Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hjo60Ii5rZ_Af1CxLPZ606Sgc1U.roa
File: hjo60Ii5rZ_Af1CxLPZ606Sgc1U.roa (raw, json)
Hash identifier: civxtcxx2CoGhA+8RuF6jzA4ypEG+8q4mw493VR9ypw=
Subject key identifier: 86:3A:3A:D0:88:B9:AD:9F:C0:7F:50:B1:2C:F6:7A:D3:A4:A0:73:55
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01916466C928AFCE6C7DC8EC6E4F39616198
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hjo60Ii5rZ_Af1CxLPZ606Sgc1U.roa
Signing time: Sun 18 Aug 2024 07:32:23 +0000
ROA not before: Sun 18 Aug 2024 07:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214344
IP address blocks: 2a10:ccc6:6660::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 Aug 2024 14:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:64:66:c9:28:af:ce:6c:7d:c8:ec:6e:4f:39:61:61:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 18 07:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=863a3ad088b9ad9fc07f50b12cf67ad3a4a07355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:63:f1:59:0b:5a:dc:e5:2f:48:13:eb:de:
14:9e:89:ea:31:0b:2b:dd:1b:20:e4:e3:e3:04:66:
ad:06:17:b3:53:34:cc:aa:3e:46:27:e6:8c:01:46:
da:5b:83:aa:03:af:92:5b:ca:5e:dd:92:e7:c3:ca:
4c:87:44:3f:f2:5e:a7:f9:e6:4e:d5:67:a6:23:f1:
26:28:ce:36:68:21:41:3f:4f:70:c9:06:08:b8:67:
43:8f:c4:87:14:b7:d3:2a:a9:61:8d:cf:05:f3:35:
ee:6e:41:70:ad:46:f3:cd:ad:91:e9:1e:19:03:ef:
ea:d9:b4:32:d9:5d:77:d1:f1:6a:77:4c:cb:e7:2e:
47:be:fa:34:46:da:ca:cd:db:d6:f9:68:92:0d:6e:
64:e3:e1:43:23:9a:e4:ff:88:a2:2b:b3:76:cc:3b:
48:ca:6a:94:d0:3b:90:00:33:5b:11:58:db:3c:c5:
9c:69:09:15:ac:c4:a7:8f:0c:b4:d0:9c:24:a8:96:
8a:37:0b:0f:68:89:cb:40:b2:43:96:ba:51:88:ad:
43:a0:2d:68:59:6e:58:1a:ea:5d:14:3e:61:95:e3:
3d:d1:4e:cd:6b:43:9e:4a:8a:91:ad:00:74:4d:bf:
0e:cc:e7:06:05:39:5d:90:e3:cf:44:ca:de:3a:d1:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3A:3A:D0:88:B9:AD:9F:C0:7F:50:B1:2C:F6:7A:D3:A4:A0:73:55
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hjo60Ii5rZ_Af1CxLPZ606Sgc1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc6:6660::/44
Signature Algorithm: sha256WithRSAEncryption
21:96:10:3b:6a:fb:d7:57:84:90:c2:5d:63:ca:bb:78:3d:a5:
2f:24:63:9e:cb:99:86:34:a7:85:46:12:83:64:4b:36:b8:0a:
db:e4:4d:2d:f6:8c:06:d4:da:f3:1d:05:65:84:2f:4a:f8:7f:
93:ca:f6:27:13:02:e4:78:a1:e7:b8:e0:00:fa:3a:68:e1:7d:
95:63:7f:70:c6:00:98:39:88:ed:e6:bb:21:bf:c4:44:16:84:
4a:a8:4b:a1:6b:e0:10:ea:fb:13:17:b6:7c:65:28:10:54:25:
67:1d:53:14:6d:f8:e6:8b:60:ae:00:c7:1a:d7:9f:7b:7f:6a:
e7:2d:f5:31:3e:15:0f:0e:21:fc:24:39:45:6c:6f:ef:11:9a:
ed:ec:2e:f5:51:54:42:5b:cd:57:00:fd:5f:9c:1e:61:21:b1:
8f:4b:a0:51:34:d7:4f:d4:68:2e:50:94:57:2b:38:c2:fd:30:
2c:36:83:fa:a0:29:51:44:92:f7:cd:04:95:6e:83:92:89:91:
ca:0a:32:ed:f8:24:f9:5f:c0:9c:af:fc:fa:92:59:fc:5a:3d:
34:c9:3a:3c:e2:c3:2a:bb:b7:f6:ad:63:6d:7b:d7:62:c5:3d:
4d:34:16:5d:4b:cf:51:35:43:62:09:15:ca:90:8b:ff:5a:ae:
10:51:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 17:25:50 2024 by rpki-client on console-ams.rpki-client.org