Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZUjSt-_RgJliTTexXb5tkkjKJHU.roa
File: ZUjSt-_RgJliTTexXb5tkkjKJHU.roa (raw, json)
Hash identifier: NXMiwAvwZ/XCs3uTrZDCWDFY9NteKGMoSd6CKeMTI88=
Subject key identifier: 65:48:D2:B7:EF:D1:80:99:62:4D:37:B1:5D:BE:6D:92:48:CA:24:75
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D58B1C02C155EDF02DD67A971EB7FC0F9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZUjSt-_RgJliTTexXb5tkkjKJHU.roa
Signing time: Tue 30 Jan 2024 04:47:40 +0000
ROA not before: Tue 30 Jan 2024 04:47:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215751
IP address blocks: 2a10:cc40:cc40::/48 maxlen: 48
2a10:cc40:cc41::/48 maxlen: 48
2a10:cc40:cc42::/48 maxlen: 48
2a10:cc40:cc46::/48 maxlen: 48
2a10:cc40:cc4e::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Feb 2024 12:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:58:b1:c0:2c:15:5e:df:02:dd:67:a9:71:eb:7f:c0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 30 04:47:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6548d2b7efd18099624d37b15dbe6d9248ca2475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:6a:f1:81:d2:1b:89:a7:5d:13:b6:37:cb:
16:3a:f4:9b:57:70:9f:aa:bf:1c:c3:ef:eb:47:69:
35:ee:97:0e:e6:d9:2e:fb:5e:eb:7d:65:85:a1:32:
ba:ca:4f:f3:63:0a:69:24:03:ca:02:46:88:ac:b1:
e0:ba:c5:1f:41:41:cc:7c:60:73:1f:38:07:64:b5:
01:f4:c7:bf:a8:f1:ab:b2:5c:fb:b6:f9:a3:21:3a:
cb:f5:f2:41:41:88:27:be:7f:95:e1:21:0b:4a:76:
e4:a2:68:a5:48:df:d5:eb:ad:03:c7:45:c8:99:94:
e5:f6:af:96:65:1b:0a:6d:2c:02:1f:fe:87:13:e8:
61:fd:02:e5:44:71:be:75:9d:ff:a8:7a:9e:f3:e8:
7f:17:4b:c0:6f:20:db:06:e8:03:cc:49:8f:93:3c:
ec:05:81:3d:45:9f:c8:b8:0a:41:fc:2e:d1:b2:4e:
3a:f8:3c:f4:b8:88:a9:ac:59:82:51:e1:ef:68:64:
d3:e2:b6:0d:3e:c8:fd:5a:89:83:5b:37:e8:b5:da:
f1:c4:68:af:bf:c1:84:61:5f:3b:da:ac:31:99:4d:
43:5e:b5:dc:58:5c:14:64:70:d0:e3:72:62:ba:2a:
95:33:b2:91:60:67:a0:4e:00:38:7c:5a:b8:a8:6c:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:48:D2:B7:EF:D1:80:99:62:4D:37:B1:5D:BE:6D:92:48:CA:24:75
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZUjSt-_RgJliTTexXb5tkkjKJHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:cc40::-2a10:cc40:cc42:ffff:ffff:ffff:ffff:ffff
2a10:cc40:cc46::/48
2a10:cc40:cc4e::/48
Signature Algorithm: sha256WithRSAEncryption
40:de:98:1a:90:f3:81:78:b6:fd:ad:40:30:8b:f4:4b:b1:dd:
da:b9:9f:69:a4:13:7f:64:21:ec:94:28:ce:09:e9:09:29:59:
a5:d8:d4:e8:14:8d:3d:a4:8b:e7:0b:af:e9:3b:66:ff:91:c1:
c8:68:27:82:bb:23:d5:05:f9:ad:d1:40:7d:d9:90:72:e2:4c:
de:f7:08:ee:be:84:94:da:10:f7:b6:48:a4:54:c9:bc:41:1a:
d6:48:9d:8b:29:4a:ea:c2:25:ac:bf:d8:0e:d2:e5:dc:14:af:
51:f9:8c:ee:8f:13:c5:17:f3:93:94:47:36:2f:15:81:a8:3a:
7a:14:19:fb:53:11:d3:65:62:30:7a:38:39:4e:91:f6:28:c2:
f2:ab:97:9b:e6:e9:95:ab:ef:90:fb:59:55:b0:6a:04:f7:ca:
42:c7:ab:9a:50:08:a3:40:c1:0a:ff:60:06:fd:80:86:3d:81:
7b:52:ab:a7:51:a1:ef:b2:1f:35:71:b2:35:52:2d:cc:14:36:
00:87:8a:ab:b1:e7:40:78:c3:3b:b6:7c:58:11:ed:02:6b:dd:
7a:46:61:7d:38:9f:7c:55:a5:48:68:d5:0b:72:3f:b5:44:2a:
18:b3:0c:ce:e6:69:19:75:fe:5b:bf:27:f3:c8:6f:cd:7c:0d:
2e:fe:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 14:46:19 2024 by rpki-client on console-fra.rpki-client.org