Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bqXKR1cP_gCzaLOyrXLV-LJIi98.roa
File: bqXKR1cP_gCzaLOyrXLV-LJIi98.roa (raw, json)
Hash identifier: l4N4TGuFjFghQwVIC6c7UqEE0KYn1QEfqzcrt/dXYY4=
Subject key identifier: 6E:A5:CA:47:57:0F:FE:00:B3:68:B3:B2:AD:72:D5:F8:B2:48:8B:DF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018B779F636EB7346B46A6E3C532140CF294
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bqXKR1cP_gCzaLOyrXLV-LJIi98.roa
Signing time: Sat 28 Oct 2023 18:50:16 +0000
ROA not before: Sat 28 Oct 2023 18:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216112
IP address blocks: 2a0e:97c0:de0::/44 maxlen: 48
2a0e:97c0:de1::/48 maxlen: 48
2a0e:97c0:de2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:77:9f:63:6e:b7:34:6b:46:a6:e3:c5:32:14:0c:f2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 28 18:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ea5ca47570ffe00b368b3b2ad72d5f8b2488bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:aa:f8:fc:5f:fe:19:46:d2:f5:0c:e7:6e:5b:
34:9e:bc:7d:0f:ca:5b:c2:21:d4:53:24:b3:5b:86:
31:06:b4:69:a2:b7:cf:1e:f4:82:55:ef:a4:ac:64:
b1:85:f1:2a:9c:b5:82:93:f6:79:68:d3:a3:e4:88:
0f:4b:8c:73:a8:7e:75:66:1c:d9:ab:6a:f5:80:e1:
78:60:fb:69:17:56:6a:e8:e7:b8:55:44:69:40:3b:
40:49:93:74:ec:dc:c2:2c:31:a3:91:3c:59:98:ed:
0f:42:af:68:03:c2:2f:e6:02:78:1c:76:b8:e4:b2:
b4:f9:51:0e:6b:21:11:d8:aa:ff:4a:16:03:a4:10:
94:4e:cd:27:89:69:9b:0a:b0:17:eb:07:ba:9c:27:
b0:79:cb:7b:1b:74:88:c2:3b:5a:6c:da:f5:5f:64:
bf:07:bc:4f:3e:d4:68:8f:02:14:e0:32:19:55:ce:
76:6f:42:3f:44:26:75:98:dd:da:47:2d:af:69:92:
da:c7:8f:cb:39:b6:d4:1e:35:33:1e:cd:70:e2:40:
b1:0a:31:ac:b6:79:81:56:b5:00:56:f4:e4:82:a0:
cb:54:a4:0d:30:a6:bb:12:b5:f0:10:ed:6b:c2:30:
e9:f4:b6:ba:15:f7:e0:0b:05:f1:e3:42:d0:7a:5d:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A5:CA:47:57:0F:FE:00:B3:68:B3:B2:AD:72:D5:F8:B2:48:8B:DF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bqXKR1cP_gCzaLOyrXLV-LJIi98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:de0::/44
Signature Algorithm: sha256WithRSAEncryption
1e:39:5a:26:3b:03:63:98:3f:89:91:8c:79:49:d5:b3:00:1d:
4d:48:1a:e5:e5:a3:bc:de:bf:b5:1d:da:31:35:7e:04:8a:7d:
7f:a0:6d:2a:aa:b0:57:a8:a9:0a:84:1c:5b:95:f6:1e:11:bf:
63:c7:59:25:dd:8a:f3:16:9f:05:df:ee:73:9d:dc:6f:67:fd:
9c:5c:c3:35:96:7d:14:93:aa:cc:16:b0:58:cb:f3:6e:0c:e8:
79:8c:2c:47:64:ca:01:0c:8a:ec:69:0a:e8:62:02:6a:ad:27:
80:52:81:1c:f8:10:c3:4a:ca:0c:fa:d1:99:01:d0:01:d2:23:
bb:33:10:7a:c7:21:6e:c0:46:2e:f8:03:da:ba:48:02:97:b5:
24:9a:41:96:c3:04:93:6c:4c:84:58:52:7b:12:c6:5b:84:c3:
ef:36:74:2c:01:b4:7f:64:19:89:89:1c:ff:74:cf:00:43:32:
68:1f:e2:df:13:94:68:2c:49:81:0d:78:ad:68:b3:85:43:61:
8b:67:df:da:3f:e9:35:00:20:ff:8f:31:b9:d6:b5:5b:90:64:
fe:db:70:30:9a:02:0f:75:cf:6c:37:3c:e6:a6:97:8e:54:7d:
b5:4a:0b:c7:3d:bf:47:1a:72:dc:32:49:df:a6:a6:03:d7:d8:
9d:a9:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:34 2024 by rpki-client on console-fra.rpki-client.org