Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jgidP17KQYk65pOJtBgmvr9QGmA.roa
File: jgidP17KQYk65pOJtBgmvr9QGmA.roa (raw, json)
Hash identifier: Tu2mXsz3dWmLo5XTNhiDXvnu9kScvvjDlaEV6EKRCUs=
Subject key identifier: 8E:08:9D:3F:5E:CA:41:89:3A:E6:93:89:B4:18:26:BE:BF:50:1A:60
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A287D612C327C5FC51F4950A3656FA864
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jgidP17KQYk65pOJtBgmvr9QGmA.roa
Signing time: Thu 24 Aug 2023 17:00:20 +0000
ROA not before: Thu 24 Aug 2023 17:00:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216411
IP address blocks: 2a0e:b107:2050::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 03 Sep 2023 15:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:7d:61:2c:32:7c:5f:c5:1f:49:50:a3:65:6f:a8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 24 17:00:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e089d3f5eca41893ae69389b41826bebf501a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:a0:83:fe:08:02:8a:87:57:2b:08:fa:f5:
51:8e:85:e3:66:8a:46:81:35:34:9a:4f:c0:fc:c6:
77:91:67:30:40:8d:fd:b0:da:60:e5:e3:e0:65:64:
cf:9a:6c:e3:31:4b:a1:b3:f6:27:3f:d3:51:a5:e9:
c0:12:1f:07:de:72:bb:2c:66:cc:62:ea:ac:96:b7:
90:fa:69:68:f4:16:75:0d:3d:a2:71:52:96:29:93:
98:af:08:c3:34:c1:84:ba:35:e2:3d:3e:f5:b5:80:
02:32:4a:ac:90:7d:88:af:67:5c:06:e4:69:10:de:
fc:a5:70:3a:d5:56:83:e2:59:13:9a:3e:ce:f3:44:
6b:cd:59:54:9e:78:0a:da:6f:30:cb:11:90:13:18:
f3:1a:61:ea:ef:e6:62:92:cd:71:39:a2:89:f7:9c:
96:80:8f:a4:1e:b1:56:13:56:6e:d6:af:c7:48:07:
f2:7f:23:e4:f9:f1:99:d2:84:4b:9a:12:a4:fe:11:
84:7e:55:8c:17:35:d8:e9:5c:42:29:74:f8:72:7a:
38:7c:a5:eb:29:6d:fd:5f:b5:39:3e:b8:fe:ca:84:
c0:1f:5a:57:d0:09:db:ad:05:31:7b:71:d6:c1:5c:
89:bf:e0:25:3d:50:96:3c:bd:71:b0:b2:eb:18:c4:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:08:9D:3F:5E:CA:41:89:3A:E6:93:89:B4:18:26:BE:BF:50:1A:60
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jgidP17KQYk65pOJtBgmvr9QGmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2050::/48
Signature Algorithm: sha256WithRSAEncryption
19:cb:27:db:f7:4c:ec:0c:0f:48:08:f6:9c:27:76:c8:9d:b1:
8c:f4:7b:cb:b8:6e:c7:b0:b8:da:67:ad:56:ca:e0:b1:c1:40:
0b:13:24:d8:ff:78:6c:4c:b2:1a:5d:89:57:5f:3c:ba:e4:c0:
b3:99:ba:f1:0b:48:61:ba:dd:8a:3e:f2:f6:13:3e:fe:3a:cc:
54:6d:c0:66:b5:b2:38:7c:f1:cf:73:c4:90:d3:6d:e8:f4:44:
9c:d6:28:58:a4:8c:91:85:da:32:8f:1e:52:22:89:a4:95:c6:
ff:20:0c:68:95:2c:86:38:22:bc:9e:2d:99:a0:53:c2:85:b9:
a8:de:13:43:45:04:1d:73:f2:f8:b3:68:22:cb:69:bd:27:b7:
8f:a5:99:af:ba:44:c4:54:b5:85:33:c7:0b:c7:a4:b1:3c:36:
e7:36:d6:3b:5f:c2:7d:9f:db:57:4c:cc:c6:b5:70:4d:b3:84:
f5:64:96:32:45:30:dc:a9:35:be:bb:4e:21:0b:38:64:e1:b1:
1d:eb:33:d0:5f:8f:21:99:b5:a2:0b:58:0d:5e:d3:37:26:ba:
41:2e:7d:74:33:e0:1d:de:39:7a:4a:91:0d:ea:a8:73:0f:15:
14:81:2b:5a:6e:4c:eb:eb:fb:dc:c1:25:f5:5e:5d:e4:8e:0d:
19:18:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:10 2024 by rpki-client on console-ams.rpki-client.org