Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qLS3IA8KNeRyIpr8yhvHmO4XVJ0.roa
File: qLS3IA8KNeRyIpr8yhvHmO4XVJ0.roa (raw, json)
Hash identifier: ygmBaxJ9Wo6iADlWIl52a0s0rCkt/lsaNEaqLumDQVo=
Subject key identifier: A8:B4:B7:20:0F:0A:35:E4:72:22:9A:FC:CA:1B:C7:98:EE:17:54:9D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD29E19BCD441ACEA28CE78DA717F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qLS3IA8KNeRyIpr8yhvHmO4XVJ0.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53667
IP address blocks: 2a10:ccc2:9c00::/38 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Mar 2024 03:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d2:9e:19:bc:d4:41:ac:ea:28:ce:78:da:71:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8b4b7200f0a35e472229afcca1bc798ee17549d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:88:d2:68:d6:01:6f:0b:e9:70:04:63:11:
9e:f3:97:a9:a5:7a:07:47:25:0c:c0:9b:91:2b:83:
1f:57:2c:de:7f:1d:d1:b4:cd:0a:fa:4f:70:a9:be:
49:d3:2f:3f:42:25:53:8d:9c:0d:12:4f:b6:89:12:
9c:8c:32:91:99:14:48:f7:f5:de:e4:90:c7:d2:75:
d8:95:5e:40:e6:e9:20:f1:8b:a9:27:b2:b6:f1:fb:
d1:d5:56:9f:cb:d9:30:04:b8:ea:f7:82:f1:42:6a:
07:09:18:e2:f6:c7:5f:e7:0c:ec:7e:7e:4c:3a:15:
c0:96:56:66:fd:50:9e:50:3a:75:dd:d8:02:8b:8a:
78:bb:81:94:c7:be:a9:e6:99:6e:fb:b1:3b:27:e1:
2b:49:62:b0:1b:9a:49:bb:e6:87:b3:22:66:a4:1f:
ef:5f:f0:5d:83:38:c8:12:47:45:28:e6:ca:66:5e:
4a:1d:2e:9e:be:2f:b7:71:63:d6:6a:f2:e9:65:50:
c1:0d:e7:3d:6c:22:23:27:78:47:53:e8:80:4e:ee:
88:cb:97:d3:b9:41:86:50:3e:77:b7:07:32:3d:ac:
29:bd:e8:58:b8:fe:59:c6:b6:d4:05:c2:22:7c:43:
64:8c:69:1f:32:fe:d1:24:6e:1a:31:df:7b:04:b5:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B4:B7:20:0F:0A:35:E4:72:22:9A:FC:CA:1B:C7:98:EE:17:54:9D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qLS3IA8KNeRyIpr8yhvHmO4XVJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc2:9c00::/38
Signature Algorithm: sha256WithRSAEncryption
87:76:11:be:25:3d:0a:c8:67:f1:d2:5e:8c:f8:c9:32:a6:19:
fb:8e:5a:80:ef:b5:10:f4:b3:32:27:7d:a5:41:f5:52:fe:66:
58:f8:d0:26:36:4b:64:18:a2:7d:0a:db:7b:1f:83:b5:d3:94:
16:eb:ce:51:6d:d6:bc:0e:07:66:1e:2c:a1:8f:c8:71:b9:1c:
84:52:ce:26:7b:c8:a0:93:ec:c2:12:b9:2b:37:a7:de:78:2d:
52:c6:c6:ad:3a:44:49:49:b4:08:e9:55:eb:66:32:ef:f5:12:
73:5e:f3:dc:a1:1d:fc:ce:1b:03:e2:83:73:bf:a6:65:bc:27:
ca:00:2f:5f:b9:4c:3a:f3:b8:5b:92:8f:ad:85:bd:f4:7a:96:
5c:10:82:d9:94:26:af:7e:d1:52:03:a4:e7:23:df:44:25:ff:
85:10:76:9f:f9:60:3f:27:5b:01:3f:d1:a3:75:3b:ee:2c:eb:
a9:8e:a2:95:54:3f:e6:42:2c:2b:b8:ef:18:71:3c:35:47:33:
ea:b3:26:99:13:45:15:3d:d5:1e:5f:78:6d:7f:1e:69:54:9d:
71:10:ef:aa:31:cd:63:ba:c6:13:5a:f1:7a:3d:5a:b5:02:5b:
20:4e:fa:3a:b0:50:ee:1b:ef:46:7f:15:06:aa:bc:c2:a3:2b:
31:07:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 05:41:04 2024 by rpki-client on console-fra.rpki-client.org