Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c4e0A_YlXbNA3ll5iXPy0HNIWak.roa
File: c4e0A_YlXbNA3ll5iXPy0HNIWak.roa (raw, json)
Hash identifier: iqk7aO3KyquJ2rRgxp7F/ZFbppjmcMoZonvwawDfOTE=
Subject key identifier: 73:87:B4:03:F6:25:5D:B3:40:DE:59:79:89:73:F2:D0:73:48:59:A9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186E4961F71FD6AA7A36F18639D56EA45C7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c4e0A_YlXbNA3ll5iXPy0HNIWak.roa
Signing time: Wed 15 Mar 2023 09:24:48 +0000
ROA not before: Wed 15 Mar 2023 09:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211011
IP address blocks: 2a0e:b107:1ef0::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Apr 2023 12:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:96:1f:71:fd:6a:a7:a3:6f:18:63:9d:56:ea:45:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 15 09:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7387b403f6255db340de59798973f2d0734859a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:37:31:60:1a:3a:6d:a9:9b:aa:24:12:de:
e9:bf:a0:df:ae:3c:7f:6f:7d:a2:f0:b7:4c:4b:15:
ea:ff:e9:38:3f:ba:82:e1:81:cb:61:a9:b8:56:cd:
56:93:ca:fb:c6:80:08:b1:67:18:a9:c9:93:c0:dd:
c3:c0:a0:fe:9d:d5:d4:e4:b1:c9:ae:c9:07:b2:6f:
eb:9b:30:b0:44:c0:a1:a9:aa:72:c5:79:01:0f:1e:
4f:77:25:b0:aa:bf:7f:a6:b8:7b:69:3c:a7:78:a6:
a3:bd:22:f8:ed:52:22:ed:51:68:4a:df:dc:8e:5a:
7a:d6:25:f4:44:b9:36:98:47:55:3f:cd:39:6d:ed:
22:cf:8d:19:f3:9c:50:f6:3f:57:da:d4:e3:a4:88:
41:85:a5:e5:ee:a2:94:62:fe:0c:a1:a2:9a:66:8d:
89:13:80:44:18:4b:b3:c8:40:bc:2c:1e:b9:6f:3d:
66:80:b3:83:c2:c7:12:f4:2b:03:37:6a:45:96:f1:
b6:95:9e:cf:f0:96:15:15:4f:2e:b6:6c:6d:af:dc:
a3:cd:43:61:1e:b7:9f:53:70:02:c8:37:e0:c9:dd:
53:a1:d9:11:23:7b:c1:a8:c6:2c:98:11:d8:98:33:
c7:09:a0:d7:c8:f9:eb:c5:2b:0b:04:2b:64:94:4e:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:B4:03:F6:25:5D:B3:40:DE:59:79:89:73:F2:D0:73:48:59:A9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c4e0A_YlXbNA3ll5iXPy0HNIWak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ef0::/44
Signature Algorithm: sha256WithRSAEncryption
43:87:ba:3f:10:84:1c:dc:c5:11:7d:64:7d:eb:40:96:85:a1:
d0:eb:79:03:e8:78:8d:28:87:70:0c:55:a3:30:6a:f8:07:b8:
e8:48:d4:97:ae:d3:e3:7a:c3:28:d8:a3:15:3e:18:e5:91:0c:
ad:ab:86:e2:23:fa:5f:f8:72:8a:de:3e:1d:0e:c3:48:3d:5d:
fe:ba:31:9a:18:39:bc:5a:7e:07:af:25:07:5d:a3:a4:35:a3:
07:b9:8c:7a:a7:48:ba:9e:9b:3d:10:c2:af:ad:e4:45:96:43:
27:bd:00:c2:9d:46:f7:e0:3b:d7:bb:f2:b0:be:d5:85:fc:fc:
e5:07:18:8b:34:67:4d:44:66:ed:b3:72:eb:dc:c4:38:51:2d:
63:53:f5:4b:9a:32:77:ef:a3:38:86:40:06:7c:09:5b:dd:52:
17:8e:c3:b8:90:23:d6:36:c0:22:a6:bf:7b:9a:2d:29:87:1d:
19:70:64:af:62:75:1b:23:c5:96:7e:06:05:48:44:6d:f6:67:
46:22:69:2b:4a:2e:6b:ee:7b:5f:ac:d5:fe:f9:06:43:6d:db:
e0:2a:b3:31:3d:13:df:c0:40:1f:1c:90:36:c5:d2:59:1f:60:
76:3a:08:fc:92:96:e4:0b:a6:c2:69:aa:45:80:cb:9d:ea:07:
d5:1b:38:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:07 2024 by rpki-client on console-ams.rpki-client.org