Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XRSbZNbY2iMwj1H2HR_liZdx2Ao.roa
File: XRSbZNbY2iMwj1H2HR_liZdx2Ao.roa (raw, json)
Hash identifier: 884oL2E439uWNrcbv/pPvx0eLK3FpGGvz4yo0PQRnq4=
Subject key identifier: 5D:14:9B:64:D6:D8:DA:23:30:8F:51:F6:1D:1F:E5:89:97:71:D8:0A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D330B9009E93D9FBBCBE021B44B153744
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XRSbZNbY2iMwj1H2HR_liZdx2Ao.roa
Signing time: Mon 22 Jan 2024 21:20:12 +0000
ROA not before: Mon 22 Jan 2024 21:20:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215828
IP address blocks: 2a0e:b107:27d0::/46 maxlen: 48
2a0e:b107:27d4::/46 maxlen: 48
2a0e:b107:27f4::/46 maxlen: 48
2a0e:b107:27f8::/46 maxlen: 48
2a0e:b107:27fc::/46 maxlen: 48
2a0e:b107:2800::/46 maxlen: 48
2a0e:b107:2804::/46 maxlen: 48
2a0e:b107:2810::/46 maxlen: 48
2a0e:b107:2814::/46 maxlen: 48
2a0e:b107:2818::/46 maxlen: 48
2a0e:b107:281c::/46 maxlen: 48
2a0e:b107:2820::/46 maxlen: 48
2a0e:b107:2824::/46 maxlen: 48
2a0e:b107:2828::/46 maxlen: 48
2a0e:b107:282c::/46 maxlen: 48
2a0e:b107:2840::/46 maxlen: 48
2a0e:b107:2844::/46 maxlen: 48
2a0e:b107:2858::/46 maxlen: 48
2a0e:b107:285c::/46 maxlen: 48
2a0e:b107:2860::/46 maxlen: 48
2a0e:b107:2864::/46 maxlen: 48
2a0e:b107:2868::/46 maxlen: 48
2a0e:b107:286c::/46 maxlen: 48
2a0e:b107:2870::/46 maxlen: 48
2a0e:b107:2874::/46 maxlen: 48
2a0e:b107:2878::/46 maxlen: 48
2a0e:b107:287c::/46 maxlen: 48
2a0e:b107:2888::/46 maxlen: 48
2a0e:b107:288c::/46 maxlen: 48
2a0e:b107:2890::/46 maxlen: 48
2a0e:b107:2894::/46 maxlen: 48
2a0e:b107:2898::/46 maxlen: 48
2a0e:b107:289c::/46 maxlen: 48
2a0e:b107:28a0::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 14:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:33:0b:90:09:e9:3d:9f:bb:cb:e0:21:b4:4b:15:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 22 21:20:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d149b64d6d8da23308f51f61d1fe5899771d80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:62:f4:6b:d7:3b:cf:5b:da:75:94:0a:b1:60:
bf:8d:69:ef:c7:f0:5d:fb:6a:0b:f0:39:d7:28:f2:
4a:1f:16:79:6d:30:06:2b:ed:bd:2e:32:36:9b:76:
c8:e1:ba:29:1e:3f:f3:61:e9:cb:9d:c8:4b:cd:ce:
21:08:f2:a5:97:c6:bb:4a:69:cb:c3:c9:eb:2f:65:
0e:6c:b7:16:d2:d2:f9:5b:82:9b:a8:fe:1e:23:1a:
c2:f3:81:3f:ca:cc:b7:13:c2:74:4d:6b:18:f1:20:
ec:85:81:55:5e:61:ad:4d:6a:9f:43:7e:04:2b:04:
e5:84:57:cb:76:8e:cb:8f:a1:62:eb:3d:cb:0e:d4:
91:3a:2f:cc:7a:4b:d6:63:6d:ed:54:99:19:77:63:
1b:48:e4:06:20:da:c4:cd:51:e3:f9:03:13:20:f0:
69:8e:50:f2:7d:99:ac:3d:88:c6:17:d5:ed:d0:98:
85:ac:e4:35:9c:c4:73:df:39:bf:a6:39:ce:8f:54:
d3:28:6d:d7:61:cd:3d:d7:9c:27:c2:f2:c3:ff:db:
7f:b1:f2:ce:50:6f:2b:34:6f:6d:f3:e1:38:53:82:
4a:42:94:0f:46:9e:fe:35:04:de:cc:12:40:2a:61:
32:ff:39:b0:03:ff:e7:07:ae:dc:ce:5b:23:37:26:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:9B:64:D6:D8:DA:23:30:8F:51:F6:1D:1F:E5:89:97:71:D8:0A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XRSbZNbY2iMwj1H2HR_liZdx2Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27d0::/45
2a0e:b107:27f4::-2a0e:b107:2807:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2810::-2a0e:b107:282f:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2840::/45
2a0e:b107:2858::-2a0e:b107:287f:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2888::-2a0e:b107:28a3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c5:d2:4f:b1:67:9f:2f:94:d0:1a:f0:07:6a:78:b6:ac:01:a5:
66:7b:17:e6:b1:f5:2e:bc:cf:b5:2f:38:08:1d:af:93:c5:35:
16:5c:1e:0b:ad:53:68:25:8f:12:19:aa:b6:ff:6c:d9:bf:e0:
e2:5f:50:28:07:12:24:7b:0f:6c:36:51:71:1c:69:09:64:85:
5a:86:a3:09:3c:5c:ad:aa:34:af:31:f0:42:27:5e:f9:6c:1e:
21:77:73:e5:25:d8:58:db:73:70:c8:59:29:a0:86:2b:00:c4:
89:ee:86:fa:0e:40:55:66:c2:81:59:f8:f1:3f:3d:13:15:68:
79:95:34:91:e2:44:49:d9:0d:cd:c7:1d:9d:6b:b9:d7:b7:21:
4f:40:3e:bc:58:4a:08:c2:80:ee:22:69:d2:d4:c7:34:d7:14:
46:45:e9:42:8a:c0:98:f0:a5:de:4e:4f:a2:38:85:24:66:5a:
ad:ad:f6:83:0d:7c:52:60:ce:0a:fb:8a:8f:df:19:b8:b5:c6:
36:04:89:f1:6d:c8:f1:41:11:6b:36:1e:80:2a:d0:0e:e4:79:
9a:66:a8:1a:03:75:c5:cd:fd:c1:14:4a:10:e8:20:50:22:48:
ce:66:f2:1a:a8:40:1a:44:ab:99:be:f7:45:d2:d8:bb:5a:c1:
34:0d:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 17:55:30 2024 by rpki-client on console-ams.rpki-client.org