Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kLGkRUryo0F06lvwVtTxGZCEwhE.roa
File: kLGkRUryo0F06lvwVtTxGZCEwhE.roa (raw, json)
Hash identifier: ETNkxwe6fKqVR63nFm/wUAl0sepwwu1LbtQM1+9BuRM=
Subject key identifier: 90:B1:A4:45:4A:F2:A3:41:74:EA:5B:F0:56:D4:F1:19:90:84:C2:11
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F905E86BA48D4E59264CB861AFC069D66
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kLGkRUryo0F06lvwVtTxGZCEwhE.roa
Signing time: Sun 19 May 2024 10:21:04 +0000
ROA not before: Sun 19 May 2024 10:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:de00:10::/48 maxlen: 48
2a0e:97c0:411::/48 maxlen: 48
2a0e:97c0:8e0::/48 maxlen: 48
2a0e:b107:19a0::/48 maxlen: 48
2a0e:b107:1a63::/48 maxlen: 48
2a0e:b107:1a64::/48 maxlen: 48
2a0e:b107:2880::/46 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Jun 2024 17:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:5e:86:ba:48:d4:e5:92:64:cb:86:1a:fc:06:9d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 19 10:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90b1a4454af2a34174ea5bf056d4f1199084c211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:0c:a8:2b:71:78:d8:33:59:7d:33:42:d5:
ee:fe:32:5a:62:bf:61:fa:b6:0e:6a:5c:66:c7:14:
00:b1:27:0c:49:e0:b0:30:a1:ee:cd:47:93:58:ab:
31:10:20:73:bd:ea:5f:21:65:40:6d:b9:7c:d5:0c:
2f:2a:fe:e1:38:3f:fa:ad:78:db:00:73:56:f4:09:
86:ba:af:18:fe:5f:59:b7:2b:88:29:db:33:6f:0c:
fb:93:cf:e1:4d:d5:05:ef:f6:72:1e:25:c1:59:5e:
92:88:4f:af:a6:51:b3:4a:f9:d7:49:1b:5b:c1:44:
0f:0f:fd:38:c4:fa:45:78:4e:43:3e:04:28:27:86:
ea:4d:f7:75:de:c5:65:3b:3c:df:6b:e6:17:07:53:
48:5d:dd:bf:5d:a2:11:f0:40:b3:21:aa:6e:69:b4:
74:a7:5b:16:84:79:9b:93:36:c5:5b:45:41:55:90:
48:54:a8:8a:ce:78:80:01:9e:85:a9:58:21:2d:72:
a5:aa:40:20:18:d2:1a:2b:f4:e9:59:8f:67:2c:08:
e4:02:7f:2c:e6:70:2a:8f:f5:8e:88:d8:e5:8b:9d:
9a:e2:7b:af:b2:cf:6e:41:3a:37:82:01:64:94:47:
d8:ba:be:b0:5b:69:52:f3:8f:d5:66:03:9d:aa:5c:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B1:A4:45:4A:F2:A3:41:74:EA:5B:F0:56:D4:F1:19:90:84:C2:11
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kLGkRUryo0F06lvwVtTxGZCEwhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:10::/48
2a0e:97c0:411::/48
2a0e:97c0:8e0::/48
2a0e:b107:19a0::/48
2a0e:b107:1a63::-2a0e:b107:1a64:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2880::/46
Signature Algorithm: sha256WithRSAEncryption
32:0f:4d:0c:10:b1:86:ab:f1:af:8d:2d:e7:ce:8c:50:31:3b:
c8:3c:57:fb:45:e9:5a:fc:88:d1:f6:bd:f3:ab:6d:40:a1:ba:
03:ed:ab:a0:0d:52:ce:a7:6b:4d:ff:50:e8:4e:21:81:a0:c9:
f0:24:d6:96:c2:81:fd:17:61:0a:e9:48:f2:12:37:1c:ed:63:
64:f4:49:8d:7f:68:9d:6e:04:a5:5e:d3:8a:39:34:1d:86:03:
c2:64:7d:21:1b:10:12:89:e7:89:d8:61:00:cb:5e:1f:ad:07:
ed:30:56:7d:1b:ff:41:20:3e:99:4e:2c:7f:1e:c0:90:f6:62:
42:eb:ff:70:cd:09:c6:81:4d:8c:f1:3e:63:3e:b7:31:48:4d:
d8:0d:af:d2:06:85:97:d7:8e:ef:ad:ad:c2:8e:4f:15:97:66:
ec:6f:58:70:42:05:1e:de:13:23:22:d1:9d:7c:38:48:cb:6e:
d3:8b:2a:e8:4c:34:e5:a8:c8:1d:c5:e9:f1:c8:d7:3d:68:a5:
ab:5d:cb:13:e7:6d:44:d0:3b:f0:a4:e4:83:0b:5e:84:20:29:
f6:59:50:ad:b8:b1:64:a8:11:a9:61:ae:53:46:16:3f:f3:25:
e6:95:ea:8b:c2:cc:24:f0:33:f7:6b:7f:6d:0b:93:44:ac:30:
b0:d6:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:11 2024 by rpki-client on console-ams.rpki-client.org