Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fNioz3XfHl37Cgpq3KrbntuBUJo.roa
File: fNioz3XfHl37Cgpq3KrbntuBUJo.roa (raw, json)
Hash identifier: n3W71aMorm8qbHJVDpi+Q1q/zZzKHMGNAMI1+eFB0bs=
Subject key identifier: 7C:D8:A8:CF:75:DF:1E:5D:FB:0A:0A:6A:DC:AA:DB:9E:DB:81:50:9A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7FD549FBCD623111F3B9DC0D83920
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fNioz3XfHl37Cgpq3KrbntuBUJo.roa
Signing time: Mon 02 Jan 2023 05:15:29 +0000
ROA not before: Mon 02 Jan 2023 05:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211231
IP address blocks: 2a0e:b107:1390::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:fd:54:9f:bc:d6:23:11:1f:3b:9d:c0:d8:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cd8a8cf75df1e5dfb0a0a6adcaadb9edb81509a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:26:21:73:56:a0:f3:ff:3f:4c:02:8d:76:
07:5a:5a:5e:f1:88:55:21:94:5e:23:c3:11:5e:b7:
e4:fb:98:b5:c4:43:99:04:a3:fc:68:90:18:83:3a:
d6:91:82:6a:73:30:4b:94:4d:d0:87:de:5c:bc:9d:
cd:fe:22:82:39:a6:11:be:83:50:ec:9d:5d:07:39:
37:c1:9d:05:e7:ce:78:72:c4:78:4f:49:67:4c:ef:
ab:ea:87:3f:4f:d4:0d:04:fe:38:17:b7:6a:7e:de:
8b:d0:9d:cf:4a:36:06:65:d8:92:55:9e:f3:90:07:
48:9a:c9:ce:3f:4e:2b:6c:29:a3:2a:86:ff:b9:c9:
14:91:c1:bf:d1:e5:5f:65:9f:04:63:94:5a:c5:38:
8e:80:41:42:d5:1b:b7:56:0a:a9:6b:ca:23:67:9f:
eb:42:01:ca:89:5e:eb:7c:8c:f0:f1:6e:86:ac:52:
fc:d5:4b:fe:7c:ff:98:db:09:83:d7:21:bf:19:22:
ac:3f:d9:a9:b6:88:5c:c4:96:68:b5:25:ba:ee:78:
60:43:95:f6:62:e9:54:a5:a2:4c:12:aa:8f:8a:4c:
39:ce:fe:6e:9d:ea:5a:8d:23:b8:c7:0a:6a:9d:2a:
3e:e0:3d:bf:8c:81:c9:3b:a5:ab:82:d2:d1:c1:10:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D8:A8:CF:75:DF:1E:5D:FB:0A:0A:6A:DC:AA:DB:9E:DB:81:50:9A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fNioz3XfHl37Cgpq3KrbntuBUJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1390::/44
Signature Algorithm: sha256WithRSAEncryption
84:c4:60:5f:30:d4:0a:72:75:6a:18:15:70:2a:c2:e2:c8:1d:
08:0e:46:07:fb:88:e6:62:dd:6d:80:1e:aa:3b:83:f5:9a:47:
f3:ab:89:a8:ee:3d:4e:40:29:05:0d:7a:eb:24:ac:80:70:d8:
8c:d8:14:02:c4:b9:bf:a0:87:5c:f1:4a:6c:53:27:4b:50:60:
c2:83:fe:74:01:8c:1c:18:28:84:8e:26:f3:36:4d:4e:b9:77:
38:5d:d9:db:8e:fb:24:dc:7b:97:fe:5d:da:e1:0c:05:35:36:
1d:9d:34:18:82:bb:88:d7:8d:93:6e:06:9c:1b:de:54:c3:a3:
74:fb:39:e9:b6:b9:88:8e:0a:c7:1f:0a:c4:98:21:9b:1b:6d:
98:13:19:7c:90:f5:99:2b:fe:84:95:7f:69:84:43:30:9f:0b:
b7:d7:a4:39:17:c8:32:86:4a:42:3e:64:7c:8d:ec:f1:70:d7:
d9:0b:f7:c0:48:73:46:3d:df:d6:dd:4b:30:5c:19:78:8b:ff:
b4:0b:e6:18:d6:c8:f1:27:c4:dd:c3:8b:a7:38:02:3e:5b:bc:
12:94:a3:89:a2:de:3a:6f:f9:99:58:59:b3:85:00:17:7e:5f:
aa:e5:1d:77:c0:d2:b6:ef:c6:f0:a8:f4:9c:f4:30:55:52:f3:
03:b2:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:09 2024 by rpki-client on console-ams.rpki-client.org