Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YyOKFnoP-C3ZbhoGZwFs-XwbN8Q.roa
File: YyOKFnoP-C3ZbhoGZwFs-XwbN8Q.roa (raw, json)
Hash identifier: caDbT1I4pWtoeaByki+hIHKhSK7cKYs3crqDSPjYbmI=
Subject key identifier: 63:23:8A:16:7A:0F:F8:2D:D9:6E:1A:06:67:01:6C:F9:7C:1B:37:C4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCF19D5D64915383762024E53E69A7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YyOKFnoP-C3ZbhoGZwFs-XwbN8Q.roa
Signing time: Tue 02 Jan 2024 10:34:12 +0000
ROA not before: Tue 02 Jan 2024 10:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200099
IP address blocks: 2a10:cc42:1a8::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 23:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f1:9d:5d:64:91:53:83:76:20:24:e5:3e:69:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63238a167a0ff82dd96e1a0667016cf97c1b37c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:81:75:44:5a:61:a6:0e:5b:24:e5:48:cc:
16:6e:0f:03:af:39:cf:27:90:e1:5a:b8:cf:6b:28:
38:5e:e9:ea:2f:2c:f9:aa:32:21:55:5c:5a:1b:e1:
6f:59:59:3e:5a:0c:94:63:a0:34:1d:fe:c0:b5:d9:
ca:1a:5a:fe:66:fb:29:21:e0:8d:e3:51:95:54:c0:
0e:3c:d3:29:51:07:7e:87:7a:e8:bd:45:5e:c5:4e:
d3:18:1f:f8:41:17:b7:e9:c1:d8:18:71:84:e5:d4:
5d:68:48:81:ad:5d:c9:82:f4:66:5c:4a:66:3f:f4:
e0:7d:8d:07:86:90:ec:93:95:b3:e1:3b:a0:7d:2c:
0e:b0:b7:57:71:d1:40:8b:b6:52:d1:bd:c3:30:a5:
33:b4:48:83:45:65:4b:51:ec:3f:b0:8c:58:fe:1f:
c1:db:e9:dc:5e:28:58:e6:f3:60:13:1c:f2:4e:04:
e6:d4:05:6d:fc:c4:b5:d6:f1:9f:ba:e4:d4:77:a2:
ae:de:f6:ef:6b:12:c3:b2:af:7e:ec:66:0d:dc:47:
f3:91:34:09:6b:bd:3e:04:2b:83:16:f3:e1:f1:0a:
de:0e:86:96:0f:ea:3b:26:b7:fd:13:a3:b0:6d:12:
79:26:b3:c6:7d:4c:72:1a:99:16:b1:c9:17:e6:90:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:23:8A:16:7A:0F:F8:2D:D9:6E:1A:06:67:01:6C:F9:7C:1B:37:C4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YyOKFnoP-C3ZbhoGZwFs-XwbN8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc42:1a8::/48
Signature Algorithm: sha256WithRSAEncryption
78:8d:35:bc:7c:40:3d:87:f3:9f:7f:6f:5c:98:e7:05:50:f2:
a5:77:80:61:1e:34:cf:c9:95:20:47:7a:4b:f7:06:cd:2d:fb:
7a:f6:29:6e:12:b7:25:c0:9c:3e:63:06:11:1e:d5:8d:35:36:
d6:0a:39:92:76:af:b6:b7:70:ea:95:99:bd:a6:47:1b:61:fb:
ed:90:5b:e4:ee:5b:eb:51:0c:46:c6:28:67:d7:ab:2b:88:24:
f6:5a:3c:07:0d:e7:4f:2a:2d:61:24:3f:62:22:1d:46:3c:c0:
41:e4:c6:35:b4:f1:cf:bf:02:4c:29:59:a4:eb:f0:ef:11:ec:
35:21:2b:c3:1b:bb:90:e7:b2:92:9e:f1:5c:df:ad:4c:14:e9:
00:1e:90:74:c7:9d:3f:f7:7a:92:8a:55:03:1f:c7:79:87:b8:
20:9b:c9:ad:ef:1a:85:b3:cd:11:42:0c:9f:bb:1a:05:73:87:
20:22:07:51:82:03:13:54:dc:b3:f0:f2:5e:e6:21:10:96:77:
b2:05:75:2c:d0:19:31:d2:5a:36:e4:79:5e:1b:bb:22:05:ac:
b0:0e:87:76:6c:6b:13:ff:8d:6d:b5:05:a2:5e:e0:d0:91:36:
c1:65:b1:7f:cc:9a:0a:d2:29:19:5f:71:ca:e4:03:c6:1d:ec:
67:4e:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:11:17 2024 by rpki-client on console-fra.rpki-client.org