Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eDZwY02SykVs7BEn1UGcXpLd6rw.roa
File: eDZwY02SykVs7BEn1UGcXpLd6rw.roa (raw, json)
Hash identifier: oND0W2ruK6wYsqYG4tovAwIs95HiIYcNjQX31dAqAbQ=
Subject key identifier: 78:36:70:63:4D:92:CA:45:6C:EC:11:27:D5:41:9C:5E:92:DD:EA:BC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BE4E569CCDB0FBDE9ED4878B9A3F8A17E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eDZwY02SykVs7BEn1UGcXpLd6rw.roa
Signing time: Sun 19 Nov 2023 00:05:21 +0000
ROA not before: Sun 19 Nov 2023 00:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:b107:19a0::/48 maxlen: 48
2a06:de00:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 24 Dec 2023 16:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e4:e5:69:cc:db:0f:bd:e9:ed:48:78:b9:a3:f8:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 19 00:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=783670634d92ca456cec1127d5419c5e92ddeabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:88:67:ae:4e:0a:47:ea:81:62:45:fb:03:
e3:f2:48:22:53:68:43:d7:48:f6:fd:3c:64:fa:ec:
86:2c:66:2e:4f:b5:73:f8:c8:5d:1b:b3:68:56:c9:
1f:a6:a1:03:84:d0:8a:13:bf:fa:14:84:cd:4c:fd:
43:34:1d:94:8a:b4:0a:d7:7d:1f:03:1b:aa:8b:8c:
46:23:5c:b1:3b:d6:f6:b9:e2:1c:13:3f:11:02:f4:
79:f7:21:b9:83:7f:bd:1b:90:70:7c:71:fc:2c:14:
ff:22:3b:1e:67:a1:90:82:cf:dc:d3:6d:b6:c4:d5:
24:a6:17:5f:54:4f:67:c6:60:7f:db:02:7a:76:2a:
0a:5a:38:6b:81:5c:a6:2c:5c:b8:2c:45:0a:a8:06:
95:ac:6e:c5:db:93:12:01:b6:c9:5e:19:c4:7e:a2:
c3:a9:59:01:0a:09:f5:ad:46:35:bc:47:3e:2d:43:
05:c9:ac:fd:2b:f4:ea:cd:04:ac:cd:84:b5:4d:56:
0b:f5:34:91:16:d0:b0:43:cb:e6:97:be:24:db:0c:
61:81:56:1f:b1:92:82:62:ef:8a:3b:9b:db:ca:80:
8e:8f:b5:a6:2f:f2:6d:b2:68:80:1f:7d:f7:1e:be:
d5:b5:35:77:2a:bb:a7:a7:e2:60:e8:21:2c:ed:04:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:70:63:4D:92:CA:45:6C:EC:11:27:D5:41:9C:5E:92:DD:EA:BC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eDZwY02SykVs7BEn1UGcXpLd6rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:10::/48
2a0e:b107:19a0::/48
Signature Algorithm: sha256WithRSAEncryption
a8:17:30:ee:5d:7f:f8:50:92:a5:88:80:5a:7e:4a:79:59:1d:
7b:1c:6e:5a:14:b0:bc:0f:42:45:85:d8:57:35:5c:d1:03:c9:
1e:00:b9:8a:c0:8c:b2:10:29:60:f5:6d:f4:71:9c:89:20:74:
e1:ec:56:3c:89:65:f1:15:ca:3b:ea:2e:ac:9f:74:e7:ac:97:
b3:76:a1:77:cf:51:e8:d7:f9:ca:8b:8d:0e:d6:9f:cd:df:b6:
e1:40:fe:bb:00:fe:dd:7e:41:44:b6:db:d8:f3:cd:3e:7b:34:
b5:04:3e:93:92:7c:51:50:74:c1:05:6f:b3:c5:6a:b5:ee:3b:
c4:a6:bf:2e:97:bb:10:41:fe:dd:2f:70:8d:7d:67:f3:e8:91:
34:74:99:92:90:a8:d5:86:b2:d1:c3:6c:d1:97:5f:f1:d0:86:
a8:97:b5:35:cd:db:22:94:56:45:45:ec:72:ea:5d:94:be:37:
da:35:52:03:07:4e:d6:14:c5:6a:88:37:51:21:e8:11:1d:64:
dd:43:a0:d9:88:b2:13:90:2e:05:a3:a6:b7:03:88:eb:33:24:
66:31:85:1e:fd:cd:3a:a6:b2:c0:69:92:cf:bb:49:9b:5e:28:
63:9c:18:07:2b:a3:65:65:ad:80:cc:51:6f:29:a6:d0:2e:b6:
0b:37:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org