Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mFVVf7-eZ0KZW0RB0LuojVZcIYQ.roa
File: mFVVf7-eZ0KZW0RB0LuojVZcIYQ.roa (raw, json)
Hash identifier: X9Nxa+u/wawH6fbl1K8qimKG/bwZu14mIkMKOqnRN9c=
Subject key identifier: 98:55:55:7F:BF:9E:67:42:99:5B:44:41:D0:BB:A8:8D:56:5C:21:84
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018B81114C92BE17CB9FA125C3D9F104F9D5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mFVVf7-eZ0KZW0RB0LuojVZcIYQ.roa
Signing time: Mon 30 Oct 2023 14:51:16 +0000
ROA not before: Mon 30 Oct 2023 14:51:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216233
IP address blocks: 2a10:ccc1:ccc0::/48 maxlen: 48
2a10:ccc1:ccc1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:11:4c:92:be:17:cb:9f:a1:25:c3:d9:f1:04:f9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 30 14:51:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9855557fbf9e6742995b4441d0bba88d565c2184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:a3:75:07:d0:31:00:a0:7b:77:ba:01:43:
49:35:9e:0d:52:9a:f0:31:f2:11:6f:92:e9:c9:44:
e7:d0:57:aa:54:93:ba:22:cc:e8:60:a3:29:18:10:
e6:22:36:e4:c4:7d:d5:5f:0f:8d:ca:c6:a9:eb:bb:
27:75:80:13:c5:af:de:42:da:91:4c:9e:b5:19:8f:
63:fa:c2:9c:46:ee:71:9e:61:31:52:51:88:9c:9b:
85:95:d9:7d:5c:b1:04:1d:af:e6:e8:05:44:21:9e:
25:9d:c2:43:f0:78:41:9f:e8:cb:58:36:b5:16:a2:
3f:c8:74:73:fb:36:09:b9:89:86:60:49:ea:de:e1:
4e:ef:0f:64:ce:4c:ff:e3:50:ea:62:e6:95:93:9a:
b4:55:36:ad:03:df:d2:30:e4:15:c5:05:56:b3:4c:
fe:d3:e9:52:dd:c7:8c:98:6b:e0:e1:92:9c:5f:df:
7c:7b:c7:28:d2:fe:29:af:4d:3c:56:14:c3:24:f4:
7d:9e:a6:54:82:1d:5e:1c:dc:1c:6d:2a:40:c7:ff:
86:e3:ea:36:c7:66:24:cb:19:1c:32:0e:41:f0:8a:
e5:2b:33:c1:92:f8:da:43:4f:c1:b1:89:57:ab:e7:
0e:ca:eb:32:a7:78:f0:43:77:ba:fa:ca:04:e9:ef:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:55:7F:BF:9E:67:42:99:5B:44:41:D0:BB:A8:8D:56:5C:21:84
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mFVVf7-eZ0KZW0RB0LuojVZcIYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc1:ccc0::/47
Signature Algorithm: sha256WithRSAEncryption
6a:f8:81:b2:42:30:13:ee:9b:2c:f2:cd:a7:7c:2b:04:2b:4f:
32:dd:ef:b0:54:32:7e:ed:a3:d7:46:2a:79:ac:a2:2d:6a:aa:
3b:12:cf:5e:91:41:0b:c9:7f:6e:ab:8e:3e:e6:6f:84:c3:f3:
16:57:51:e1:6a:3c:e3:63:c8:3f:e5:db:23:85:00:e4:ff:72:
cc:d2:bc:c8:dc:ac:be:19:82:16:59:1d:19:a8:9b:49:e6:92:
f7:9d:be:0d:0b:15:cc:d1:d6:ed:0d:6c:66:03:94:d2:1d:5b:
a2:a2:86:4f:e6:76:b5:83:f4:c0:54:f9:91:d3:f3:81:82:1e:
9c:e1:f4:1f:8e:76:ac:bb:55:cb:e0:f3:69:3c:16:87:99:9c:
78:7b:7e:7e:cc:41:9d:6f:46:29:57:e2:8f:6c:5c:2d:39:a1:
1d:69:2d:72:5e:d4:ce:2a:92:41:dc:63:68:80:33:8a:92:a8:
2d:80:04:37:0c:d9:22:87:83:d2:c0:19:91:ff:03:8c:d5:ad:
5f:df:dc:ca:64:81:8f:8b:73:c3:66:4d:1b:c3:6b:5e:b9:7b:
c2:9e:be:c7:5e:76:65:29:37:56:47:34:e4:f7:be:b5:0f:92:
9c:4b:47:eb:51:7a:ef:f2:72:32:1d:34:63:33:a6:05:6e:c1:
a7:40:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:37 2024 by rpki-client on console-fra.rpki-client.org