Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XZpAoZH0p0eI8axSgv-TogAgeeI.roa
File: XZpAoZH0p0eI8axSgv-TogAgeeI.roa (raw, json)
Hash identifier: DYl6Vx/CXIPN7345GB8wl6jA1HtqL/r7ggoSNCTS1dk=
Subject key identifier: 5D:9A:40:A1:91:F4:A7:47:88:F1:AC:52:82:FF:93:A2:00:20:79:E2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BF161BF9F986B9BE59DFE7AF96374251A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XZpAoZH0p0eI8axSgv-TogAgeeI.roa
Signing time: Tue 21 Nov 2023 10:16:36 +0000
ROA not before: Tue 21 Nov 2023 10:16:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215975
IP address blocks: 2a0e:97c0:e20::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 Nov 2023 12:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:61:bf:9f:98:6b:9b:e5:9d:fe:7a:f9:63:74:25:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 21 10:16:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d9a40a191f4a74788f1ac5282ff93a2002079e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:40:9f:79:43:36:97:a9:ef:c6:37:fb:67:
a9:ed:16:76:6c:23:7c:d0:62:25:77:ac:af:71:9b:
2e:62:b9:65:bb:52:05:32:06:1c:31:16:5c:16:bc:
f8:0c:86:2e:c2:2d:90:b4:dc:a8:d5:a6:e5:25:18:
fd:50:37:2c:92:87:1c:e9:a4:ce:50:89:84:05:f5:
ca:90:c3:74:a2:41:d1:c0:c6:12:3e:2a:6b:90:1a:
65:71:13:4d:bd:7b:08:24:eb:74:74:fb:56:1b:e2:
f6:31:f2:f9:90:ef:a6:2a:57:5c:2b:1c:d9:56:e0:
bb:12:30:8d:dc:5a:75:0d:54:73:9f:a7:90:f5:7e:
85:47:f9:51:ac:fe:0e:b8:59:91:72:a3:3f:e9:a3:
8f:e7:62:0a:44:9f:99:f6:19:5e:13:21:15:1a:5c:
a6:6c:a2:53:90:68:18:7b:89:3b:c5:84:64:28:6b:
d2:75:30:9e:8e:d4:e3:aa:36:7e:e5:6b:96:9d:c8:
79:3b:e9:2a:8d:77:20:78:de:29:1a:3b:9b:c0:f6:
5e:e8:25:38:83:91:18:f5:0a:cd:8b:27:52:20:a1:
ad:ee:61:73:46:84:27:eb:11:05:69:7f:a2:b0:b6:
06:31:12:f1:cc:ef:93:aa:7f:92:be:7e:02:51:b5:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9A:40:A1:91:F4:A7:47:88:F1:AC:52:82:FF:93:A2:00:20:79:E2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XZpAoZH0p0eI8axSgv-TogAgeeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:e20::/44
Signature Algorithm: sha256WithRSAEncryption
8e:c3:1a:a5:c0:c5:21:39:47:2b:ea:35:61:8e:fc:4f:44:92:
7a:d5:62:50:dc:f9:43:1e:e5:6a:18:b9:5d:e9:22:e5:f7:b3:
54:52:62:c7:a7:1e:47:77:3f:4b:e8:e6:86:59:ba:b1:b6:f3:
64:ef:47:12:bf:11:55:fe:ec:36:58:3b:b3:37:c2:a1:0e:07:
14:4f:be:09:b6:89:e0:32:43:5f:ae:c8:88:36:36:d3:20:ea:
2a:e1:06:f6:01:59:71:a6:f0:c6:1b:d2:c5:54:a5:80:86:30:
42:90:8b:da:58:ee:cb:6b:fb:9c:95:08:67:81:6c:6c:1e:81:
7b:d3:40:4b:6d:62:00:9d:57:ff:cf:ef:f8:b0:05:56:cd:d2:
4c:f8:29:e3:49:9e:97:42:11:4f:49:b2:76:3d:a4:d5:d5:f7:
4b:e1:0a:85:48:a0:33:28:6a:b1:65:42:1e:e4:75:96:b4:96:
db:7e:a5:44:14:25:81:25:88:f2:6a:00:36:5f:8e:7d:7b:af:
19:c5:a3:ee:b9:c4:0c:58:e9:fe:f6:8b:af:7c:de:77:60:27:
4d:47:2b:a5:3e:ce:b0:3d:58:71:a8:01:0e:3b:c0:3f:af:6a:
00:ed:6c:b5:2a:a5:90:b4:71:56:e7:55:2a:92:59:a6:c3:42:
64:fe:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:33 2024 by rpki-client on console-fra.rpki-client.org