Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aa6d7m6bXqgYC4V82PNEU-KxSAo.roa
File: aa6d7m6bXqgYC4V82PNEU-KxSAo.roa (raw, json)
Hash identifier: UBupAQc5PbMHorrs0pxBg2XTyt/5Xc7s+S5JFic3N2s=
Subject key identifier: 69:AE:9D:EE:6E:9B:5E:A8:18:0B:85:7C:D8:F3:44:53:E2:B1:48:0A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D0E54493C216DE49F2A001BE8FF263F56
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aa6d7m6bXqgYC4V82PNEU-KxSAo.roa
Signing time: Mon 15 Jan 2024 18:13:41 +0000
ROA not before: Mon 15 Jan 2024 18:13:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216026
IP address blocks: 2a0e:97c0:585::/48 maxlen: 48
2a0e:97c0:580::/48 maxlen: 48
2a0e:97c0:583::/48 maxlen: 48
2a0e:97c0:586::/48 maxlen: 48
2a0e:97c0:581::/48 maxlen: 48
2a0e:97c0:584::/48 maxlen: 48
2a0e:97c0:582::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Jan 2024 15:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:54:49:3c:21:6d:e4:9f:2a:00:1b:e8:ff:26:3f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 15 18:13:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69ae9dee6e9b5ea8180b857cd8f34453e2b1480a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:40:dd:38:52:de:d5:3b:28:45:50:3c:fb:
39:84:be:96:46:bf:d7:f7:0a:31:8d:ef:f8:d2:f3:
1f:67:bc:e6:81:e0:e9:16:9a:ed:18:25:1d:fa:56:
49:2d:ce:d9:8e:6c:ec:56:28:a1:8c:ac:52:4a:d8:
11:9b:e4:84:86:6e:ee:39:e9:79:ac:0f:0a:2e:ed:
b0:23:cd:39:9e:33:af:17:b5:26:98:4e:10:f9:3e:
3d:d8:0c:c1:7d:52:c0:cc:a5:f5:96:96:71:44:62:
a6:e9:71:ee:b8:b5:69:5b:92:64:1a:ab:5f:8f:be:
f2:fe:fc:89:10:b0:4a:f8:55:a3:07:68:de:2b:12:
b0:27:d5:31:83:48:c2:f3:18:a2:71:38:63:9c:ee:
3b:9e:e2:05:b3:24:78:47:8f:ea:0f:86:d1:8f:5b:
9b:96:8e:13:49:86:c3:ff:7d:14:d2:a6:8c:bf:ab:
58:ec:c1:4e:de:57:21:ce:4e:a1:4d:86:93:b1:3e:
53:0d:a1:d2:03:bc:7b:d4:6e:4b:2b:3a:7b:88:10:
7f:25:63:71:c5:b0:83:6d:20:f5:b5:24:17:9c:fc:
9f:6b:db:90:98:47:6b:ad:8b:7a:ca:5c:9b:a7:c3:
42:75:66:82:46:69:33:6c:f6:c3:7b:38:be:1e:61:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AE:9D:EE:6E:9B:5E:A8:18:0B:85:7C:D8:F3:44:53:E2:B1:48:0A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aa6d7m6bXqgYC4V82PNEU-KxSAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:580::-2a0e:97c0:586:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
97:8a:79:ba:dc:46:c8:d0:1c:7d:9e:31:8f:76:1f:36:40:62:
7c:ad:b7:4b:78:9e:bf:20:04:ab:37:5d:57:f7:bd:93:57:fb:
13:30:3d:fa:2b:c4:37:f4:80:e1:5d:fc:54:70:18:03:d7:bd:
75:7c:b9:d4:a9:2d:fb:23:49:54:4c:d9:ba:56:62:e6:ed:1e:
eb:a7:61:42:9f:83:44:ea:4d:80:39:26:4c:87:b3:7d:ed:d2:
f8:bd:e4:1f:42:6b:75:8c:35:c4:1c:08:af:a1:56:37:5d:ac:
19:a4:60:61:59:cc:ff:fe:34:eb:19:54:ff:fe:d2:28:96:39:
d2:94:b3:a4:84:ca:47:6c:55:ab:0e:72:8c:d5:11:a5:38:2a:
7a:08:7e:1c:e5:90:05:c3:98:7a:31:1b:ff:55:75:fe:36:4b:
12:94:7f:95:9b:1b:ff:a6:64:5f:bb:e5:5c:59:a9:11:77:51:
22:b7:e6:a6:cf:78:83:ed:25:b8:5c:82:d6:44:ea:0f:8a:8f:
1c:33:5b:e8:f4:63:32:1d:94:7e:39:d8:81:62:df:30:9d:bd:
0a:46:cb:1f:1a:e7:1d:33:20:68:1d:87:e1:b1:e0:d2:84:5a:
c9:82:80:ae:ad:c0:1d:7c:7f:98:f7:cd:21:a5:63:c7:55:1d:
ef:cb:74:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:29 2024 by rpki-client on console-fra.rpki-client.org