Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jES5boBjPkVb4XccoEIlFqWL9Hk.roa
File: jES5boBjPkVb4XccoEIlFqWL9Hk.roa (raw, json)
Hash identifier: IcxeftPYQ38C0Xm3Dwjx/foT5cpwOLn4Kf9fbUHNrBM=
Subject key identifier: 8C:44:B9:6E:80:63:3E:45:5B:E1:77:1C:A0:42:25:16:A5:8B:F4:79
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E78E0F567D97BAB205269DC2559111
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jES5boBjPkVb4XccoEIlFqWL9Hk.roa
Signing time: Mon 02 Jan 2023 05:15:01 +0000
ROA not before: Mon 02 Jan 2023 05:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 2a0e:97c0:b33::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Aug 2023 15:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:8e:0f:56:7d:97:ba:b2:05:26:9d:c2:55:91:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c44b96e80633e455be1771ca0422516a58bf479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6a:8c:00:0b:68:0c:3d:f0:53:39:e6:2d:98:
da:c1:ee:c5:c0:b4:0f:d4:1a:35:30:7a:bf:27:83:
0f:30:5e:bb:59:01:55:a4:9a:35:dd:13:88:c5:6f:
d6:dc:ed:e8:e0:e9:92:2f:55:d6:6e:8b:b4:63:3b:
e3:a7:84:ef:dc:65:0c:6b:d2:0a:ed:27:a3:60:0c:
52:84:2d:d2:d6:a9:a8:56:1c:49:46:31:cd:99:15:
5e:13:ac:4b:b7:21:3c:44:1e:17:8c:60:45:e0:81:
01:12:f0:30:1d:3d:7b:b3:13:6c:7c:4c:6e:68:d9:
a8:8e:56:89:c8:87:29:dc:60:7b:d5:04:de:1c:25:
58:27:0e:89:3e:8b:2f:7e:03:51:ea:72:eb:7d:8e:
15:c4:43:c5:ce:2b:a9:47:a7:51:c7:02:c5:14:1b:
2b:6b:b8:05:7b:d6:39:fe:e5:36:a1:61:ae:82:8e:
59:7c:3e:b8:1d:d6:c6:ba:bd:a2:1d:83:4b:14:09:
7b:95:94:fc:5b:68:9c:71:70:05:e5:b5:b4:6e:82:
d6:4f:46:94:9a:ba:cd:4b:69:f7:41:b5:cd:fa:0b:
26:d4:80:60:ee:f4:dd:b5:9a:7e:c8:bb:99:3d:5f:
da:da:cc:8f:51:53:64:d1:7f:a4:80:7c:3b:40:54:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:B9:6E:80:63:3E:45:5B:E1:77:1C:A0:42:25:16:A5:8B:F4:79
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jES5boBjPkVb4XccoEIlFqWL9Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b33::/48
Signature Algorithm: sha256WithRSAEncryption
bc:f2:0a:3a:a0:5f:65:7d:c0:b4:ab:fe:78:f0:38:17:c1:3a:
c6:23:03:1b:e0:26:97:cd:b6:19:18:16:5f:6b:7c:c1:31:ee:
5c:91:11:e3:77:b0:c0:af:1c:c3:2d:2d:d4:23:30:fb:1d:c3:
37:69:89:79:42:a9:a5:9a:c8:6b:07:33:8b:8d:22:9d:0e:ce:
df:4e:9c:7d:1e:33:03:51:14:0e:85:37:4c:66:2c:2f:81:23:
9d:4e:0a:d1:36:79:fb:92:fe:7c:0a:7a:29:a5:e4:01:8f:d1:
ae:ee:cd:88:63:21:bf:4e:9b:3d:a9:75:af:8a:9a:58:b7:d2:
97:a7:fd:1e:05:53:b6:a4:5a:0b:4e:5c:e6:c9:bd:61:b2:6e:
ee:3c:3a:ab:3a:01:3a:45:69:c1:e2:7b:a1:19:e1:9b:7c:34:
b8:b7:1d:b1:4d:b8:ee:c1:e3:ec:c5:5c:6b:34:78:69:5b:4e:
29:09:24:8d:1a:cf:1a:0a:9d:5e:7c:79:3f:66:39:88:90:12:
84:2e:b2:74:44:90:28:7b:fc:65:6c:f6:f4:d2:2d:61:3d:03:
a7:02:cf:37:16:50:d4:77:b6:03:56:d0:a8:9e:6b:01:2f:f2:
7d:ab:55:52:06:ad:d2:5a:bc:63:9d:d0:20:e4:90:8e:0b:3a:
0f:d0:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:10 2024 by rpki-client on console-ams.rpki-client.org