Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evY-huHsYLws5deOKUnEUufgB3I.roa
File: evY-huHsYLws5deOKUnEUufgB3I.roa (raw, json)
Hash identifier: oLsGMNFJzfoXDSUHB8Njm6w4k/4jh2ySsN9lh2bRLIQ=
Subject key identifier: 7A:F6:3E:86:E1:EC:60:BC:2C:E5:D7:8E:29:49:C4:52:E7:E0:07:72
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018689C3CCD6D9D7E339D5FE158EFD16BB06
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evY-huHsYLws5deOKUnEUufgB3I.roa
Signing time: Sat 25 Feb 2023 18:09:15 +0000
ROA not before: Sat 25 Feb 2023 18:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199763
IP address blocks: 2a10:cc44:1c0::/44 maxlen: 48
2a10:cc44:1c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 25 Feb 2023 19:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:c3:cc:d6:d9:d7:e3:39:d5:fe:15:8e:fd:16:bb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 25 18:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7af63e86e1ec60bc2ce5d78e2949c452e7e00772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:3a:88:55:52:e3:89:1b:3c:86:42:f3:35:
e7:d7:e6:6e:4a:d3:25:a9:e6:c9:14:d4:70:6b:64:
50:10:e3:eb:ec:76:52:24:3f:d1:a9:74:52:68:1b:
4f:6c:9b:43:69:74:46:64:c2:4d:52:28:f9:65:62:
b8:5b:2f:e0:13:9a:2b:03:b8:7c:92:12:18:05:14:
db:3f:3b:6f:a4:57:23:2e:65:18:56:5a:f5:65:a0:
1f:0d:ca:79:59:9f:50:dc:99:38:06:6a:90:7a:9a:
2b:4d:73:d3:30:3a:8e:d6:89:f9:e2:67:11:97:3b:
db:28:03:73:08:a6:a6:93:29:4a:36:3c:0d:40:2e:
24:61:7f:b7:42:c5:39:06:2c:8c:ee:e1:7c:87:d0:
51:16:19:13:7e:a7:6e:c2:0a:2f:9e:a3:16:75:ad:
7a:83:78:de:00:de:ff:c1:21:8f:78:88:ef:82:86:
de:bf:c1:66:77:a7:94:32:d1:87:40:ed:63:8f:6f:
8a:51:2e:38:7a:ed:50:e1:c3:9c:2d:ab:9b:a6:43:
76:f1:ea:a9:5d:46:c9:01:af:57:f9:39:cc:dc:a2:
78:27:a1:03:b4:d1:f7:48:a1:e2:f5:49:e2:a5:ee:
7a:1e:b6:21:37:39:a0:84:7e:6a:fb:41:fe:00:45:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F6:3E:86:E1:EC:60:BC:2C:E5:D7:8E:29:49:C4:52:E7:E0:07:72
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evY-huHsYLws5deOKUnEUufgB3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
93:3d:b9:33:22:39:0f:2c:a0:fe:46:5c:37:a5:49:e3:8c:eb:
15:20:9e:5a:1e:dd:a9:96:a4:1a:a5:9f:70:84:2c:93:32:2a:
10:1a:f1:c6:21:db:51:01:3a:84:3c:dd:9d:9c:b9:22:f5:55:
9b:be:71:4a:af:ab:41:fa:a4:1e:60:ab:46:48:45:6c:2a:0d:
4b:34:9d:09:43:ee:d2:e3:2f:d5:58:cd:3c:d4:7b:54:bd:9c:
c7:e8:74:02:44:21:ca:5f:4e:05:91:d8:57:51:5f:56:28:21:
c4:de:86:38:13:32:15:c9:05:44:8f:5f:c4:59:1f:d6:15:bf:
42:44:14:ff:5d:58:dd:38:77:44:3e:f7:4a:12:3c:8d:d7:76:
66:ff:84:d1:57:53:1a:23:7e:39:fa:5a:0b:6d:d4:67:1d:1b:
50:86:e7:b7:67:d9:ca:57:f4:4d:ed:1a:45:a0:24:4c:59:77:
4c:1c:ef:82:03:af:3e:80:bd:79:cc:b0:b7:de:23:e1:65:a1:
78:23:7a:27:5c:0a:ee:ea:86:3f:1e:6b:3f:8b:00:47:20:67:
ab:3f:6c:8c:2f:03:42:16:3a:95:f3:7d:90:be:b3:e2:f5:f4:
a1:e4:49:25:db:97:fc:1b:c7:b4:b6:c8:fa:04:c9:ba:d7:7e:
e6:09:7e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org