Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j4L6tHZLJLYk-UZ0g9SrBDl8aKo.roa
File: j4L6tHZLJLYk-UZ0g9SrBDl8aKo.roa (raw, json)
Hash identifier: 9LlTA98Oze5TagadEhwmCShKk7BJVWvedg1n0InXjio=
Subject key identifier: 8F:82:FA:B4:76:4B:24:B6:24:F9:46:74:83:D4:AB:04:39:7C:68:AA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185F20B0CEA965E78FDF8B5E42ABF657886
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j4L6tHZLJLYk-UZ0g9SrBDl8aKo.roa
Signing time: Fri 27 Jan 2023 07:04:48 +0000
ROA not before: Fri 27 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212888
IP address blocks: 2a0e:b107:c00::/47 maxlen: 48
Validation: Failed, certificate revoked on Fri 27 Jan 2023 12:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:0b:0c:ea:96:5e:78:fd:f8:b5:e4:2a:bf:65:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 27 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f82fab4764b24b624f9467483d4ab04397c68aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:ba:da:49:70:55:07:9d:9d:b1:bf:bf:a3:
ec:f9:74:c8:10:ff:f6:8d:d5:c8:ec:0b:a8:bc:5a:
5f:14:a8:31:15:72:08:5c:9c:a4:07:2a:12:ff:aa:
7c:7a:04:0e:f7:e1:13:4d:97:f9:74:16:ac:71:04:
55:49:e4:47:0d:ea:29:8b:35:bf:b5:6a:3e:ef:a3:
31:96:58:d2:c0:6e:82:1a:10:8b:71:ce:7e:b2:94:
6f:02:1f:58:ec:ff:f2:12:03:89:3a:8a:68:46:d2:
3d:84:73:f4:21:3e:da:4c:08:a9:5e:b2:17:13:1b:
94:44:e2:76:9f:f0:67:67:27:9d:1c:57:52:b7:b9:
23:60:1f:95:e5:15:c7:0c:c4:43:d0:85:59:48:7b:
d2:3a:9d:26:0c:51:be:ad:57:bb:1b:80:a2:49:1d:
56:a8:7e:c5:33:8d:ef:cd:31:1c:d0:bd:6e:d2:c5:
04:d8:18:d1:97:60:b3:83:d9:ab:14:8b:25:93:d5:
8a:36:9b:c4:f9:a8:75:bb:56:8b:e9:e0:b0:be:16:
88:9c:96:d4:31:f3:83:79:0b:8d:31:54:aa:ff:59:
47:88:ca:38:e5:7f:a0:7a:a6:72:f1:47:97:7e:fe:
2c:67:96:d9:7e:cd:e5:72:f7:ec:d4:93:cc:bd:90:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:82:FA:B4:76:4B:24:B6:24:F9:46:74:83:D4:AB:04:39:7C:68:AA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j4L6tHZLJLYk-UZ0g9SrBDl8aKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:c00::/47
Signature Algorithm: sha256WithRSAEncryption
93:b6:e6:f9:67:6e:50:63:88:53:bd:82:62:83:80:4d:6c:57:
65:62:fd:83:4c:fb:52:48:6e:24:27:e6:cc:98:6c:b8:a2:41:
32:e0:a2:28:7d:98:c2:10:b8:e2:50:b2:8a:4f:f1:fb:49:e9:
5c:d8:f3:81:4b:4b:93:92:a9:8a:91:74:99:f4:77:39:8d:ea:
66:62:be:9f:44:a6:d6:07:58:93:52:47:ce:fe:f8:05:9b:f8:
cd:0b:3e:e4:d6:cd:c6:27:de:60:e9:e5:57:4a:fa:d2:6e:b6:
7d:eb:ce:bb:5e:ba:7c:ee:4b:13:35:85:3b:16:f2:24:4d:ec:
bb:19:23:9e:e0:0d:17:08:7b:ba:24:a3:8d:56:73:f0:fa:eb:
8e:f2:9f:54:aa:96:0e:05:c1:50:1a:d2:a7:1e:e1:d2:a7:0d:
8b:bb:81:48:17:06:43:43:91:61:73:a0:00:f9:20:97:34:56:
96:7e:68:33:ce:1d:55:10:4d:31:ed:29:2c:01:1b:db:af:6a:
c6:80:68:b7:08:9d:de:92:10:7d:3b:07:61:f0:62:bd:27:be:
71:89:2a:61:30:98:11:ca:eb:4e:f6:6b:cf:2a:2c:3b:ac:42:
5a:9b:5f:9a:85:e2:05:5e:4e:50:01:dc:4f:e7:8d:4c:77:0a:
f0:2c:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:10 2024 by rpki-client on console-ams.rpki-client.org