Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hwe5H4zGJzoHEgPkgJSKiEMJECA.roa
File: hwe5H4zGJzoHEgPkgJSKiEMJECA.roa (raw, json)
Hash identifier: V5GLq3Dp6XlzFv+exRs+ZWIUfQg1p5wPVAjA4LeDBgI=
Subject key identifier: 87:07:B9:1F:8C:C6:27:3A:07:12:03:E4:80:94:8A:88:43:09:10:20
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018685850FF8049A4374A96A9958ADFB00FD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hwe5H4zGJzoHEgPkgJSKiEMJECA.roa
Signing time: Fri 24 Feb 2023 22:22:15 +0000
ROA not before: Fri 24 Feb 2023 22:22:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210397
IP address blocks: 2a0e:97c0:78f::/48 maxlen: 48
2a0e:97c0:78a::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 Mar 2023 17:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:85:0f:f8:04:9a:43:74:a9:6a:99:58:ad:fb:00:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 24 22:22:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8707b91f8cc6273a071203e480948a8843091020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:e9:79:70:26:79:a3:dc:74:02:f3:63:18:
fb:7e:03:c7:85:de:8f:24:6a:36:29:ca:85:f3:24:
3b:eb:30:f2:8b:8d:b1:3b:99:7b:f8:6f:cf:ab:e0:
c7:e9:6a:76:90:60:5d:10:0b:90:1b:fe:e5:c8:4a:
48:7e:05:b2:2b:b6:8e:4e:62:ab:31:28:93:97:b6:
eb:9a:7e:1f:03:53:9e:30:b8:4b:85:94:47:75:52:
b4:86:fd:c2:0f:73:d3:55:a1:2a:b2:26:91:38:d1:
e1:af:fb:1d:79:05:e0:80:43:1e:9f:e2:23:9d:d4:
6f:59:1e:41:2b:58:04:ce:f1:87:37:a5:ed:28:14:
ed:25:3d:be:65:fe:df:6a:e8:89:1e:82:df:ea:e3:
f6:5d:a3:d9:a7:ce:59:2d:36:53:3e:6c:79:be:4b:
76:54:22:2b:b2:54:1a:5a:49:af:cc:63:91:93:13:
f1:ca:a2:a7:92:5e:f8:01:84:b2:7a:5f:df:d0:c7:
3f:de:76:7c:1e:fa:a2:0d:ea:11:a8:c8:8c:3f:d6:
9d:9f:91:f9:44:9b:f6:c2:0b:28:3d:f1:50:99:12:
24:3b:f7:31:9e:19:49:d1:9e:23:dd:99:6f:7a:ef:
a6:20:c2:52:d9:06:cd:ae:50:5f:42:82:98:37:31:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:07:B9:1F:8C:C6:27:3A:07:12:03:E4:80:94:8A:88:43:09:10:20
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hwe5H4zGJzoHEgPkgJSKiEMJECA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:78a::/48
2a0e:97c0:78f::/48
Signature Algorithm: sha256WithRSAEncryption
7c:d1:80:ff:7c:5d:cb:bb:36:06:79:3d:fb:3d:a7:56:4d:95:
92:54:6b:23:9b:11:57:e3:92:60:f4:e4:88:02:1d:85:4f:ea:
b2:62:61:02:d7:7d:48:e2:7f:78:af:bd:d0:39:84:15:d2:42:
6f:e9:fd:df:38:00:db:97:03:b9:32:aa:54:31:a0:d3:27:69:
51:a4:49:1d:c7:a3:ae:6d:2f:06:5d:68:78:13:e2:cf:b8:f6:
06:7c:3f:48:c8:65:d7:ed:d0:cb:09:51:76:10:b5:da:08:27:
76:47:fb:64:6e:4e:2b:89:c4:51:05:40:de:82:1b:10:2e:04:
80:43:78:64:ce:92:0f:52:1f:21:a3:e5:ed:1c:69:f5:92:e5:
b1:f4:ac:b6:a0:65:b8:be:14:44:3b:da:67:5e:3a:0c:6c:20:
d9:c7:a1:2f:4f:90:54:61:a1:c4:a3:c0:3e:38:37:8f:b2:a4:
04:a0:55:4b:b6:b9:6d:e2:82:90:d3:56:e3:38:4f:25:d9:29:
64:75:96:ea:e7:37:b2:e4:f5:86:26:b2:79:1f:c7:f6:a4:f5:
48:b2:1e:ab:d9:0a:51:9a:28:ab:37:6f:58:71:dc:52:07:7a:
c2:97:12:7e:5f:fe:0a:1f:0c:1d:ea:75:fb:12:cb:2d:9d:54:
bd:6f:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:36 2024 by rpki-client on console-fra.rpki-client.org