Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aR-rdtv3iYPSr_cTxJub_XlE9VA.roa
File: aR-rdtv3iYPSr_cTxJub_XlE9VA.roa (raw, json)
Hash identifier: hB+9As2jpUTa1CVaNQ3ix/dGi5vkD6ysEoNtmRZbA74=
Subject key identifier: 69:1F:AB:76:DB:F7:89:83:D2:AF:F7:13:C4:9B:9B:FD:79:44:F5:50
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCF4C6D32159C12D78B8808FE21344
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aR-rdtv3iYPSr_cTxJub_XlE9VA.roa
Signing time: Tue 02 Jan 2024 10:34:13 +0000
ROA not before: Tue 02 Jan 2024 10:34:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200516
IP address blocks: 2a0e:b107:f60::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Jan 2024 22:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f4:c6:d3:21:59:c1:2d:78:b8:80:8f:e2:13:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=691fab76dbf78983d2aff713c49b9bfd7944f550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:27:f4:31:48:fc:53:0a:73:cb:3e:cb:dd:97:
62:46:6f:7c:86:1a:fd:79:8c:62:0b:51:a5:88:d6:
26:ad:c8:9b:7f:8e:ab:57:8e:28:23:36:74:36:fc:
4a:b3:b7:45:c3:24:67:bb:ff:28:45:39:26:84:a3:
0e:3e:7c:06:69:28:0e:a5:88:e8:05:b7:22:73:d6:
61:8a:58:7a:28:b9:9d:77:fe:99:b3:b1:0b:75:b2:
5e:39:d2:94:eb:03:54:47:e9:03:37:73:cd:0f:ab:
d9:b7:48:cc:e9:5d:ef:19:6a:95:fb:79:ab:95:8e:
31:c8:b9:6d:77:96:81:16:16:04:b8:73:c4:5b:cc:
6c:04:42:b1:74:45:a2:4f:b2:36:42:50:f7:5e:12:
b6:ee:3f:08:c8:68:da:29:d8:01:6f:99:33:00:95:
82:87:8f:a6:03:94:fc:94:1f:2c:2f:d9:48:a1:ce:
3a:e1:04:3b:17:9a:8a:8f:69:6e:a7:0d:9d:56:1c:
d3:59:ef:58:68:78:57:ab:2a:2d:ff:7b:e1:68:b3:
6d:c6:4e:c1:8e:22:17:ef:22:77:97:33:1a:cd:56:
5e:d7:8e:b2:1b:a6:d2:2c:1f:18:13:16:6c:b5:a7:
25:b2:5e:7e:c9:7f:f3:5f:91:c5:4e:e4:54:d7:5d:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1F:AB:76:DB:F7:89:83:D2:AF:F7:13:C4:9B:9B:FD:79:44:F5:50
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aR-rdtv3iYPSr_cTxJub_XlE9VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f60::/44
Signature Algorithm: sha256WithRSAEncryption
9b:a7:68:b5:52:08:9e:24:f8:b5:21:a4:01:ab:71:4b:b4:b3:
f4:c8:00:13:2e:77:42:e4:55:de:8d:ee:28:a9:f9:76:10:3f:
ce:d9:bf:11:0e:4b:eb:80:fa:27:95:68:28:d0:97:e8:97:df:
f7:03:d9:ad:84:3f:ea:da:2b:bc:a6:1f:14:00:c7:b9:72:2a:
a7:82:60:99:b9:65:6f:93:e8:df:ca:49:00:96:4e:1d:15:c6:
8c:be:2f:e9:33:7c:2e:c2:22:c1:b3:d0:5f:37:7a:e4:d4:ab:
ee:a8:21:f7:bd:4f:f3:93:54:0b:bd:e6:99:d2:36:25:db:99:
36:45:e4:ff:d7:bb:bb:dd:05:4f:2e:e2:fa:91:1a:85:ad:17:
93:46:76:f4:95:d7:0b:eb:5d:37:7b:7d:de:a2:50:50:e1:4a:
52:d5:ac:a1:c6:35:9d:d8:53:d0:76:fb:06:3b:7f:af:26:26:
02:6c:a7:cc:63:4d:f3:53:a2:bc:6c:78:ee:59:fa:a3:95:28:
bb:96:aa:46:1b:ba:44:43:71:72:53:06:03:a1:60:57:41:7d:
0e:58:99:ea:4b:73:1f:d9:7e:f8:5c:1c:2a:50:b7:5b:53:97:
13:f2:fa:fa:34:32:c9:d0:48:03:60:00:4b:80:60:3a:30:bc:
9e:e7:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 23:33:15 2024 by rpki-client on console-fra.rpki-client.org