signature Algorithm: sha256WithRSAEncryption
44:2f:21:40:33:4f:58:2b:d2:f4:e3:cd:3c:ca:32:bc:d6:18:
c7:2b:37:4f:50:45:45:15:82:6c:65:d8:e5:64:33:38:52:72:
f3:87:fd:57:22:db:db:b9:6c:6b:26:a8:25:1c:4d:8c:1b:d4:
9c:06:86:c8:70:92:cd:27:65:c4:33:f4:84:2b:03:70:46:95:
c3:d8:98:35:33:7e:e1:86:68:0b:1e:72:c5:18:63:fa:2c:2b:
e7:2c:07:8e:5f:7c:b2:01:17:9c:f1:96:e7:18:7f:9b:a2:79:
cc:f8:2f:bc:a2:a4:93:c7:02:ab:88:5d:56:19:5d:35:7d:71:
b3:56:6c:20:c6:47:71:86:27:ca:19:91:91:cc:5f:b0:b9:4c:
8c:5b:b6:53:26:bb:63:f8:ce:76:ec:9a:fe:ac:22:c2:43:78:
f4:84:0d:c2:9d:8f:50:bc:71:2c:f5:dd:f4:a8:88:9f:b1:60:
8b:d0:65:90:ac:38:be:7a:03:b2:62:5c:f1:2b:0e:a6:b2:0f:
dd:ae:c3:64:eb:c1:0d:0b:90:41:72:02:cc:c0:41:88:ea:18:
25:3b:73:f5:0e:f0:3d:b1:25:d2:cb:3e:47:24:bb:f9:7a:b7:
c5:32:39:da:ca:9d:a7:7e:72:33:c0:df:9b:03:0b:cf:56:c2:
35:f0:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:05 2024 by rpki-client on console-ams.rpki-client.org