Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_J5JNLVdTRMJIN9ExCgm6jfLPuI.roa
File: _J5JNLVdTRMJIN9ExCgm6jfLPuI.roa (raw, json)
Hash identifier: mJ6iC7PyEmA+weYfdRX9Wq8Ux/3PgYJCnQo9t7ZYEf0=
Subject key identifier: FC:9E:49:34:B5:5D:4D:13:09:20:DF:44:C4:28:26:EA:37:CB:3E:E2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0192BB28AB77DFDE03000E135B51F4BD37F6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_J5JNLVdTRMJIN9ExCgm6jfLPuI.roa
Signing time: Wed 23 Oct 2024 20:54:17 +0000
ROA not before: Wed 23 Oct 2024 20:54:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214194
IP address blocks: 2a06:de01:160::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 16 Nov 2024 12:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bb:28:ab:77:df:de:03:00:0e:13:5b:51:f4:bd:37:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 23 20:54:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc9e4934b55d4d130920df44c42826ea37cb3ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:70:bf:a0:1d:2c:d1:f8:4a:3a:98:39:b3:
87:ff:5c:3a:f5:7d:79:7a:b5:7a:7b:c5:36:02:28:
ba:e5:06:09:fe:a7:8e:1c:2d:c8:a6:ea:b1:50:7b:
e0:f3:44:fd:b0:75:0a:68:3e:bf:17:3c:1f:22:c2:
0f:79:49:db:86:8b:4e:81:33:12:84:4e:2c:d5:dd:
5c:06:1a:90:d8:f1:35:89:f2:96:1c:83:5b:21:76:
bf:e5:ae:b8:43:c3:20:e4:a8:b8:fa:45:7a:49:86:
15:8e:12:bb:2b:3d:f7:9e:6f:2b:6c:e7:51:9b:2d:
b2:4e:de:15:0c:1f:39:b1:da:88:6d:a1:fc:c4:f9:
02:33:2b:7e:33:d1:28:6a:07:a5:dc:92:92:39:1f:
1f:de:13:b1:4b:c0:c0:a0:d3:e8:68:60:7f:d2:05:
31:c0:bb:00:9e:a8:8a:c3:e9:32:63:8f:69:77:c1:
2a:d9:10:92:54:93:52:17:3b:1b:bc:a0:c4:2f:9a:
b7:ca:22:c9:1f:d8:e2:ee:6d:9d:71:b8:88:57:5a:
50:3d:d7:80:19:78:68:4d:7a:e6:02:43:5b:9b:cb:
83:f1:0d:58:4b:0a:09:b9:4c:1d:e2:3a:1e:93:e3:
d3:a2:28:60:95:a0:c4:33:15:ec:3d:9f:fa:20:cd:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:49:34:B5:5D:4D:13:09:20:DF:44:C4:28:26:EA:37:CB:3E:E2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_J5JNLVdTRMJIN9ExCgm6jfLPuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:160::/44
Signature Algorithm: sha256WithRSAEncryption
60:1e:a8:46:35:06:0c:28:1e:0a:f2:d4:26:de:b4:7c:7f:e0:
90:da:8b:b3:bc:5e:dd:37:8a:34:8b:8e:a4:f4:e2:ec:49:41:
cc:17:62:dc:2c:06:17:52:a4:57:19:c4:8e:b4:01:c1:db:a9:
08:9b:a4:bc:21:78:70:9d:07:0a:27:05:34:17:51:05:bf:f5:
4e:61:75:3e:39:eb:71:54:eb:dc:f0:dc:7d:bd:44:91:a3:a9:
5e:5d:f8:d9:ab:37:7f:f5:bb:a7:c1:db:e5:93:38:ec:ce:fa:
bf:23:a7:8a:11:8e:d8:a3:e2:cf:33:bd:1c:e1:ff:8a:82:ed:
1d:6f:d6:22:2d:fd:f4:5e:7a:50:d2:2f:4a:18:1d:b2:7b:a6:
0f:81:56:bd:eb:3e:90:d3:9e:0f:4c:02:c8:3a:27:fb:36:d4:
22:8c:08:61:32:55:d0:cc:b9:24:40:c1:4f:14:43:07:60:a6:
36:8e:4f:0a:26:59:01:49:6f:83:0e:ab:18:9c:0b:2c:1c:c4:
77:88:da:4a:9a:15:9f:b6:23:f2:1f:bd:3d:9b:65:71:d2:dd:
9a:64:46:fb:01:f6:9f:53:ce:31:98:0a:c8:27:9e:d7:db:0e:
73:95:94:da:ef:72:4a:2b:d5:fa:38:19:35:51:b6:3f:ba:c3:
6f:ee:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 13:54:38 2024 by rpki-client on console-fra.rpki-client.org