Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gK6LneZx2-kUKV7JZKjTP4YXiyE.roa
File: gK6LneZx2-kUKV7JZKjTP4YXiyE.roa (raw, json)
Hash identifier: Dyd7+kzmPfd08pGX/lcpNq7fsta+UWLlemboSE8O4a8=
Subject key identifier: 80:AE:8B:9D:E6:71:DB:E9:14:29:5E:C9:64:A8:D3:3F:86:17:8B:21
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188632CDF2D8321C94BC6474BA0A8BB3E3F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gK6LneZx2-kUKV7JZKjTP4YXiyE.roa
Signing time: Sun 28 May 2023 16:24:24 +0000
ROA not before: Sun 28 May 2023 16:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41720
IP address blocks: 2a0e:97c1:100::/46 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Jun 2023 17:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:63:2c:df:2d:83:21:c9:4b:c6:47:4b:a0:a8:bb:3e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 28 16:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80ae8b9de671dbe914295ec964a8d33f86178b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:84:b7:3b:2f:a3:96:96:88:d3:45:5c:81:
ba:ad:a8:b1:90:6e:5f:45:8c:40:e3:2f:f9:72:f4:
1f:b4:7e:6c:2b:7c:12:40:24:ae:6a:e4:51:03:d3:
ba:6a:ee:21:de:49:5f:90:b9:73:e0:7a:54:75:db:
f0:10:f9:96:98:ac:c8:e6:53:35:39:36:e9:57:d3:
14:51:0b:e8:c0:96:5a:9e:07:07:05:a1:28:29:1c:
06:4e:f3:53:79:6b:f3:69:bd:71:f8:d3:05:80:e5:
83:13:ed:a6:ad:96:45:1b:b8:db:5c:2f:9b:c3:55:
2f:6d:8f:62:54:8a:6c:92:36:97:a7:41:63:be:7e:
0e:09:cd:96:f7:b8:99:9c:51:0f:23:a3:07:ba:13:
6b:a5:fb:5a:0b:c9:7e:e6:4d:be:a8:9a:f1:66:7f:
cd:f5:dd:3b:3a:e7:01:05:c8:0c:0d:42:be:6a:d9:
56:11:12:04:d2:9c:e6:dc:6e:63:f1:7a:1b:3f:76:
bd:23:f4:4c:89:10:7f:a9:7f:88:8b:aa:d5:61:5e:
1c:73:50:52:9a:cd:d3:28:00:86:a5:d4:9d:ae:5d:
58:b8:8a:6d:c8:eb:02:0d:3f:52:6c:ae:fb:5d:a0:
70:6d:40:2a:72:1b:8b:70:a5:13:2b:25:f1:68:3f:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AE:8B:9D:E6:71:DB:E9:14:29:5E:C9:64:A8:D3:3F:86:17:8B:21
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gK6LneZx2-kUKV7JZKjTP4YXiyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1:100::/46
Signature Algorithm: sha256WithRSAEncryption
2d:b2:75:cc:01:c0:0f:ce:36:70:c0:eb:66:ab:b6:62:33:60:
85:a5:9d:8e:b6:a7:df:08:7c:6d:cd:09:8c:ef:e4:2b:5b:e4:
90:5f:45:af:33:e5:ae:7f:c3:90:4f:72:9c:69:ca:21:60:1c:
52:a9:02:69:66:c3:20:b1:02:b7:50:52:6f:b0:b0:24:20:17:
ed:2c:87:7d:cc:da:da:36:2c:9c:7c:7c:ae:46:5c:05:3f:9a:
fb:81:59:91:25:c3:83:76:06:ef:24:8d:71:bc:8c:ab:2f:d6:
56:ec:31:86:1d:d3:a4:1a:31:e4:c1:0d:cd:7c:00:28:44:b3:
a4:c0:0a:6e:7d:7c:5d:a4:98:c0:83:0f:fc:53:57:ba:21:84:
6d:07:c0:df:0a:31:11:a2:cc:a1:2f:c4:4a:3b:ba:f0:f3:91:
4a:68:9d:e2:ef:d6:8c:48:ba:de:25:ae:c2:89:9c:f9:48:49:
1f:f3:92:25:d9:b0:dc:2e:f7:fb:f8:4c:44:4f:45:d8:fe:79:
34:02:a8:bd:34:40:82:1f:75:97:8b:bc:2c:78:c9:bd:af:be:
11:65:fc:4a:9d:2c:9c:a8:64:07:6e:dc:1b:cd:c1:52:06:92:
9e:5c:da:de:1a:8c:9c:17:69:1d:b9:7a:f7:2c:ca:06:52:5f:
3c:40:e5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:36 2024 by rpki-client on console-fra.rpki-client.org