Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mj1WTx0ASHFlv0p3JH0PLpsurLI.roa
File: mj1WTx0ASHFlv0p3JH0PLpsurLI.roa (raw, json)
Hash identifier: ZTYY6gt/wAI49cczZbVAqXSCW0ASeisPQb94l1ENQsQ=
Subject key identifier: 9A:3D:56:4F:1D:00:48:71:65:BF:4A:77:24:7D:0F:2E:9B:2E:AC:B2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A028CA1589D49528001196DE1A825D90F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mj1WTx0ASHFlv0p3JH0PLpsurLI.roa
Signing time: Thu 17 Aug 2023 08:11:25 +0000
ROA not before: Thu 17 Aug 2023 08:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 2a0e:97c0:d50::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 17 Sep 2023 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:8c:a1:58:9d:49:52:80:01:19:6d:e1:a8:25:d9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 17 08:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a3d564f1d00487165bf4a77247d0f2e9b2eacb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:0f:7e:b5:c0:d2:c5:7f:b4:d6:00:af:ed:
4b:29:58:9c:aa:7b:ac:fe:c3:25:76:79:1e:58:3e:
05:ff:5d:83:8f:da:57:95:f4:6b:17:6e:d1:be:af:
e2:6a:41:b1:61:cb:60:9b:52:98:2b:ee:52:0f:99:
51:16:05:01:2e:f7:d2:9f:b6:92:8d:b1:92:e2:18:
48:89:6b:0a:44:34:ca:a8:e7:3d:be:c8:7b:65:30:
5b:0a:35:a5:53:4b:0a:b7:41:76:b0:25:4a:8d:1d:
52:47:0b:3d:66:6a:fd:88:e5:76:73:34:b6:a0:a1:
e6:ad:f8:63:2c:35:d6:cb:b1:44:92:62:74:6f:18:
bf:44:89:12:a2:18:fa:49:a1:45:9d:8a:42:3b:3e:
55:f8:1a:d1:89:d3:94:92:6d:21:8b:8d:0e:cb:f4:
0f:93:a9:c7:6a:45:ed:86:0c:1a:79:dc:24:97:db:
95:3e:1f:73:66:99:88:dc:b7:e5:57:3d:74:fe:cb:
eb:b0:fe:a2:96:88:b1:9a:c7:31:ee:55:e6:c5:81:
3e:e1:64:f7:4b:ab:76:db:ef:e6:7d:76:13:d9:4e:
55:7b:71:1f:c7:b1:86:32:bc:05:ae:09:d8:3f:73:
59:6c:87:65:8d:02:2d:90:04:32:68:30:5e:9c:29:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3D:56:4F:1D:00:48:71:65:BF:4A:77:24:7D:0F:2E:9B:2E:AC:B2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mj1WTx0ASHFlv0p3JH0PLpsurLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d50::/44
Signature Algorithm: sha256WithRSAEncryption
91:33:bd:16:3d:7c:83:4c:35:b0:85:e8:07:7e:b4:81:f2:9d:
95:9e:ad:dd:da:82:66:75:39:aa:ee:66:12:48:3b:2e:87:98:
38:d5:54:7c:c7:13:cc:39:a5:6f:36:12:c8:fe:96:9a:c0:d2:
b3:ba:80:99:5c:f0:ae:aa:ad:b6:06:7d:9c:09:2d:b9:81:f9:
8e:a3:e8:80:e6:85:14:a8:6c:a7:8e:aa:42:64:1c:23:74:57:
31:c6:dd:50:68:5b:ec:82:45:c1:ff:72:03:e3:83:b3:67:e1:
87:b6:f9:8d:d1:f9:a1:14:cc:fd:60:8f:7c:88:d8:74:8b:a4:
69:ca:0f:6c:6d:b9:e7:85:bf:91:71:ee:e7:52:90:ba:03:5b:
ca:51:d1:e2:7c:64:69:e9:9a:6b:df:e5:e4:bd:b3:87:24:58:
e6:b3:31:64:1a:73:b2:60:59:47:63:98:62:3c:e9:66:89:38:
a7:54:9f:3d:65:5c:46:52:2f:7e:48:7f:45:c6:b5:1a:00:9d:
b7:7d:63:bf:cc:2e:e9:8e:b0:99:c1:e4:38:bf:7d:fe:62:33:
ae:5c:aa:62:ad:c4:e9:f4:07:7b:30:f4:bd:bc:12:17:1e:2e:
3a:b3:4c:66:39:00:50:ad:b8:43:89:21:4f:41:7c:db:22:0c:
8a:50:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:11 2024 by rpki-client on console-ams.rpki-client.org