Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/delAcw1B4kpKuJXe9lQFJoThEfs.roa
File: delAcw1B4kpKuJXe9lQFJoThEfs.roa (raw, json)
Hash identifier: d5VqW0NjFpvpcFrEc8p3xzsJkE/HxrpTcj5euYE1hYU=
Subject key identifier: 75:E9:40:73:0D:41:E2:4A:4A:B8:95:DE:F6:54:05:26:84:E1:11:FB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189395FDAECF4BE3BD654537F44C6AC7102
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/delAcw1B4kpKuJXe9lQFJoThEfs.roa
Signing time: Sun 09 Jul 2023 06:38:50 +0000
ROA not before: Sun 09 Jul 2023 06:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202222
IP address blocks: 2a0e:b107:1ea0::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:5f:da:ec:f4:be:3b:d6:54:53:7f:44:c6:ac:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 9 06:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75e940730d41e24a4ab895def654052684e111fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:3e:91:e4:f7:14:07:e7:77:ac:c0:ba:e9:
f0:0c:80:39:2b:7c:0a:e7:0c:40:62:cd:94:f2:16:
5e:b7:ee:fb:6b:27:62:d7:06:84:a3:cf:42:cb:9c:
1c:5c:61:a2:34:c2:7b:e7:35:8a:c2:ea:36:66:03:
36:e3:61:f5:11:7c:16:c8:69:08:6d:10:17:1a:a3:
c4:fa:61:73:22:d8:5f:1d:a3:1b:78:e1:04:f7:6f:
70:77:bd:76:ad:f6:83:ac:20:87:da:f1:0b:42:9a:
77:7f:de:cd:35:5f:a0:06:ec:e0:dd:ca:1f:9b:1d:
5e:58:92:95:e6:ac:6e:01:69:ea:d1:2b:fa:94:8e:
f9:1f:e8:17:29:ed:7b:4d:65:9b:0b:12:15:f2:8c:
55:73:ce:62:75:5a:2e:28:f2:7b:16:0f:0d:0d:49:
a1:f9:80:a1:78:41:9b:3d:0c:9b:f7:ac:8a:ae:82:
10:06:12:0b:5e:3f:8d:6f:8d:49:89:de:b8:49:75:
8d:f6:77:55:f7:35:aa:8e:43:f4:38:48:69:76:fe:
e3:2a:3f:ae:d7:8f:98:ab:8e:2e:05:c1:1a:37:16:
20:72:a4:53:6e:a5:fa:91:f9:f8:14:36:25:8d:96:
de:63:d5:3f:65:fd:43:a1:ed:64:c8:9f:90:d8:50:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E9:40:73:0D:41:E2:4A:4A:B8:95:DE:F6:54:05:26:84:E1:11:FB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/delAcw1B4kpKuJXe9lQFJoThEfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ea0::/44
Signature Algorithm: sha256WithRSAEncryption
9f:47:36:ea:13:a4:3a:7e:c2:e5:d4:6f:50:90:68:57:2e:a7:
8a:32:62:ad:7e:d1:66:6a:cd:8f:48:0d:4e:a9:c3:5a:7c:49:
24:58:ad:d0:d2:85:62:09:f2:13:8f:89:74:a9:7f:38:2a:3f:
6b:25:2d:32:88:7c:56:8f:ed:a3:25:ed:00:80:86:8e:77:1d:
fc:18:10:88:df:06:5d:b6:b8:89:54:e1:6c:d6:5a:0e:5e:8e:
81:61:0b:c9:d6:7e:13:a1:62:9a:38:56:2e:f5:42:64:50:9b:
02:fe:ae:d3:89:21:42:23:a7:28:af:43:59:c1:53:11:29:22:
e0:0b:dc:ef:e3:0c:ed:c9:52:55:ae:0d:0e:f5:f3:d7:8f:12:
8e:e4:db:f7:cf:98:ec:33:b8:dc:91:73:82:9b:83:cb:09:c0:
c6:2c:57:0e:76:c6:52:67:34:83:bc:d5:32:0e:8c:30:dd:5a:
04:98:88:a2:78:61:ea:1f:93:e1:c7:88:00:58:f6:1f:3f:41:
bb:1b:84:15:be:9c:04:5b:b2:ff:ad:1c:93:b2:a6:55:df:89:
82:60:be:ea:ac:76:82:95:18:ac:33:3e:1b:47:a3:ab:78:10:
58:d5:b9:f7:c2:11:50:26:8e:51:43:34:f0:1a:77:f9:44:5d:
6d:ae:2c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:08 2024 by rpki-client on console-ams.rpki-client.org