Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ccqWayuk8eRltPyaL8Vt-CK3PQg.roa
File: ccqWayuk8eRltPyaL8Vt-CK3PQg.roa (raw, json)
Hash identifier: OJ+eB80G/HyOJdJlQjqAhS7DtHr44xgR5mS/CIonjSU=
Subject key identifier: 71:CA:96:6B:2B:A4:F1:E4:65:B4:FC:9A:2F:C5:6D:F8:22:B7:3D:08
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E80DD69A99AEE1DF0605FC82B96C36
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ccqWayuk8eRltPyaL8Vt-CK3PQg.roa
Signing time: Mon 02 Jan 2023 05:15:34 +0000
ROA not before: Mon 02 Jan 2023 05:15:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211781
IP address blocks: 2a0e:b107:390::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:0d:d6:9a:99:ae:e1:df:06:05:fc:82:b9:6c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71ca966b2ba4f1e465b4fc9a2fc56df822b73d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:cc:80:6e:98:ab:1c:37:b1:d9:5b:3f:4b:
f1:32:8b:87:43:ea:f1:a9:fb:30:22:3f:6c:4a:d5:
2e:ef:01:62:c8:49:b1:59:8b:36:3e:ca:d8:1c:42:
e8:ca:5b:75:38:6e:3c:03:67:45:33:b4:e8:b4:73:
90:c3:23:94:df:25:ac:bc:62:21:48:04:42:3d:34:
28:97:8a:81:a0:d7:cd:0e:3e:b4:a6:29:8d:38:59:
78:1c:57:6b:0f:e7:a0:d6:10:78:1b:bb:cf:8d:ae:
7e:ff:6c:19:6f:a8:1b:19:ed:3d:75:34:41:c9:0c:
38:59:c9:e1:52:37:03:30:b0:0d:4e:fc:d3:ea:ec:
2b:af:96:a6:25:ab:03:6d:96:bf:ff:af:40:26:73:
ef:08:b6:78:16:1f:db:1a:b5:17:86:86:52:f2:e6:
c7:1a:21:58:cb:3d:cc:dc:16:bb:aa:1c:29:ad:39:
f9:fb:32:8c:73:d4:82:65:72:b0:ca:0d:fb:e5:62:
ff:32:99:a3:2c:e2:bd:84:18:7b:82:95:8e:08:df:
eb:0d:61:1d:fa:cb:f1:4d:25:ec:e9:c2:55:4f:d5:
40:f1:3c:14:c2:e3:55:b5:a0:18:b4:80:ba:44:a8:
43:bf:99:cd:8e:c0:91:02:4a:fb:a0:10:95:fe:fe:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:96:6B:2B:A4:F1:E4:65:B4:FC:9A:2F:C5:6D:F8:22:B7:3D:08
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ccqWayuk8eRltPyaL8Vt-CK3PQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:390::/44
Signature Algorithm: sha256WithRSAEncryption
a0:d3:ce:3b:f3:dc:6e:58:b5:fb:c3:9b:58:06:9c:6a:62:6a:
a7:b6:d2:7c:30:7a:74:ab:1f:88:4b:56:b0:b6:60:67:61:ad:
a5:bc:5e:c5:5a:33:dc:ec:e3:2d:25:29:31:91:ed:5d:18:af:
85:ea:16:b5:ea:91:20:e1:e2:55:9c:22:89:ef:70:ed:68:76:
c2:1a:89:a2:24:2e:d9:a2:2f:aa:ed:ce:26:e0:2f:5e:f8:24:
99:3e:fd:9c:b0:cd:51:ca:05:10:7d:42:03:c3:f2:28:22:8f:
a6:02:63:52:da:e6:e0:a7:68:73:a4:78:4f:c5:79:7e:92:dd:
00:44:af:6b:6b:48:d7:97:fe:d1:84:be:a2:be:97:1d:23:31:
2a:07:41:17:c7:1c:04:8d:4e:af:2c:1d:23:67:4f:c8:b1:ac:
44:a6:12:77:64:e6:a9:f2:9e:0f:dd:89:b4:f2:94:5b:bf:80:
b5:bf:3d:30:46:ea:f8:49:71:78:47:c0:a2:ce:94:b2:cc:d0:
54:60:d1:af:9f:8f:41:0d:ac:5b:07:c9:d5:43:d3:a5:e1:47:
52:66:1e:2f:43:2c:44:68:f1:8c:5b:36:c1:7d:fd:9f:c8:6b:
cf:02:d9:03:d0:06:42:b1:4c:42:4f:8a:17:83:4d:6d:11:5e:
65:24:4d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org