Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fCr8v1SpXw4H0DDNdvNM59PEcvE.roa
File: fCr8v1SpXw4H0DDNdvNM59PEcvE.roa (raw, json)
Hash identifier: IFADaGGA6gEvK+lBRlLdN7VrBZcMSSAWPlm81+mSEdE=
Subject key identifier: 7C:2A:FC:BF:54:A9:5F:0E:07:D0:30:CD:76:F3:4C:E7:D3:C4:72:F1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7965DB68225B369E75266D3BCE4EC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fCr8v1SpXw4H0DDNdvNM59PEcvE.roa
Signing time: Mon 02 Jan 2023 05:15:03 +0000
ROA not before: Mon 02 Jan 2023 05:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142164
IP address blocks: 2a0e:b107:1470::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:96:5d:b6:82:25:b3:69:e7:52:66:d3:bc:e4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c2afcbf54a95f0e07d030cd76f34ce7d3c472f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:57:ad:10:02:2f:39:b4:d6:a4:00:d5:c9:
4c:aa:4c:28:20:7d:d3:ba:d6:9b:1d:3d:6f:f6:64:
b8:d1:58:cb:27:d2:3e:15:ae:db:b4:7a:92:8b:fd:
39:4c:4a:05:79:7f:6b:d6:62:22:7e:1c:d8:74:38:
9a:49:00:d5:0c:63:05:67:6f:01:d8:93:6f:74:5d:
39:65:7f:19:e2:bd:5c:89:6a:a6:5d:90:6c:17:d1:
74:41:4d:10:3a:08:eb:fa:bd:f2:a7:dc:c7:ec:77:
09:27:0e:62:b3:26:7e:a5:03:7c:12:db:15:18:54:
48:1d:9c:fb:96:eb:41:25:07:97:9e:e7:6d:40:96:
9f:ed:94:6b:96:e7:86:6c:ec:85:cc:2e:1a:c9:a8:
1d:51:bb:20:13:3f:9d:0f:e3:01:e1:0e:5b:2c:7e:
96:41:2d:00:6c:7f:5d:10:49:e0:47:ea:17:78:48:
cf:b6:f4:df:7c:78:6c:83:86:3c:21:59:f2:81:a6:
df:1c:fc:94:86:56:03:3f:aa:43:a2:ff:3e:05:93:
cf:70:01:b1:af:4b:a8:38:a7:39:82:67:71:01:01:
d1:9f:78:cb:4f:eb:6c:31:6b:4d:9f:76:8c:2a:2e:
64:d1:3c:93:92:83:40:87:1e:28:fd:53:7a:a5:9b:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2A:FC:BF:54:A9:5F:0E:07:D0:30:CD:76:F3:4C:E7:D3:C4:72:F1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fCr8v1SpXw4H0DDNdvNM59PEcvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1470::/44
Signature Algorithm: sha256WithRSAEncryption
90:28:ea:c2:b9:91:06:31:58:85:ae:96:d8:1c:ae:b7:1b:d9:
57:2a:84:58:36:14:29:1a:5b:86:d1:4b:3b:de:7a:94:41:6c:
e6:e3:03:df:22:c9:36:46:b9:4f:41:16:fe:82:52:75:f9:5e:
0c:7c:9b:14:6b:90:c7:33:76:80:fb:52:84:23:e1:71:a7:27:
eb:33:aa:7e:a1:97:cc:30:26:c5:5c:ee:86:87:38:80:a8:53:
27:c2:79:70:c2:14:b7:f8:ac:cd:ee:3c:b1:2e:68:45:59:71:
fc:8b:c3:7e:84:04:de:6c:27:e1:af:8a:24:83:81:86:1f:81:
de:5a:fd:6d:57:b2:f5:c2:76:67:84:93:82:be:3d:37:5e:89:
f3:49:3e:cf:fb:4e:88:cc:93:4d:31:93:cf:4d:a9:45:a5:22:
0a:d2:27:07:e4:65:7f:7b:08:0e:ac:58:b2:e8:34:ba:6c:4e:
2c:81:a4:41:87:02:63:d8:d7:18:0d:0d:6d:d6:5f:ab:55:c9:
45:93:97:ac:eb:6e:c1:e9:0e:c4:5e:91:78:a3:ce:62:cf:93:
8d:59:1d:6d:3e:50:cb:b5:0e:a9:e2:7a:26:9b:88:ec:12:15:
10:41:fc:97:b5:d5:99:51:32:80:d7:4c:25:a6:95:8b:96:f0:
9d:9d:b3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org