Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_1ibNkDlmudc3myNNDTpdJd6wmY.roa
File: _1ibNkDlmudc3myNNDTpdJd6wmY.roa (raw, json)
Hash identifier: tk8F9UYc2hHiLqDqaxjoefBLHFpnonJT+YJXyuBy/0k=
Subject key identifier: FF:58:9B:36:40:E5:9A:E7:5C:DE:6C:8D:34:34:E9:74:97:7A:C2:66
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01877F5F5C02A4C12196A2333DA1AFC225C1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_1ibNkDlmudc3myNNDTpdJd6wmY.roa
Signing time: Fri 14 Apr 2023 10:46:08 +0000
ROA not before: Fri 14 Apr 2023 10:46:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200879
IP address blocks: 2a0e:b107:2090::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:5f:5c:02:a4:c1:21:96:a2:33:3d:a1:af:c2:25:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 14 10:46:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff589b3640e59ae75cde6c8d3434e974977ac266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ca:60:9a:79:02:42:df:9d:bd:f0:d8:d8:91:
75:35:6f:a9:aa:ff:f1:d7:1d:0b:fe:d3:8f:d2:be:
79:e9:e1:ca:e2:f0:2a:d6:72:c5:d0:36:8b:ad:05:
e2:8c:a0:f8:b2:9f:af:5f:55:ba:b3:1d:e5:10:73:
2c:dd:53:85:72:0d:54:28:a2:1a:16:43:11:42:66:
01:ee:80:c8:1b:d1:54:80:24:bd:54:e0:39:76:b3:
94:5a:a4:07:14:a2:c4:52:90:80:06:80:6f:e0:06:
c4:2d:39:87:b5:8b:cc:e3:17:25:18:7a:68:93:c4:
fb:a0:72:f8:be:76:4a:ea:b9:d5:75:f8:5e:3e:68:
2e:5d:52:4b:ca:26:20:0e:1d:15:59:d1:06:5c:2c:
12:a5:58:00:04:46:63:2d:ce:02:2b:66:74:25:18:
54:c3:58:a1:37:18:74:e4:10:a4:43:c7:74:80:78:
e8:9c:5e:c7:0c:6e:fc:74:e2:d4:79:20:44:f2:89:
3c:18:c8:b7:37:97:76:1c:83:4f:52:97:57:88:07:
31:07:63:6c:d0:0d:3d:d5:23:c4:85:2b:58:a8:38:
f3:b9:64:96:e5:64:2a:ef:3b:a3:c5:a6:2d:cd:84:
a0:ca:15:1a:b1:35:3f:73:d5:f2:03:c1:a8:aa:8d:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:58:9B:36:40:E5:9A:E7:5C:DE:6C:8D:34:34:E9:74:97:7A:C2:66
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_1ibNkDlmudc3myNNDTpdJd6wmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2090::/48
Signature Algorithm: sha256WithRSAEncryption
a9:9d:01:53:a6:51:1e:fd:7d:ca:90:df:02:6c:34:97:55:f3:
54:66:19:cf:bf:d3:f0:7b:ee:26:a1:fd:04:38:c9:5e:76:fa:
a0:df:be:36:6a:00:02:4e:31:d7:c2:83:6a:7b:6f:8e:39:d2:
5e:d9:d4:69:84:42:c2:3a:8f:b7:cd:81:9e:66:77:b3:5d:aa:
0c:e8:9f:ce:34:15:2b:9f:63:43:19:f7:91:8e:6f:b7:1f:eb:
bf:d5:b7:85:c7:46:1e:d2:b2:d4:f5:4a:f7:91:09:7f:5d:ff:
d2:06:13:e0:91:7e:48:b2:0d:3c:22:4e:3a:4b:c1:4c:52:3e:
17:08:98:0c:af:e1:4c:2b:77:c7:3f:f0:60:36:53:1d:1f:b0:
b5:62:e1:14:73:01:6f:6c:ab:e6:2c:6b:b8:5b:0c:81:be:17:
c1:f2:b0:7d:d3:b2:6a:bb:ef:14:4b:1b:a6:cc:d1:1f:94:38:
56:4f:0a:ce:c8:25:b4:13:6f:e7:94:2d:78:9b:f1:20:45:88:
97:3a:2c:ce:f5:3a:b7:d4:18:0c:5f:4f:90:2d:dc:3d:61:5c:
8a:47:2b:46:f7:85:4b:a3:1f:b9:73:47:e5:af:a4:0b:5d:c3:
4a:61:29:1f:30:23:09:11:f6:bb:9c:32:50:c8:4b:69:b3:fd:
a8:48:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:34 2024 by rpki-client on console-fra.rpki-client.org