Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kwDRxfPm2bulQh1F43xYrEDCnDM.roa
File: kwDRxfPm2bulQh1F43xYrEDCnDM.roa (raw, json)
Hash identifier: 2MoyRUtwCxl1yTx505NAKbuSMKcHnmNjvJcbLkNyVz0=
Subject key identifier: 93:00:D1:C5:F3:E6:D9:BB:A5:42:1D:45:E3:7C:58:AC:40:C2:9C:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185DE40A8563262CB80C03D8B5DC0D993C5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kwDRxfPm2bulQh1F43xYrEDCnDM.roa
Signing time: Mon 23 Jan 2023 10:50:57 +0000
ROA not before: Mon 23 Jan 2023 10:50:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39753
IP address blocks: 2a10:2f01:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Jan 2023 16:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:40:a8:56:32:62:cb:80:c0:3d:8b:5d:c0:d9:93:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 10:50:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9300d1c5f3e6d9bba5421d45e37c58ac40c29c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:6f:b6:ca:c6:0a:1f:50:77:11:3a:dc:95:
47:17:d8:39:de:48:83:17:dc:75:e7:63:aa:3a:9e:
c4:ed:1b:0c:b6:83:ff:21:5b:b9:18:20:66:d3:6b:
cc:15:a4:41:83:4e:df:d7:a9:e8:3a:4f:bb:ba:bb:
fb:e7:a2:e4:a9:34:31:b1:e3:66:3d:9b:09:a6:a2:
98:17:fe:f6:86:bf:3d:33:9d:ff:8d:89:6e:f1:cf:
96:df:6b:03:93:68:bd:f4:31:48:08:95:5d:c3:5b:
f1:35:e2:5d:52:eb:31:d6:15:7e:2c:49:2c:f5:84:
2b:66:ea:bd:be:b2:56:60:08:e6:3b:79:3e:bf:0f:
87:ee:39:b9:4a:4c:d3:62:de:10:05:81:4c:18:ce:
f9:02:5f:6b:ce:35:ec:17:b1:cf:38:05:78:a9:44:
7f:67:f6:cc:41:60:70:a3:71:ad:1d:6b:a6:af:56:
cd:e4:22:12:07:fe:4d:2a:f6:e0:43:19:24:32:52:
0b:71:63:85:c9:cb:1c:cf:31:13:c2:b9:97:ef:c3:
f6:5c:8b:89:d3:03:e1:c8:2f:2d:a0:bb:52:03:4a:
aa:1f:87:64:84:89:49:f7:31:88:96:f5:1a:9c:15:
7f:35:f4:9f:65:a8:be:de:d5:03:2e:35:17:a8:de:
13:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:00:D1:C5:F3:E6:D9:BB:A5:42:1D:45:E3:7C:58:AC:40:C2:9C:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kwDRxfPm2bulQh1F43xYrEDCnDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f01:100::/40
Signature Algorithm: sha256WithRSAEncryption
2f:2c:01:c2:e1:d6:01:7f:8d:c2:d2:42:f6:15:b8:a5:c8:78:
68:db:33:39:2c:dd:91:4d:e2:4a:d8:8f:19:91:c6:8d:75:39:
c7:06:74:ae:af:09:53:38:b8:43:4e:91:73:91:41:36:eb:08:
34:4c:5f:25:bb:dc:aa:e9:04:b6:2f:6e:f7:2d:6c:72:4c:cb:
40:69:bd:a7:5e:f3:4d:c5:a9:36:f6:43:a3:4a:ca:c3:43:42:
dd:1c:f9:5c:1f:44:f3:ec:7a:ef:7e:40:9a:f7:5c:91:2e:9f:
4b:77:f6:d0:3e:75:a7:d7:25:16:6f:fb:9f:d9:35:c4:ed:99:
40:48:4d:34:31:73:7c:26:f3:11:98:59:21:4b:9e:5d:80:5e:
50:d9:82:62:79:24:97:21:33:31:10:db:ee:1a:3c:73:78:cd:
60:11:75:93:e4:e2:3b:38:9b:fb:ea:e5:58:d0:43:7f:2d:17:
d2:fe:69:f5:b3:84:cc:c7:77:bf:4d:87:c9:d7:ec:bf:b6:75:
d7:5a:25:f3:98:d2:23:33:f8:e3:ad:2e:bc:1a:3b:49:06:96:
60:6c:45:3b:a4:bb:3c:14:c6:f9:8d:eb:fd:79:15:d0:2c:66:
1a:3f:17:98:4f:ee:e7:58:79:19:b5:4b:b4:f4:44:84:41:69:
6a:da:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:11 2024 by rpki-client on console-ams.rpki-client.org