Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nG_4zCPkM-LOIYyxTAwtc_Hz2jY.roa
File: nG_4zCPkM-LOIYyxTAwtc_Hz2jY.roa (raw, json)
Hash identifier: F0/aP+e1WKKghdA7ANX/ZRgtSYgupFFfIbuFTiNM8Uc=
Subject key identifier: 9C:6F:F8:CC:23:E4:33:E2:CE:21:8C:B1:4C:0C:2D:73:F1:F3:DA:36
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FC92C34A0491D1D8B80291AD3E0D4CC87
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nG_4zCPkM-LOIYyxTAwtc_Hz2jY.roa
Signing time: Thu 30 May 2024 11:04:28 +0000
ROA not before: Thu 30 May 2024 11:04:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214801
IP address blocks: 2a10:2f00:1a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 May 2024 18:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:2c:34:a0:49:1d:1d:8b:80:29:1a:d3:e0:d4:cc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 30 11:04:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c6ff8cc23e433e2ce218cb14c0c2d73f1f3da36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:68:45:29:db:5c:0f:46:f2:d6:bd:fc:66:
47:04:4c:4f:6e:fb:2a:c3:46:1a:47:92:04:cb:9a:
f6:c8:26:f7:c0:b9:29:b8:1d:6f:cd:ea:48:46:37:
80:c5:81:33:73:c3:a7:12:8e:16:b0:60:c7:30:5b:
26:8f:6a:97:d3:e8:19:6b:e1:28:bb:2d:9c:8b:38:
29:d4:61:a5:d8:11:1a:b2:79:22:fc:b0:36:c0:1c:
b7:df:aa:27:b8:7d:5a:a5:46:64:4c:56:b0:6a:73:
32:a7:5b:f8:9a:09:58:a4:9b:58:6f:4e:21:88:f4:
a8:0c:9d:1c:f1:c0:be:18:bf:67:ba:b2:7b:08:ce:
79:b9:4f:d6:ad:0b:16:c3:66:c1:b0:34:a1:45:65:
ad:fe:c8:a4:93:8d:99:1e:17:dd:83:41:d6:fe:c8:
a0:ff:5b:f7:ee:2b:82:cb:34:b6:a1:4f:05:4a:55:
f8:f8:a1:1a:0e:5d:2c:97:42:95:80:cc:70:f6:6d:
98:27:0f:df:24:26:52:a5:53:52:1b:91:fc:ee:bb:
d7:69:46:3b:db:1a:5d:9f:23:ab:9a:b0:92:24:bc:
d2:b5:9f:3c:84:2c:13:0a:36:21:bc:3e:5c:5f:f8:
b1:14:7c:3a:b6:f8:48:b6:c9:30:42:bc:94:af:9a:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6F:F8:CC:23:E4:33:E2:CE:21:8C:B1:4C:0C:2D:73:F1:F3:DA:36
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nG_4zCPkM-LOIYyxTAwtc_Hz2jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:1a1::/48
Signature Algorithm: sha256WithRSAEncryption
7f:f6:39:74:fe:d5:f2:05:4d:a4:25:80:95:9a:db:ad:79:66:
1b:34:dc:e9:29:07:e7:01:99:e3:7a:56:b9:40:b0:c0:d1:8d:
8a:76:eb:5b:ef:1e:a7:28:c5:4c:a1:3a:1e:ee:c1:f1:cb:11:
24:23:fd:ae:01:72:ab:30:f8:99:76:f8:a7:20:77:57:07:a8:
34:89:29:f5:09:df:56:4b:f8:88:47:75:2c:3a:1a:f2:2c:cc:
67:d0:c8:dd:69:22:44:68:47:11:93:e4:be:82:36:3b:a1:83:
26:98:94:7e:8b:6d:ec:d3:9d:fb:10:ec:e2:8f:78:cd:87:a2:
c8:2f:df:cb:60:05:bb:2c:9f:3d:55:e2:69:61:a9:1e:8e:d4:
1e:2e:61:69:95:bb:e9:94:70:e5:54:6e:36:04:83:90:cd:e1:
2f:c7:42:13:27:25:c8:7f:e4:2c:d6:89:17:c2:cb:b0:70:d7:
7a:18:7c:0b:a9:bf:5c:46:ac:49:0a:9b:20:18:ae:ec:5d:5c:
fa:b0:11:7f:d0:2c:3a:a8:17:31:ea:00:80:c3:1a:3a:ac:09:
50:5d:3b:f4:47:3d:65:25:36:b4:f5:c7:41:73:60:90:12:82:
0b:21:84:b0:5a:ad:41:51:82:ae:92:57:18:3a:d3:f0:55:89:
1c:a2:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:12 2024 by rpki-client on console-ams.rpki-client.org