Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bcNiE-eRueiH4eUjzakKHD711Go.roa
File: bcNiE-eRueiH4eUjzakKHD711Go.roa (raw, json)
Hash identifier: ygo+eUiZPjMgpNyHEBBnowC5zBkA0DXPItT7IXjbrE0=
Subject key identifier: 6D:C3:62:13:E7:91:B9:E8:87:E1:E5:23:CD:A9:0A:1C:3E:F5:D4:6A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186982635B5D70F824095C10F846198ADC1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bcNiE-eRueiH4eUjzakKHD711Go.roa
Signing time: Tue 28 Feb 2023 13:11:26 +0000
ROA not before: Tue 28 Feb 2023 13:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207079
IP address blocks: 2a0e:b107:1ed0::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Mar 2023 06:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:26:35:b5:d7:0f:82:40:95:c1:0f:84:61:98:ad:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 28 13:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dc36213e791b9e887e1e523cda90a1c3ef5d46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:6f:a3:fd:08:07:99:70:9f:21:33:e0:ba:
a5:55:9c:49:14:f1:6b:6d:88:45:e7:51:fa:c1:85:
0c:b7:39:a7:d1:55:f8:0a:c3:a5:d4:98:5a:c9:03:
6a:60:3c:e7:23:77:38:8d:13:9c:41:1e:35:74:c0:
a9:cc:02:6b:08:98:c1:ef:00:e6:da:c6:01:2b:9f:
e4:79:54:95:99:74:bf:d8:21:9c:82:e9:a9:fb:9d:
3f:a3:19:6a:9d:bb:5f:b7:f2:a6:bc:44:92:20:0b:
e8:7a:21:24:3c:aa:a9:8e:6b:21:d3:ab:67:47:02:
41:53:b9:6b:15:b5:33:05:bf:ab:99:7c:90:24:4f:
44:57:55:03:e7:c4:19:1b:33:90:48:a9:fd:d1:6d:
7f:43:88:db:4d:14:f6:12:d9:25:f5:51:ce:14:e2:
46:63:d1:80:48:be:a9:75:8a:e0:e7:cb:20:1d:ad:
f6:19:c6:63:52:67:0b:41:f6:55:40:3e:76:f6:95:
8e:48:43:47:3b:54:0a:f8:5a:50:bb:0d:02:34:95:
cb:93:85:2e:d1:43:18:39:2c:4f:4a:a1:e2:7b:0c:
94:67:f2:dc:b5:eb:01:22:5a:9e:d1:c1:2f:b5:41:
51:c6:e7:a0:98:96:f5:1e:fe:7a:4e:9e:a2:e7:7a:
66:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C3:62:13:E7:91:B9:E8:87:E1:E5:23:CD:A9:0A:1C:3E:F5:D4:6A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bcNiE-eRueiH4eUjzakKHD711Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ed0::/44
Signature Algorithm: sha256WithRSAEncryption
49:26:dd:e3:3d:2f:28:c4:e4:94:a5:3e:44:d1:64:41:7b:fb:
75:20:76:0e:c9:da:b8:ce:3d:c8:0e:a3:88:9e:3d:d2:e0:cd:
9c:f5:99:25:f7:c8:46:3d:17:42:ef:3b:41:4f:7f:3e:76:22:
28:7c:a5:cf:d8:a1:58:a3:9b:98:c4:35:be:41:2a:4a:48:de:
ca:7d:a7:f7:cd:f3:6e:32:04:ed:04:f9:9e:b8:b2:b5:fe:9e:
f7:cc:3d:5e:f3:76:41:81:15:a1:57:3a:63:6a:7e:76:34:ba:
88:5c:45:85:61:6d:48:8a:41:f4:58:c0:d6:83:47:69:62:ef:
33:2c:ed:cd:14:8c:cf:5f:05:0c:5e:42:d4:38:3a:32:22:d7:
ef:53:3b:6c:0d:43:3d:b0:3c:93:23:25:91:a4:af:37:f2:1b:
72:6a:3a:f9:8e:5b:ac:02:66:8a:bb:03:f3:e6:13:84:4e:1e:
09:4a:80:9c:b6:bd:cb:7d:8e:aa:29:8e:4e:47:30:d1:58:0c:
70:e0:10:44:d5:41:91:41:c2:23:34:5d:88:ae:15:21:66:b6:
65:11:77:9d:e7:a1:f7:9c:4d:2a:1c:53:bb:18:01:01:c3:4e:
c5:25:b9:54:90:b1:b3:86:ec:82:70:3c:79:80:1a:eb:22:74:
77:70:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:07 2024 by rpki-client on console-ams.rpki-client.org