Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zc-qNEHUDYkHQVJBfrcBxhHPBws.roa
File: Zc-qNEHUDYkHQVJBfrcBxhHPBws.roa (raw, json)
Hash identifier: JT1N6XtypkaW7JC4VGzjkFhqcpcziK9w5l43D78MIpk=
Subject key identifier: 65:CF:AA:34:41:D4:0D:89:07:41:52:41:7E:B7:01:C6:11:CF:07:0B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191B8319665F091077BCD7E3E3C0974AB22
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zc-qNEHUDYkHQVJBfrcBxhHPBws.roa
Signing time: Tue 03 Sep 2024 14:02:23 +0000
ROA not before: Tue 03 Sep 2024 14:02:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216110
IP address blocks: 2a0e:97c1:8a20::/45 maxlen: 48
Validation: Failed, certificate revoked on Wed 18 Sep 2024 02:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:31:96:65:f0:91:07:7b:cd:7e:3e:3c:09:74:ab:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 3 14:02:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65cfaa3441d40d89074152417eb701c611cf070b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:ab:e0:f9:63:28:eb:b9:c4:ab:ec:e6:d4:
8a:82:d7:de:71:22:ea:9b:a1:72:81:5c:ff:17:f7:
c8:88:2c:40:75:c6:28:64:1a:c3:35:29:72:9e:bd:
ef:be:07:cd:f8:8a:13:e2:28:17:08:16:43:7a:c9:
e5:45:de:b4:ce:73:57:36:7c:1e:e1:dd:57:a2:d8:
64:69:37:71:4d:ed:04:57:11:aa:3b:64:e3:0b:9e:
7b:28:0c:c8:f3:93:5f:ac:56:48:06:0f:67:cf:77:
f0:05:03:da:79:37:e4:12:23:d9:89:4e:87:5a:41:
39:91:91:a4:6a:cd:15:39:cb:ef:6d:58:1a:95:ff:
f2:e1:1a:6b:65:d2:be:9f:39:64:86:1d:11:b2:88:
dd:52:a1:03:b0:56:5a:35:14:51:fd:ad:9d:5e:51:
7c:f2:a2:51:a7:80:1c:b0:eb:25:9b:d1:57:82:0e:
b1:f6:47:78:2f:eb:ac:3a:cf:6e:8d:9f:93:40:17:
a9:09:5f:25:10:b5:65:73:8f:f4:0c:9f:a8:08:c9:
ea:00:04:d9:8d:23:29:94:f9:bd:a8:00:1b:f5:2b:
68:08:45:b9:59:92:e4:17:ff:39:c7:07:1f:c0:63:
52:2b:57:32:9c:2d:8f:f6:29:cc:fc:91:6a:ec:34:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CF:AA:34:41:D4:0D:89:07:41:52:41:7E:B7:01:C6:11:CF:07:0B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zc-qNEHUDYkHQVJBfrcBxhHPBws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1:8a20::/45
Signature Algorithm: sha256WithRSAEncryption
36:f8:53:ab:9c:38:6d:d7:6f:e6:02:9f:bc:67:22:ae:b2:ee:
75:cb:1c:f9:97:cb:03:7d:fc:2b:f6:73:2e:da:ac:80:8a:df:
27:e6:ce:68:9d:9c:7b:67:aa:c4:8b:e5:da:74:42:89:92:71:
ec:4b:b9:69:96:46:7c:66:4d:19:d3:dc:9a:8e:02:00:bc:fb:
57:60:f8:d8:70:34:dc:a1:08:bf:45:51:06:ea:86:74:42:e0:
56:41:e2:c8:b7:cf:75:f1:6e:66:5d:fc:b1:64:08:59:9d:44:
4b:fe:42:15:de:2a:7f:7f:bb:01:78:ac:22:8c:0b:dd:2e:ea:
41:1c:49:88:11:83:c2:a9:b6:be:0b:1a:dc:9e:cd:39:df:93:
5b:69:cd:25:7e:eb:78:55:63:6c:d5:f3:2d:5e:7e:b5:33:a1:
94:73:25:a8:a1:d1:f1:72:37:7e:df:c3:0f:3f:00:95:b1:81:
78:fc:bf:97:4d:8a:47:49:06:2b:f9:13:47:ff:8b:b6:cc:fd:
33:05:9f:fe:d2:cc:2f:0c:16:ba:95:27:bc:f0:65:09:83:84:
42:bb:fe:e0:f7:01:ad:4a:96:33:96:f2:fd:83:0f:76:30:6a:
05:4d:a8:14:02:ef:c2:59:37:ab:eb:15:9f:89:28:a3:b7:ce:
76:34:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 06:35:49 2024 by rpki-client on console-ams.rpki-client.org