Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cDRFdmVI7uLDtnk250BVaYcgxpM.roa
File: cDRFdmVI7uLDtnk250BVaYcgxpM.roa (raw, json)
Hash identifier: VetGTmgbrS3vKS8f2TXVUnH2Y5kF5isscfT7Gwn4Htw=
Subject key identifier: 70:34:45:76:65:48:EE:E2:C3:B6:79:36:E7:40:55:69:87:20:C6:93
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188E68D44020A42024EB1B3E5F84982C5D8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cDRFdmVI7uLDtnk250BVaYcgxpM.roa
Signing time: Fri 23 Jun 2023 04:39:57 +0000
ROA not before: Fri 23 Jun 2023 04:39:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 2a06:de02:6020::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Jun 2023 16:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e6:8d:44:02:0a:42:02:4e:b1:b3:e5:f8:49:82:c5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 23 04:39:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=703445766548eee2c3b67936e74055698720c693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:e7:fe:4d:7b:43:5c:20:c2:25:3c:4d:27:
b4:2d:b5:74:c1:25:49:cb:66:df:a3:48:61:78:93:
c3:da:74:9a:73:3f:35:a1:09:33:43:66:79:b8:21:
f6:83:da:b3:aa:bc:64:06:7c:13:de:7e:eb:28:23:
b2:b6:09:27:b7:a8:a5:0d:9e:ed:65:00:d0:e2:f8:
45:67:c0:94:46:42:52:ec:4e:0b:48:6c:31:a6:23:
28:06:2a:d3:bd:4a:f8:f8:07:80:16:a5:95:98:d6:
ba:2d:78:b4:1b:ee:d9:c5:d1:2a:1f:0b:c6:18:09:
cd:2a:25:52:45:4e:93:34:ac:d1:c7:f0:c1:42:04:
40:ad:11:b6:de:c6:cc:90:57:ad:a5:c4:25:48:6e:
6f:ef:50:f9:d5:53:7b:3d:51:98:86:7b:2d:a4:a0:
78:26:f9:b6:f5:5e:95:6e:74:b4:9d:97:01:82:28:
ea:f7:d2:19:23:5e:ea:13:87:18:db:8d:88:19:b5:
9f:b9:92:b5:37:48:68:84:70:5e:e1:15:c4:6e:d9:
da:da:2f:a8:a2:37:73:d7:49:a9:43:e5:5b:03:2d:
f8:fa:ac:b0:5f:69:de:c0:19:85:ba:b5:e6:44:91:
1c:00:8a:df:91:ac:5e:a3:21:64:b1:cd:dc:0b:89:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:34:45:76:65:48:EE:E2:C3:B6:79:36:E7:40:55:69:87:20:C6:93
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cDRFdmVI7uLDtnk250BVaYcgxpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de02:6020::/44
Signature Algorithm: sha256WithRSAEncryption
13:1d:ca:60:b1:10:67:a9:85:b3:68:33:41:49:4a:37:a2:cc:
f8:47:72:79:9a:7b:78:ae:48:4b:c9:d4:60:00:3c:d0:a9:a6:
75:37:2a:33:3f:54:71:50:82:41:6b:9a:b6:cd:77:42:c5:e4:
5e:79:e9:80:af:37:b8:d6:67:e5:85:81:df:4b:6f:e8:1e:f4:
25:0e:25:f7:7e:31:9c:b1:ea:e1:2a:aa:66:52:99:74:7b:4b:
9f:a0:bd:03:1f:ef:a3:8d:d4:bc:fa:ac:bc:26:9f:a9:cb:d3:
e7:7e:c7:a5:0b:09:75:9b:a0:0f:74:b6:77:85:65:5e:86:e0:
22:d7:38:e9:a5:56:2b:9b:58:9b:2d:e3:cb:d7:0c:61:bb:c1:
39:5b:55:ce:f6:5c:65:51:fa:3a:db:7c:bc:54:11:ea:c5:63:
69:6b:fe:c6:df:3d:58:ac:ef:df:5b:5d:be:c0:3c:d5:d5:48:
da:6e:6b:68:5c:4c:fb:41:83:88:97:c6:60:13:6c:01:40:0e:
65:48:ff:6d:71:34:0e:b7:3c:c7:31:15:cf:99:a7:f9:58:15:
51:a6:da:6c:2d:03:08:a9:3b:a1:9f:0f:b3:c2:cf:cf:cf:6c:
e1:a0:4a:1f:31:07:10:fc:0a:c8:1b:55:10:d2:af:ae:ac:31:
94:53:e7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:07 2024 by rpki-client on console-ams.rpki-client.org