Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evdlqNN8ASkhlZkFXX-p4_ZHSDg.roa
File: evdlqNN8ASkhlZkFXX-p4_ZHSDg.roa (raw, json)
Hash identifier: lHNdshFL5IOJ9rDhqYegxUVeifElnFo9gGgI1uYxERg=
Subject key identifier: 7A:F7:65:A8:D3:7C:01:29:21:95:99:05:5D:7F:A9:E3:F6:47:48:38
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E802C4AC1979C4E9D6D300034F4E86
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evdlqNN8ASkhlZkFXX-p4_ZHSDg.roa
Signing time: Mon 02 Jan 2023 05:15:31 +0000
ROA not before: Mon 02 Jan 2023 05:15:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211459
IP address blocks: 2a0e:97c0:373::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 May 2023 22:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:02:c4:ac:19:79:c4:e9:d6:d3:00:03:4f:4e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7af765a8d37c0129219599055d7fa9e3f6474838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:16:a3:78:be:64:43:19:96:0f:21:e3:c4:d9:
53:c2:9d:4f:24:b4:43:30:05:e8:bd:d7:70:a0:42:
ba:33:1e:f5:3c:a5:24:42:5e:89:9e:ef:b0:b4:be:
c9:a3:57:a1:2a:46:1b:c5:fe:f0:e5:e4:87:88:96:
6b:83:5e:b9:6c:25:ae:32:33:df:4b:95:13:8f:84:
7a:e3:fd:ea:42:ba:ac:38:a3:a3:e6:10:44:4a:93:
b1:e3:3e:84:66:7f:8c:1d:16:9b:87:6c:eb:ee:95:
4f:92:94:f7:72:1a:ee:68:ec:b5:c7:6f:3f:8d:db:
87:96:bb:14:cc:d2:49:47:fc:31:f2:07:53:2f:04:
0d:bf:63:03:90:6e:39:a1:e0:aa:4f:ce:09:2f:39:
be:97:03:56:9d:4d:db:ab:78:75:2c:99:b8:64:46:
28:e6:e3:73:71:ca:c4:95:ab:3d:dd:19:3e:f1:56:
4e:b0:44:7b:9c:07:93:33:0c:e3:2c:ef:b1:7e:38:
e6:0b:78:c3:3b:5d:14:26:3f:0e:85:3e:ea:af:90:
30:a0:ca:e4:30:fb:07:f2:a2:fd:ce:fe:1f:75:8a:
c0:c0:16:56:3a:9d:a1:38:a3:8d:1a:93:c9:d4:79:
19:db:a7:d6:14:80:1c:0e:d3:d5:55:63:2e:0c:f7:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:65:A8:D3:7C:01:29:21:95:99:05:5D:7F:A9:E3:F6:47:48:38
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evdlqNN8ASkhlZkFXX-p4_ZHSDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:373::/48
Signature Algorithm: sha256WithRSAEncryption
2a:c0:aa:e2:4a:16:ed:34:7f:98:19:13:71:20:80:f0:97:72:
06:14:44:d6:b0:b4:71:6f:39:4f:7f:d0:0a:6c:d8:8d:31:12:
69:72:d7:03:c4:78:5b:9a:67:e0:bf:a1:f4:e7:d8:c7:7f:4e:
3f:c6:01:d0:a2:dd:7b:90:9c:6f:62:74:54:c3:87:ed:73:05:
ad:47:c7:fa:cf:ed:ff:92:70:2c:26:4f:5e:d4:eb:ca:b3:20:
0e:78:08:93:16:fa:0a:cb:69:75:3c:eb:db:a5:ff:5d:2d:5d:
ff:59:24:09:38:d3:7a:50:67:79:4e:fc:76:60:85:9c:83:86:
33:23:9f:2c:d2:55:7a:41:0d:d2:e6:16:48:3f:c8:aa:6f:91:
e6:59:f4:13:61:55:47:aa:c2:ba:0b:3d:fe:96:c9:24:83:c8:
5c:87:9e:69:2d:3f:82:b1:d7:82:3c:8d:92:43:04:a5:56:f9:
36:ed:b1:11:09:ae:51:99:a1:62:c4:68:83:e0:4c:c6:93:bf:
2c:2a:8a:46:0f:0d:98:ad:8e:58:2c:4b:02:56:38:28:d5:62:
4f:28:b1:20:0b:b8:5c:e8:8f:dc:f2:9e:d1:67:f5:d8:4f:d1:
f2:de:7a:e3:a1:c7:77:69:ad:9a:59:ee:76:97:dc:95:00:c3:
8c:2a:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:09 2024 by rpki-client on console-ams.rpki-client.org