Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lj4PPbLCQgiLNqX8TOxMptPB7P4.roa
File: lj4PPbLCQgiLNqX8TOxMptPB7P4.roa (raw, json)
Hash identifier: CbDcCjIi8wP2/mYHuyr8ADKFNOSd+3d3Q7pyq0zQTDo=
Subject key identifier: 96:3E:0F:3D:B2:C2:42:08:8B:36:A5:FC:4C:EC:4C:A6:D3:C1:EC:FE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD48646147BD9A191F0EB625656908
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lj4PPbLCQgiLNqX8TOxMptPB7P4.roa
Signing time: Tue 02 Jan 2024 10:34:34 +0000
ROA not before: Tue 02 Jan 2024 10:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212793
IP address blocks: 2a10:2f01:2d0::/44 maxlen: 48
2a10:2f00:147::/48 maxlen: 48
2a0f:e401:130::/44 maxlen: 48
2a10:2f01:2d1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 Jan 2024 16:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:48:64:61:47:bd:9a:19:1f:0e:b6:25:65:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=963e0f3db2c242088b36a5fc4cec4ca6d3c1ecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:a5:e7:84:b8:7b:34:67:a1:46:8f:62:a2:
40:34:91:7b:80:fd:59:7f:bc:3c:08:67:fa:3c:eb:
39:cd:83:c6:75:0b:05:31:c1:98:ea:15:9d:da:ea:
de:16:77:b4:22:63:e0:fb:11:02:b1:e2:c8:48:33:
bf:b6:66:00:f7:f7:f7:66:65:82:7e:63:7b:19:ff:
dd:29:05:25:f1:20:6d:48:3b:2b:61:54:c0:94:11:
b2:45:5a:50:d0:08:79:33:0f:90:79:f0:c8:6d:6a:
6e:9d:93:09:84:01:87:4c:42:e9:f5:fc:f4:ba:ac:
ae:81:8b:02:66:47:2f:66:3a:5f:8a:f1:ac:75:e1:
c7:02:57:13:6d:30:85:60:29:cb:0f:fe:99:fa:bf:
6c:bd:48:ba:6b:2d:d8:68:0d:72:20:fd:55:15:d4:
3c:8e:da:c0:21:b8:ea:7e:2d:4b:6b:92:62:fd:e6:
72:9f:6e:99:aa:0d:05:15:26:39:84:27:ef:7f:f7:
c3:fa:88:31:5b:8f:51:37:f5:c9:8c:b8:87:70:4e:
da:41:cd:0b:af:4b:eb:43:2d:ba:0d:ac:d6:3f:51:
8f:d0:e9:97:c3:05:17:cd:fd:bd:94:2c:b7:1c:b9:
97:94:84:42:28:cc:df:0c:1f:21:d4:9e:cd:c1:39:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:0F:3D:B2:C2:42:08:8B:36:A5:FC:4C:EC:4C:A6:D3:C1:EC:FE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lj4PPbLCQgiLNqX8TOxMptPB7P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e401:130::/44
2a10:2f00:147::/48
2a10:2f01:2d0::/44
Signature Algorithm: sha256WithRSAEncryption
6b:74:a9:69:c8:cf:8c:14:46:50:d9:53:d8:92:48:06:b1:ff:
13:78:98:03:fe:e1:a1:0d:18:9a:92:b7:ef:e6:49:8f:a8:cc:
58:3f:19:64:bb:cc:bc:57:01:d6:c5:20:db:19:db:87:35:2a:
01:54:68:ba:63:82:fc:f6:76:37:89:97:d6:36:3d:d8:b0:12:
27:fd:6d:ba:34:43:78:63:bc:e0:d5:0a:72:16:34:e0:57:b8:
62:e5:37:f4:ef:d5:8b:52:a2:d4:d6:b9:af:ae:77:5c:6e:68:
9f:3d:ad:0f:34:94:ff:4d:16:29:a8:82:23:da:88:8b:25:06:
01:52:f6:86:65:b0:07:c6:5c:96:b4:a5:67:77:31:6e:22:c4:
9a:3d:6e:ed:b9:64:48:0a:e5:2b:ef:6b:dc:32:2f:18:32:9b:
79:1c:76:9d:82:24:17:c8:8f:5d:d4:60:c4:f5:8e:48:a5:15:
17:76:4a:4b:ac:11:7a:35:72:52:c8:f7:26:0c:af:d9:7e:e1:
4b:ed:c6:e7:23:cc:4c:21:21:bf:9a:b3:28:62:85:10:4d:bd:
c0:02:3f:14:c3:cb:a7:1b:4c:ec:7e:13:e5:73:84:5e:78:fb:
f1:9f:6c:cf:f1:56:cc:33:cd:37:a4:37:61:8c:aa:95:87:49:
bf:d2:c0:05
-----BEGIN CERTIFICATE-----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Generated at Sun Jan 28 17:23:42 2024 by rpki-client on console-fra.rpki-client.org