Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h6H0kqg33A3qqVL8l4IDreB0sS8.roa
File: h6H0kqg33A3qqVL8l4IDreB0sS8.roa (raw, json)
Hash identifier: S2E+TQHPxD/WdjjQyCm+NckkkRes7lDwy7EmyK/91CE=
Subject key identifier: 87:A1:F4:92:A8:37:DC:0D:EA:A9:52:FC:97:82:03:AD:E0:74:B1:2F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7AC6A0AD641088562DCBB198DFE26
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h6H0kqg33A3qqVL8l4IDreB0sS8.roa
Signing time: Mon 02 Jan 2023 05:15:09 +0000
ROA not before: Mon 02 Jan 2023 05:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202929
IP address blocks: 2a0e:97c0:510::/47 maxlen: 48
2a0e:97c0:512::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 05 Feb 2023 12:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:ac:6a:0a:d6:41:08:85:62:dc:bb:19:8d:fe:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87a1f492a837dc0deaa952fc978203ade074b12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:ba:22:d3:4c:66:bc:98:14:7d:bc:3d:f4:
61:60:a2:15:0c:08:49:00:42:56:68:64:1f:a3:d4:
09:7d:a9:7b:26:34:29:ec:80:a1:52:37:e2:e8:e0:
1a:fa:0b:a7:c4:db:80:e1:e5:a1:a3:39:cc:e2:da:
d1:e6:1a:b9:12:e9:b3:23:51:95:fd:88:76:e7:47:
d5:56:97:67:b9:3b:ee:a7:61:e9:79:b8:e3:3e:28:
e1:14:68:9a:7d:49:86:22:46:f6:1d:c8:01:92:70:
dc:d7:96:6d:09:33:af:0a:52:38:dd:ec:2f:b8:d8:
d2:0f:2d:43:e6:31:e6:51:c6:af:da:27:57:8f:15:
ad:c1:cc:bb:14:3d:53:c5:0c:2b:77:47:3d:39:8a:
70:1d:b4:37:c1:a4:dd:8f:fb:a4:76:71:ca:d9:5a:
05:a3:7f:e9:4e:5b:cd:5a:26:a1:86:c0:98:73:e2:
07:27:0c:15:05:b8:3d:a5:5b:b9:1f:bb:68:80:f2:
8d:1a:66:a8:ad:5b:c2:31:1b:d2:62:95:31:39:77:
d4:68:ac:00:b4:01:01:3b:d9:e1:e3:eb:6f:80:4b:
82:3d:2c:26:30:a2:2d:9c:97:40:c6:b0:1c:e0:9a:
b6:df:a8:5d:a4:4e:d3:23:7b:cd:8e:72:52:59:bb:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A1:F4:92:A8:37:DC:0D:EA:A9:52:FC:97:82:03:AD:E0:74:B1:2F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h6H0kqg33A3qqVL8l4IDreB0sS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:510::-2a0e:97c0:512:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:26:63:02:5a:b1:03:21:b8:b8:03:35:48:c1:d3:7c:c4:ec:
5b:29:a0:63:6b:4b:a0:d3:00:a8:d1:7e:b8:90:a3:c2:2b:5b:
01:2a:c7:95:57:c2:17:31:5d:86:ab:41:c1:36:3b:e4:f0:d4:
38:28:cf:6c:22:30:74:5d:df:f0:5e:5a:5c:47:7a:47:21:a6:
2a:c4:ef:c6:c1:ef:e0:04:7e:b5:63:3d:b9:54:6a:17:f1:82:
40:35:e5:d1:77:d6:a4:80:f7:91:3e:79:3b:2c:fd:0b:be:68:
9c:c5:cc:eb:0e:3d:ba:ea:4d:f5:f1:6e:91:ad:c7:7e:ca:32:
6d:ce:5f:e2:21:6e:a9:43:8d:c1:12:c4:3a:fc:da:3e:bb:79:
bd:58:5b:92:6d:5a:27:b2:13:63:cb:39:5f:49:7b:e1:f2:05:
0c:02:2c:47:74:5f:70:fd:cc:cb:49:1b:ae:53:8f:a1:79:78:
f4:09:87:72:d6:8f:35:d1:56:e2:d5:74:75:9e:87:00:66:00:
63:eb:89:06:5e:60:50:92:ae:ee:23:ec:58:ef:8e:85:4d:96:
cf:88:66:fc:23:0d:75:a0:bf:76:e6:6b:4e:fe:96:4c:ff:3e:
10:98:6d:0e:31:b8:05:4b:c5:4e:85:bc:c4:53:bf:70:ea:f6:
f9:f3:18:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:09 2024 by rpki-client on console-ams.rpki-client.org