Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jNPtx2fYXqOWvkjNMHXiiIzxl2o.roa
File: jNPtx2fYXqOWvkjNMHXiiIzxl2o.roa (raw, json)
Hash identifier: b93fCJHyQ9QJAGWCojJptSrbnpGxJpwUiinoJ7wF0Yg=
Subject key identifier: 8C:D3:ED:C7:67:D8:5E:A3:96:BE:48:CD:30:75:E2:88:8C:F1:97:6A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01869B6B0102B55B2825B1EB2D177F4AE907
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jNPtx2fYXqOWvkjNMHXiiIzxl2o.roa
Signing time: Wed 01 Mar 2023 04:25:26 +0000
ROA not before: Wed 01 Mar 2023 04:25:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200160
IP address blocks: 2a0e:b107:660::/44 maxlen: 48
2a0e:b107:640::/44 maxlen: 48
2a0e:b107:1d60::/44 maxlen: 48
2a0e:b107:600::/44 maxlen: 48
2a0e:b107:1e00::/44 maxlen: 48
2a0e:b107:5e0::/44 maxlen: 48
2a0e:b107:6c0::/44 maxlen: 48
2a0e:b107:800::/44 maxlen: 48
2a0e:b107:5f0::/44 maxlen: 48
2a0e:b107:670::/44 maxlen: 48
2a0e:b107:bb0::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Mar 2023 02:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:6b:01:02:b5:5b:28:25:b1:eb:2d:17:7f:4a:e9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 1 04:25:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cd3edc767d85ea396be48cd3075e2888cf1976a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:38:67:95:df:87:a2:70:28:25:f5:44:bf:
aa:65:92:a8:8c:39:50:1e:24:b2:88:20:60:33:43:
d6:c5:ca:83:a8:f2:a5:fc:ac:40:ff:66:81:34:b6:
e7:16:6e:a6:4a:4e:51:0a:c1:ec:4b:11:ca:69:f6:
db:41:84:a9:bc:23:50:e0:2f:90:41:8a:9a:66:ba:
29:1a:96:46:b1:72:71:ce:5f:b2:85:58:c5:65:4d:
b0:f5:46:6c:53:cf:d9:c7:52:f2:95:c2:1c:a2:26:
fb:26:e6:ba:0c:bb:5e:58:bd:c8:a6:f6:f0:19:e5:
5c:68:d7:6c:82:89:2f:ef:8e:f1:71:05:40:4a:ad:
d6:c4:f8:17:bf:68:32:8e:39:0a:e8:ae:ba:a6:c3:
3b:1f:ea:5b:1e:53:82:8a:b4:4e:e6:c7:d6:aa:19:
38:c3:ec:a1:bb:36:99:e6:fe:cf:e2:0d:2e:76:af:
44:be:0e:64:90:29:ef:94:0b:97:88:b1:ad:cb:85:
5b:e7:3d:fc:49:a8:0c:02:73:a6:ec:27:15:c6:f5:
5e:1c:90:5f:b8:54:40:b0:92:a4:8a:1f:11:d2:82:
1c:ce:c9:34:56:60:26:f6:84:4e:c4:2f:e7:8f:19:
e9:5e:f4:f0:b1:5b:6b:ba:f5:d4:a5:ea:9a:2b:77:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D3:ED:C7:67:D8:5E:A3:96:BE:48:CD:30:75:E2:88:8C:F1:97:6A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jNPtx2fYXqOWvkjNMHXiiIzxl2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:5e0::-2a0e:b107:60f:ffff:ffff:ffff:ffff:ffff
2a0e:b107:640::/44
2a0e:b107:660::/43
2a0e:b107:6c0::/44
2a0e:b107:800::/44
2a0e:b107:bb0::/44
2a0e:b107:1d60::/44
2a0e:b107:1e00::/44
Signature Algorithm: sha256WithRSAEncryption
44:90:49:e6:1a:51:33:9e:a0:44:2f:b2:76:c4:3d:75:f2:dc:
63:f9:3a:5b:ee:c4:30:e2:32:8a:b7:06:11:d9:13:db:6b:a4:
31:29:34:87:4e:bd:af:29:22:4f:b2:b1:11:f7:45:5a:6a:b7:
50:11:52:70:e7:0e:62:c2:0b:b4:32:34:0b:9a:b6:be:bb:69:
4d:95:12:9e:85:65:ee:21:92:44:3d:06:b8:13:2f:3d:18:ac:
b3:d6:43:6f:1a:26:70:dc:24:94:ae:ae:8c:6f:e6:c7:f4:1f:
02:f4:9c:c4:58:ba:fb:22:d6:dd:db:fd:e1:b7:a4:42:c8:c6:
ed:35:03:b0:2b:08:bf:06:7b:1d:a6:5a:bb:db:ff:93:13:e7:
fb:5f:63:5a:33:fd:0f:1b:70:49:f2:fb:13:3e:43:fd:6a:41:
82:9f:ea:c5:16:9b:eb:b8:65:46:c8:ac:12:2a:0b:bb:a1:45:
54:b0:cf:b6:a0:24:9d:7c:60:f1:f1:a7:48:06:ec:68:8b:c6:
e0:5e:cc:22:b3:d3:77:ad:1d:43:0b:10:f9:ed:a2:6d:d6:09:
b8:bf:2e:b8:be:b6:2e:de:61:7c:b8:bf:9e:3e:63:af:71:0c:
af:ff:ec:e3:69:df:7f:95:f7:2e:41:75:7b:40:35:0d:bc:59:
d7:1b:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:36 2024 by rpki-client on console-fra.rpki-client.org