Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_xoXj07oqESGuJNWCPITiehqtL4.roa
File: _xoXj07oqESGuJNWCPITiehqtL4.roa (raw, json)
Hash identifier: D8ItAQjDGeyzduqdfOx1byi0Bao+Qwsg7tc3R9JnLp0=
Subject key identifier: FF:1A:17:8F:4E:E8:A8:44:86:B8:93:56:08:F2:13:89:E8:6A:B4:BE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185A9094C68EC5F1F7784B0B26DC11F1F55
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_xoXj07oqESGuJNWCPITiehqtL4.roa
Signing time: Fri 13 Jan 2023 02:50:36 +0000
ROA not before: Fri 13 Jan 2023 02:50:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:b107:19a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Jan 2023 16:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a9:09:4c:68:ec:5f:1f:77:84:b0:b2:6d:c1:1f:1f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 13 02:50:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff1a178f4ee8a84486b8935608f21389e86ab4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:23:3f:db:82:54:3e:f4:be:1f:5f:19:67:
56:5f:fd:0e:3e:0b:8e:f5:39:11:b7:15:ea:1f:49:
0f:bc:e4:c6:83:34:b1:3a:7f:53:73:d0:de:2e:d2:
91:16:b1:d4:95:a0:87:64:e5:be:1f:e3:86:eb:e0:
5a:a0:fe:ae:2a:f6:98:eb:48:5a:43:51:62:44:70:
71:df:a2:ce:7c:ae:49:f4:36:8c:70:24:8a:dd:89:
fd:f4:63:b6:71:f3:eb:54:b2:8f:f4:b7:09:f6:5f:
dc:d7:88:75:aa:f2:a6:49:23:3b:b0:57:b3:d1:d2:
77:f6:01:4e:6b:30:c0:d8:17:ce:58:67:fb:72:ff:
de:fe:ef:2d:0e:e4:ed:c2:76:4b:59:06:dc:09:da:
b8:bd:14:32:48:ad:f3:80:c4:8e:d4:54:48:de:f8:
04:bb:a0:2e:5f:db:56:37:14:3b:e4:1d:3b:bf:fa:
47:bd:0f:1a:97:9b:27:35:e4:97:5c:9d:b2:6b:04:
b6:a3:83:af:63:f0:e9:d4:0e:41:f3:bd:d6:bf:6b:
b9:f3:d4:83:7b:0e:c2:c6:7d:2a:79:70:28:5f:db:
43:1f:a1:f2:bf:ab:76:da:7b:ce:24:11:1b:06:cc:
57:5b:b4:0c:fb:36:3c:12:18:9c:ca:8d:bd:8e:6c:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1A:17:8F:4E:E8:A8:44:86:B8:93:56:08:F2:13:89:E8:6A:B4:BE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_xoXj07oqESGuJNWCPITiehqtL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19a0::/48
Signature Algorithm: sha256WithRSAEncryption
39:88:42:3e:c8:16:0a:9e:8e:ad:d5:54:7e:ad:d8:1a:76:f2:
0d:2b:b1:18:6d:9b:59:c4:94:a2:fc:49:75:d4:e7:e6:22:f9:
6e:c3:99:30:c9:36:19:eb:c2:ad:10:e9:df:34:2b:91:1c:ba:
b3:a0:94:94:8c:76:3a:eb:b9:c6:2f:1c:c9:7c:99:ae:b8:f5:
72:10:aa:5a:67:e1:d9:ed:b2:81:fc:f3:92:4e:45:61:19:20:
15:a0:ce:8d:71:c6:de:ab:5a:49:3b:3b:79:fb:9c:13:5f:0e:
69:13:71:1e:08:a9:58:f5:74:69:41:2c:12:3f:e5:1f:8f:77:
4b:cc:98:a1:63:b4:e5:f1:a9:e3:67:7a:98:a3:e9:cb:71:e7:
de:61:dc:a1:6a:3e:9b:de:bd:b5:fd:9d:0b:f6:a6:d0:f0:3b:
c0:32:de:21:1f:54:fc:1c:cf:b6:bd:24:bf:7e:fc:dc:3b:87:
43:5b:00:2b:7f:8e:ca:df:83:f8:07:0a:4d:c7:5e:7c:9b:77:
29:0f:50:2a:fb:ac:46:45:49:f1:72:52:8f:7a:09:b5:8b:dd:
88:4f:9e:36:10:41:24:19:07:e8:00:12:7a:0a:15:e1:30:c0:
1d:14:62:ee:9e:05:af:13:02:53:01:a6:14:d3:50:30:4c:95:
a4:17:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:06 2024 by rpki-client on console-ams.rpki-client.org