Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dkL8W_2DoIlVESrjVLnS7SOMH2g.roa
File: dkL8W_2DoIlVESrjVLnS7SOMH2g.roa (raw, json)
Hash identifier: utXrlbzeFiJOLxTM9oKjuPIYiD7P/fFW9yMynmGMHvQ=
Subject key identifier: 76:42:FC:5B:FD:83:A0:89:55:11:2A:E3:54:B9:D2:ED:23:8C:1F:68
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C991B66022E364ADB8194623397204AA6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dkL8W_2DoIlVESrjVLnS7SOMH2g.roa
Signing time: Sat 23 Dec 2023 23:55:58 +0000
ROA not before: Sat 23 Dec 2023 23:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49716
IP address blocks: 2a0e:97c0:670::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:99:1b:66:02:2e:36:4a:db:81:94:62:33:97:20:4a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 23 23:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7642fc5bfd83a08955112ae354b9d2ed238c1f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:d4:2b:04:16:b5:b1:e4:d1:0b:a1:31:bd:
86:ed:23:c1:34:bc:ce:c5:58:11:d5:6a:12:76:70:
6d:f4:10:05:14:da:4c:dc:fd:e2:ea:89:c8:df:09:
ae:5e:b4:44:97:d6:a2:f5:f4:d5:e0:7f:e5:82:72:
9a:40:03:f8:1c:0f:bf:69:32:ee:a6:d8:af:9a:3e:
3b:b2:dd:66:a1:c0:ff:35:35:e4:bb:fc:76:a2:4b:
dd:c7:0a:dd:55:08:e1:7f:c3:a9:5a:c0:4b:c8:06:
37:b3:dc:42:a5:9f:c7:41:9f:ef:71:65:64:1c:b9:
1f:39:57:eb:b9:38:0c:b2:78:43:2b:12:71:60:de:
ca:58:a6:10:64:82:d2:63:a0:5a:ab:fe:80:df:b5:
8f:ec:c9:2d:7e:75:7a:ab:7f:15:69:f6:be:00:3c:
4a:19:c7:14:51:a3:46:3c:97:5c:81:33:bb:97:cd:
e6:7f:89:0c:1c:fe:5d:b4:51:14:b6:ce:36:49:f5:
79:64:3e:72:b0:04:ba:56:fd:31:3f:67:e7:70:1e:
07:8c:b8:f9:8f:e9:d3:2e:50:33:2b:81:3b:84:ed:
f6:99:6a:85:81:a4:a1:85:22:b9:35:f3:71:72:39:
a8:e6:ae:7e:e3:65:12:c7:80:9c:9c:32:3a:82:bf:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:FC:5B:FD:83:A0:89:55:11:2A:E3:54:B9:D2:ED:23:8C:1F:68
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dkL8W_2DoIlVESrjVLnS7SOMH2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:670::/44
Signature Algorithm: sha256WithRSAEncryption
8b:b3:4a:f6:e7:a5:a9:d9:97:09:50:d0:1a:ec:3a:9c:57:97:
fb:6f:4b:a7:a9:0e:95:81:d6:04:16:24:74:49:e8:b5:2b:ba:
04:16:b3:47:d1:b7:95:07:37:d8:6b:8d:93:16:59:97:5e:72:
ac:2d:36:ad:d1:b7:cc:b1:04:3d:48:84:b7:59:ea:ea:01:93:
a8:2c:d0:f2:0f:c1:e7:5b:81:ac:5f:5e:d0:ba:0b:f8:b0:c6:
94:49:9e:61:c0:4e:8f:78:4d:77:0a:4d:8e:47:30:74:f2:e1:
e4:09:34:ac:e4:43:ac:19:14:4c:31:a2:7c:3d:37:5a:2d:55:
78:df:83:27:68:0c:f0:35:7f:8d:7e:70:70:7e:a6:1f:07:75:
5a:ba:b9:23:12:e3:fc:86:b3:41:3d:59:3e:c4:6e:76:9c:86:
dc:3e:5f:06:f9:37:41:4a:b3:57:3c:fa:8c:37:73:88:2b:c6:
73:93:44:84:04:29:0d:01:8a:65:bd:94:46:c1:97:a2:2b:5c:
bd:96:b1:27:04:50:78:52:49:fe:87:e0:24:a0:84:68:3c:9c:
81:9d:94:b3:2c:02:d6:d4:89:b1:2b:21:1b:84:6b:ae:1e:9f:
a3:1c:86:16:41:55:12:cf:02:90:7c:a9:04:3c:79:1a:70:3c:
73:59:64:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org