Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iCSgP6jbRm4I60AJjv1q1OONLM0.roa
File: iCSgP6jbRm4I60AJjv1q1OONLM0.roa (raw, json)
Hash identifier: eArmfrYur6jufKUw28u5gUUQGd6WQEJn+VuKFQxgTJ0=
Subject key identifier: 88:24:A0:3F:A8:DB:46:6E:08:EB:40:09:8E:FD:6A:D4:E3:8D:2C:CD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD11A8E875884B64C7281235B682F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iCSgP6jbRm4I60AJjv1q1OONLM0.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49953
IP address blocks: 2a0e:97c0:680::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Jan 2024 17:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d1:1a:8e:87:58:84:b6:4c:72:81:23:5b:68:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8824a03fa8db466e08eb40098efd6ad4e38d2ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:2b:5c:64:38:52:e4:00:6a:27:70:62:b6:
55:a8:f8:06:56:a9:d3:3c:11:a8:f7:5a:14:a7:eb:
2e:a0:e8:b4:0a:fc:61:cd:c0:1c:f9:8a:80:db:8a:
a4:e8:28:61:cf:68:a3:0c:57:90:38:49:fb:4a:56:
2c:bd:a6:38:09:03:3c:34:a8:57:88:a3:b4:33:23:
54:0c:b3:ab:90:86:f0:17:df:e6:22:43:30:d5:f5:
ca:c4:4c:57:e1:cc:cf:c7:99:35:bb:a4:c7:98:9d:
c3:ff:34:35:11:dd:e4:5f:c3:41:a4:c1:9a:a6:08:
03:85:f9:27:b4:5c:1d:e5:6d:ca:3c:68:45:24:18:
1b:1d:dd:52:85:90:b8:b4:e2:8b:63:f6:5d:d9:a9:
67:68:62:22:03:ae:a2:99:7a:a2:32:bf:97:45:ee:
0f:a2:9d:f4:8f:fb:87:6e:70:a2:65:01:bd:9d:a7:
9f:c8:60:67:07:a6:63:c5:d6:ec:a1:15:cc:5c:89:
5b:2a:53:8a:7e:22:b7:2a:4c:c7:a5:85:fa:c8:4d:
04:17:f8:27:c8:e3:62:88:93:cb:fe:41:a5:b3:a7:
a3:e4:5f:0a:fa:a3:65:38:e8:cf:eb:f9:f3:bc:59:
58:51:11:98:35:82:26:13:5d:4a:f9:dc:18:93:db:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:A0:3F:A8:DB:46:6E:08:EB:40:09:8E:FD:6A:D4:E3:8D:2C:CD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iCSgP6jbRm4I60AJjv1q1OONLM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:680::/44
Signature Algorithm: sha256WithRSAEncryption
69:0b:41:9d:e7:2c:17:42:a2:ee:b4:2a:20:c3:b8:c5:37:8b:
b5:c4:df:e7:c5:bd:17:c6:44:68:0d:d6:f8:09:9b:64:7d:20:
d9:c5:5a:2a:a2:fc:7b:c1:16:3e:e0:03:17:1d:c7:a2:f7:4d:
ab:d8:2e:85:40:c8:d5:b2:05:f9:b6:ad:9d:f7:7e:90:9e:81:
24:c6:a4:40:84:94:81:1f:70:bd:97:52:09:03:f4:be:10:b3:
6b:15:2e:c4:15:d9:cb:16:5c:ec:e7:9b:39:29:51:71:42:31:
e7:50:c3:c1:44:55:4e:47:99:75:99:c3:6f:31:b3:7a:13:9a:
85:a5:c0:83:62:69:e8:96:bc:86:15:c9:20:cd:b1:49:28:73:
0a:0c:bf:17:59:79:c5:cf:ce:59:18:fd:c3:0c:7b:30:61:7f:
1b:b0:72:58:2e:a4:49:fd:6f:31:62:0e:4e:c9:e0:8f:fe:48:
22:1a:b6:3a:5c:52:ef:ef:7e:d9:6b:e9:d1:37:3c:ad:b8:d7:
d2:59:6a:23:d2:68:31:66:c7:8d:15:8b:9a:60:0d:ea:90:4e:
e4:e7:e7:b0:81:49:83:10:ce:99:4c:2b:a7:93:3b:53:dd:dc:
36:0d:58:57:bd:e2:38:0b:3f:b0:57:3d:bd:41:06:ab:e4:df:
f6:9d:43:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 21:19:53 2024 by rpki-client on console-ams.rpki-client.org