Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gTzuyRptDuKdQ92-wvzvcG3vL_c.roa
File: gTzuyRptDuKdQ92-wvzvcG3vL_c.roa (raw, json)
Hash identifier: nYgB5jZAX2TwmO7LgyM8bFuFv6cTpYdYssFCs6c6Yqo=
Subject key identifier: 81:3C:EE:C9:1A:6D:0E:E2:9D:43:DD:BE:C2:FC:EF:70:6D:EF:2F:F7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AB8C68F416C15FD103EDF356DCC86
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gTzuyRptDuKdQ92-wvzvcG3vL_c.roa
Signing time: Tue 24 Jan 2023 16:09:34 +0000
ROA not before: Tue 24 Jan 2023 16:09:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:b107:19a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Jun 2023 15:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:b8:c6:8f:41:6c:15:fd:10:3e:df:35:6d:cc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=813ceec91a6d0ee29d43ddbec2fcef706def2ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:11:1c:5e:63:63:87:a8:a2:27:be:ff:da:2d:
07:a7:94:b1:90:b2:df:9f:4a:81:1e:db:e9:dd:03:
17:7b:3b:ec:fe:92:66:24:0a:19:f3:bd:96:d4:43:
7e:dd:c3:2c:3a:d5:4b:d7:b7:1e:e1:96:fb:04:37:
09:c6:db:98:7a:45:3d:ef:8c:19:fb:10:c9:72:af:
b5:8b:e8:a4:8e:7c:23:48:cd:d5:62:38:11:d1:ef:
e3:a2:15:c6:53:55:e7:3a:2e:65:9f:f6:20:ea:09:
91:5a:7b:c3:94:01:c7:66:41:5a:50:6e:27:6a:2c:
0b:e5:66:c4:a9:98:57:65:bd:0f:90:f7:14:29:17:
98:22:39:d4:dd:9e:50:42:c8:3b:13:4e:84:f4:1e:
ef:97:25:f7:0d:7b:24:0c:e2:aa:23:89:50:16:7d:
12:64:34:a3:0c:e8:ae:0a:fc:c9:b7:03:a4:be:75:
c1:d9:8a:81:75:1d:00:84:60:e7:21:21:b9:7c:89:
2b:88:11:c3:3d:e6:ce:8e:60:d3:81:db:03:de:e8:
43:db:58:89:b1:f8:b0:98:69:c0:2c:a5:c6:47:f6:
a8:78:d8:55:c6:27:a3:36:96:02:58:1f:08:6f:a8:
63:a2:ca:39:9b:7a:9a:a1:ba:5e:52:a1:10:8f:54:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3C:EE:C9:1A:6D:0E:E2:9D:43:DD:BE:C2:FC:EF:70:6D:EF:2F:F7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gTzuyRptDuKdQ92-wvzvcG3vL_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19a0::/48
Signature Algorithm: sha256WithRSAEncryption
36:d0:49:75:c9:41:34:a3:ed:00:a1:b4:77:2b:6a:51:35:66:
2b:1a:b3:c2:e1:60:f3:7e:e5:c1:49:34:6e:04:c4:f0:6f:b1:
db:97:ad:83:ad:be:82:94:6b:1a:47:ac:7e:4f:72:f2:43:db:
50:5b:16:b9:7e:45:36:25:42:b4:75:2d:bf:fe:96:9d:af:b5:
c7:e2:c2:dc:48:db:f6:99:6a:b6:86:fd:fd:44:0a:c5:74:78:
4d:58:15:21:eb:d7:7d:30:2f:a2:24:bc:14:0c:2c:44:87:d3:
26:d9:a3:1e:f2:0c:45:c1:8f:9b:7a:40:71:0d:cf:3b:51:b5:
b5:af:dd:7c:ac:c1:e3:b5:9c:92:c0:b4:91:a9:7f:93:0f:c0:
e5:bd:a7:71:09:63:7d:6e:31:61:57:5e:b1:1b:f7:51:c5:51:
61:a1:61:61:27:89:af:52:7f:20:25:d7:ad:f3:31:7c:e0:61:
72:e8:36:de:f2:ff:9f:09:15:c5:e5:ef:d9:91:39:5f:23:00:
8f:ef:d3:07:3e:b3:04:fe:08:94:ff:73:da:d9:2d:c0:84:f7:
bc:05:b6:ac:5f:99:a0:5f:37:1f:62:7e:23:ed:94:13:05:fb:
e9:32:94:7f:f0:44:0f:f7:1a:8b:c3:85:52:1d:f9:2f:29:1e:
44:49:b6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:36 2024 by rpki-client on console-fra.rpki-client.org