Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eVdLgrBGIHM_AK6zasffZ5uv5rc.roa
File: eVdLgrBGIHM_AK6zasffZ5uv5rc.roa (raw, json)
Hash identifier: m9XTf0uer10fxGFgxFxru/ACeALSXvHdv+SRLtLD8hA=
Subject key identifier: 79:57:4B:82:B0:46:20:73:3F:00:AE:B3:6A:C7:DF:67:9B:AF:E6:B7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A3CFA701C6D13436D3AB1485931788019
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eVdLgrBGIHM_AK6zasffZ5uv5rc.roa
Signing time: Mon 28 Aug 2023 16:29:20 +0000
ROA not before: Mon 28 Aug 2023 16:29:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44024
IP address blocks: 2a10:2f01:330::/44 maxlen: 48
2a06:de00:7000::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Dec 2023 11:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:fa:70:1c:6d:13:43:6d:3a:b1:48:59:31:78:80:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 28 16:29:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79574b82b04620733f00aeb36ac7df679bafe6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:4f:a4:18:57:93:12:b0:08:17:d2:b7:fc:
9c:f0:87:88:1d:73:dd:d4:50:93:6f:87:4b:8c:ba:
b2:6e:eb:a6:fb:5e:ab:80:22:48:51:47:96:86:25:
57:4b:b5:1b:9b:23:88:52:73:19:84:4e:0e:9a:db:
3a:8d:65:ef:b6:3d:cd:42:35:06:25:93:b8:49:a1:
56:55:80:4a:df:ff:4b:99:b4:df:91:17:5a:d7:0b:
20:39:48:e7:d7:85:23:70:b7:5e:56:71:90:b3:8a:
68:09:02:88:50:35:46:ed:a1:a7:fb:45:d5:e9:3c:
d5:75:14:8f:fe:b9:22:61:93:ab:3b:4c:e4:d1:2d:
21:c5:db:7d:05:11:eb:eb:0a:46:f7:98:84:b3:d5:
5c:e3:95:41:12:3e:8e:e7:00:a5:90:27:c3:5c:fb:
eb:bd:34:16:42:b8:8c:6d:f9:8a:9e:30:05:52:a0:
14:99:a1:5f:af:39:e5:47:8f:24:c2:62:12:7e:7b:
5c:5c:9b:c6:45:9f:61:86:71:a4:1f:2b:f2:e2:d9:
28:33:b6:c2:7e:3a:15:58:56:d7:2c:45:8a:b1:60:
a8:7c:f5:40:3f:23:9b:f7:a3:9b:b0:84:ab:a9:0a:
3e:7b:bf:e5:93:66:b0:86:79:57:36:0a:b1:83:31:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:4B:82:B0:46:20:73:3F:00:AE:B3:6A:C7:DF:67:9B:AF:E6:B7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eVdLgrBGIHM_AK6zasffZ5uv5rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:7000::/44
2a10:2f01:330::/44
Signature Algorithm: sha256WithRSAEncryption
cc:61:95:3a:bc:ac:da:9e:dc:8a:72:7c:f6:6c:0d:a3:a5:fc:
df:ff:ba:9f:56:b0:dd:2f:e9:71:0b:cd:19:58:cd:d3:20:89:
4d:3b:4d:bf:30:4d:5c:9d:d2:2a:8c:96:a9:fc:67:fa:6f:92:
13:36:ac:eb:07:59:93:4f:2a:e7:03:50:84:b1:4b:d5:f2:fa:
bc:26:10:88:d1:3e:22:34:da:86:2f:78:6e:5d:22:5e:2e:d8:
44:c9:74:f4:62:69:79:5e:19:37:6a:7e:a3:f0:e4:39:ea:6c:
2d:10:20:83:bc:f7:32:59:17:81:2c:2e:6c:0b:fc:81:9f:37:
94:d9:be:97:b4:b7:82:b8:0e:46:a0:6a:6f:0d:bd:70:0d:16:
e8:17:7a:39:a3:f7:6a:51:8a:93:2e:e5:57:b6:3f:93:9e:fc:
48:e5:0e:70:8d:ef:d4:da:4e:08:2c:d0:74:f3:6d:9d:e3:36:
49:58:d2:fc:2a:22:8e:40:5a:72:f7:d8:bb:a9:db:e6:cc:c8:
ce:c1:8b:57:02:75:26:d2:26:54:e2:72:42:16:f6:8f:cc:5c:
2f:b3:b4:6d:1a:33:d5:79:b2:38:90:54:19:6c:9e:d3:f8:f7:
52:24:34:db:8e:20:3f:a5:89:09:4d:22:87:28:3d:71:54:95:
ba:ab:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org