Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hTYfLjFcFvEpjpGbdvM4UvGLPQM.roa
File: hTYfLjFcFvEpjpGbdvM4UvGLPQM.roa (raw, json)
Hash identifier: uIywwB0DGpS2Et9FJb2gGMbPNB7vQmQSlwVe0rPaSOE=
Subject key identifier: 85:36:1F:2E:31:5C:16:F1:29:8E:91:9B:76:F3:38:52:F1:8B:3D:03
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD3963EA3617766B4A81DF09591F16
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hTYfLjFcFvEpjpGbdvM4UvGLPQM.roa
Signing time: Tue 02 Jan 2024 10:34:30 +0000
ROA not before: Tue 02 Jan 2024 10:34:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211665
IP address blocks: 2a10:cc40:120::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Feb 2024 23:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:39:63:ea:36:17:76:6b:4a:81:df:09:59:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85361f2e315c16f1298e919b76f33852f18b3d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:1f:c9:0a:38:0e:38:e5:1b:7a:96:35:c3:
d3:87:30:36:be:9f:81:8e:a0:94:e8:04:39:7c:bc:
58:3e:ab:b0:cd:59:0e:86:2a:43:0e:77:37:d6:74:
a5:ee:47:24:00:e1:41:93:37:30:10:c7:b4:02:df:
6d:3a:25:53:40:d4:c1:f4:c3:88:98:a3:a8:35:76:
21:ee:51:80:bf:28:f1:6f:1b:93:da:78:49:a2:8b:
56:6a:d3:6d:df:1d:d7:6b:5d:d6:14:03:b8:e7:07:
cc:ed:6f:84:ab:59:23:7e:6a:42:00:eb:a5:df:a2:
fb:07:4a:be:4f:12:ce:61:72:14:f8:f9:87:16:c5:
6a:70:5e:cf:ab:a4:11:39:34:39:3c:04:49:3a:ab:
4e:70:a0:71:e4:69:3c:b3:68:2d:06:b7:a7:df:e7:
83:8d:42:a8:9e:30:95:59:be:2c:c5:03:ea:59:e1:
f0:92:00:fe:94:aa:bd:c8:88:0f:1e:01:7f:95:7e:
9b:23:7a:7f:65:16:3f:6c:4d:43:ca:b2:bc:b7:87:
5f:1e:b6:cf:22:33:85:23:c5:94:a8:7c:14:d1:c0:
14:23:aa:86:fd:c8:a3:32:da:60:17:cf:1f:64:dd:
61:a0:2f:3e:6d:55:2a:82:7e:11:27:fa:18:a8:40:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:36:1F:2E:31:5C:16:F1:29:8E:91:9B:76:F3:38:52:F1:8B:3D:03
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hTYfLjFcFvEpjpGbdvM4UvGLPQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:120::/44
Signature Algorithm: sha256WithRSAEncryption
3f:e5:1a:ad:9c:b8:db:0d:c3:66:38:83:3f:f6:18:ed:38:b3:
be:1c:ba:5f:55:14:83:e5:70:7b:7f:bb:96:f2:b1:e8:a2:d8:
00:48:a6:6c:5d:3e:76:0e:61:89:98:ac:a4:ba:a6:51:df:43:
be:df:5c:46:47:f3:2f:04:37:5d:e8:69:55:a3:06:90:34:09:
f8:97:3f:b7:ca:09:ca:74:52:99:cb:d2:59:31:53:60:42:7a:
11:24:55:14:00:a8:b9:78:7c:76:7a:17:70:a9:fe:46:83:30:
6b:42:2f:42:bb:49:d6:ed:4b:de:0d:27:d6:25:b0:2c:22:dc:
09:84:9f:c2:22:ca:6e:0a:8c:07:54:a2:17:9e:49:0a:e8:9d:
19:5c:5d:7c:08:be:db:0f:ea:aa:94:7d:ef:3d:25:02:ef:eb:
27:d6:ad:37:84:30:da:bc:aa:d3:99:8b:d5:10:b3:2c:98:3b:
e8:f8:b5:5a:ba:03:77:85:75:11:b5:8a:42:f3:d1:44:b2:83:
91:cc:14:eb:6c:03:ed:53:a2:c3:95:8f:05:15:4b:77:7c:7a:
7b:ac:a4:db:93:97:b8:23:c5:23:ca:61:5f:2e:d4:a2:d5:14:
1f:20:7d:94:15:3b:1c:dc:fe:bf:32:7f:80:27:7c:ee:42:ba:
11:1c:9f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 05:03:25 2024 by rpki-client on console-ams.rpki-client.org