Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g6vwQqPi5pgFkOO3xU6j0ljQ5dQ.roa
File: g6vwQqPi5pgFkOO3xU6j0ljQ5dQ.roa (raw, json)
Hash identifier: Oaslo13Z4lCLxDOPiECLMGIKc0FygwASV6iNs4ZMsRE=
Subject key identifier: 83:AB:F0:42:A3:E2:E6:98:05:90:E3:B7:C5:4E:A3:D2:58:D0:E5:D4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DDBB9E10E23D94EF3E61220C34F958BB8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g6vwQqPi5pgFkOO3xU6j0ljQ5dQ.roa
Signing time: Sat 24 Feb 2024 15:26:48 +0000
ROA not before: Sat 24 Feb 2024 15:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34927
IP address blocks: 2a10:ccc3:ccc0::/46 maxlen: 48
2a10:ccc3:ccc6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Mar 2024 15:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:db:b9:e1:0e:23:d9:4e:f3:e6:12:20:c3:4f:95:8b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 24 15:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83abf042a3e2e6980590e3b7c54ea3d258d0e5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:c3:1b:17:17:98:31:24:ae:01:b5:46:3c:
20:77:56:7a:e7:d3:6e:6c:a8:03:70:24:8a:b6:30:
a2:67:d4:77:0b:62:28:9c:d1:a9:cb:42:ce:49:ad:
6a:ea:cb:4e:3e:86:5a:30:c4:9b:b4:48:2d:61:ae:
e9:bd:02:4e:14:fe:65:dc:42:4b:6d:be:0d:70:17:
c0:f8:c5:01:ea:50:b2:f0:ea:b0:2c:b4:8c:da:a2:
8a:ec:3e:5f:c6:09:0b:ab:2a:74:bd:14:f5:39:9e:
86:55:71:67:79:d4:0b:cf:3b:6e:cf:aa:f9:03:0e:
27:d2:e5:e0:99:6e:fe:4e:ba:9e:93:98:b6:7d:f3:
1c:c0:01:8d:0c:e6:4b:b7:21:01:d3:90:ce:4a:0f:
d0:8e:f7:7c:e0:ce:a2:79:70:82:f7:b9:b4:8b:5a:
ea:66:1d:61:98:c9:15:ab:81:2f:c0:5d:4b:26:ea:
50:67:29:17:d9:51:23:fb:bb:44:13:c7:20:a0:23:
d8:21:59:b4:5a:a2:bc:05:43:1e:c4:95:95:a8:9b:
cf:29:1d:a8:3e:e8:fc:9e:c0:1b:79:84:2b:2e:7b:
00:b4:95:a6:20:b3:ca:b7:53:e7:36:9f:e1:79:3c:
65:6e:19:26:5b:49:ac:a4:37:71:58:32:1a:d6:16:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:F0:42:A3:E2:E6:98:05:90:E3:B7:C5:4E:A3:D2:58:D0:E5:D4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g6vwQqPi5pgFkOO3xU6j0ljQ5dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc3:ccc0::/46
2a10:ccc3:ccc6::/48
Signature Algorithm: sha256WithRSAEncryption
05:e3:84:a7:e7:f7:67:d0:99:a4:b5:1b:bc:2f:ce:01:d1:5e:
7e:3d:f2:3a:06:8c:da:06:90:8b:92:1e:fd:21:cb:6c:6c:50:
c6:7f:04:6b:ab:4d:10:54:3a:ea:27:17:bb:7f:86:58:21:da:
76:8b:23:0a:9b:a6:51:b4:d9:c8:4e:0e:4c:11:1c:38:58:51:
92:b5:24:93:11:a3:c0:50:87:21:4a:7d:03:d9:85:53:90:1a:
b8:53:3d:8e:68:84:51:5d:96:46:66:51:1b:09:7a:04:59:96:
a8:67:8a:55:28:94:ed:d9:77:e7:b3:00:67:41:03:6e:9c:8f:
1d:37:5c:39:75:3c:f0:d4:29:d1:78:f6:30:74:33:56:04:64:
fe:1e:c1:1c:80:6b:1c:97:78:af:d8:a3:01:b8:e3:e4:ed:fa:
24:c9:99:e2:8f:d9:5c:5f:00:53:29:b9:32:1b:f7:9c:cb:93:
59:4d:8c:1f:a3:27:e0:3a:03:aa:a3:ce:c1:06:fd:3b:bd:d3:
8c:53:00:8c:bd:af:bb:23:f4:ed:db:71:36:c6:3f:74:78:0b:
70:5b:96:8e:e7:26:0e:39:97:96:ca:7a:00:78:7a:c7:29:be:
84:83:19:2c:9b:6c:6d:98:45:30:bd:c8:6a:4b:ba:02:4b:39:
5f:52:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 18:17:01 2024 by rpki-client on console-ams.rpki-client.org