Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/p5Z2WI1oNRCaFmnpITW_L9twFIo.roa
File: p5Z2WI1oNRCaFmnpITW_L9twFIo.roa (raw, json)
Hash identifier: Imlgnu04qGfQ/NmGIftaWJGFiqDtAzD0tEMK8vmTHGU=
Subject key identifier: A7:96:76:58:8D:68:35:10:9A:16:69:E9:21:35:BF:2F:DB:70:14:8A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01871C840A2594C622A4643564DC508890B3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/p5Z2WI1oNRCaFmnpITW_L9twFIo.roa
Signing time: Sun 26 Mar 2023 06:03:47 +0000
ROA not before: Sun 26 Mar 2023 06:03:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 2a10:cc40:140::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Apr 2023 08:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1c:84:0a:25:94:c6:22:a4:64:35:64:dc:50:88:90:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 26 06:03:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a79676588d6835109a1669e92135bf2fdb70148a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:35:ba:fd:e9:ec:2d:c6:f0:d2:a8:31:16:
27:ea:27:3f:6f:12:e6:da:d3:14:22:e6:89:ab:2b:
9c:c2:2a:46:98:1c:5f:cf:8d:d4:2f:13:46:d8:52:
ef:60:48:4d:d3:3a:fd:e8:14:8e:42:0f:f6:66:c1:
11:f1:e2:ae:51:b2:39:13:c9:33:31:16:7c:e0:33:
d7:ff:1b:1f:e3:3f:a3:cc:c4:3b:bf:6b:1a:bd:54:
5a:0c:cf:f5:39:1d:6c:f8:27:73:c0:91:68:4b:30:
83:47:63:36:1a:85:5b:79:23:c5:48:1a:a9:56:9d:
57:a1:c6:74:bb:85:9f:e1:d7:be:ff:33:f5:e3:f3:
fc:a6:fe:d3:88:ef:cf:4c:75:0b:11:fb:a2:44:b8:
e0:0e:a1:34:47:d9:14:61:44:74:ec:78:7a:93:ec:
49:e0:16:e4:1c:97:d6:16:7b:d9:64:0b:44:ee:5c:
1a:30:eb:f6:53:35:f1:c7:7c:18:55:ad:8e:ee:2c:
81:9f:73:cf:ce:7f:32:31:ce:f2:bf:ed:ed:9c:c8:
38:ce:de:27:7c:4d:94:40:df:0a:ca:6a:bb:74:90:
5b:bf:bb:46:6b:78:43:29:eb:b0:ab:8a:72:73:ee:
45:f7:34:ec:85:36:0c:bd:4b:30:18:15:e1:f4:44:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:96:76:58:8D:68:35:10:9A:16:69:E9:21:35:BF:2F:DB:70:14:8A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/p5Z2WI1oNRCaFmnpITW_L9twFIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:140::/44
Signature Algorithm: sha256WithRSAEncryption
87:34:28:7f:d8:04:42:b2:dc:b6:ba:fc:90:9f:73:d0:81:b9:
c6:a3:32:cb:72:b5:5a:2f:a1:b6:52:7c:57:47:f3:4d:df:f8:
1f:d0:a5:f2:1c:83:fd:d5:ba:b0:ce:d2:2e:cc:57:b5:a8:a1:
ec:44:3a:86:b2:44:1b:69:5c:aa:46:83:22:83:0f:09:98:b5:
f9:27:0d:dd:1d:66:76:48:38:b7:22:4a:e0:a5:97:2e:c7:75:
36:23:ad:16:d6:9b:3c:cf:af:15:d4:f3:24:f7:d7:4d:8d:a6:
d9:1e:60:b4:20:3f:43:fa:33:18:1a:82:0c:5c:2e:c9:55:b8:
55:7e:6f:2f:96:06:4d:43:ce:7f:63:f9:56:02:95:26:71:90:
ba:cc:58:2c:01:43:05:4a:f6:ac:1c:17:03:d5:2a:58:15:ae:
7d:cc:bd:dd:a5:e1:79:0d:bd:3e:fa:79:f6:95:d1:a2:40:bb:
f9:ad:e1:6b:19:83:2d:4d:72:dd:88:f6:e4:1f:95:24:4c:42:
7f:02:0e:0f:0f:20:2d:ea:77:f8:a9:71:57:a7:c9:2d:fb:1a:
76:f3:9d:df:7b:74:09:52:f2:3e:2e:a2:ef:c2:44:9e:32:b7:
25:a1:7c:d6:73:a6:67:2c:2e:b5:61:e2:79:8b:b8:c9:bc:1d:
2d:a6:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:38 2024 by rpki-client on console-fra.rpki-client.org