Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qh61NiCUgWE5nfnrBxQ1mwmIlSo.roa
File: qh61NiCUgWE5nfnrBxQ1mwmIlSo.roa (raw, json)
Hash identifier: 42t+KX6W9bn7nvoEmx2QY4BcZSwojQNr18YPDuTjZgk=
Subject key identifier: AA:1E:B5:36:20:94:81:61:39:9D:F9:EB:07:14:35:9B:09:88:95:2A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E128A5DA068F0281A0C1AD03267A81267
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qh61NiCUgWE5nfnrBxQ1mwmIlSo.roa
Signing time: Wed 06 Mar 2024 06:54:01 +0000
ROA not before: Wed 06 Mar 2024 06:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149476
IP address blocks: 2a10:ccc3:ccc0::/46 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Mar 2024 15:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:12:8a:5d:a0:68:f0:28:1a:0c:1a:d0:32:67:a8:12:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 6 06:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa1eb53620948161399df9eb0714359b0988952a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:ae:dd:fe:f4:06:c9:c5:9f:da:81:52:95:
42:e1:06:d2:69:7b:a5:08:33:23:6c:6f:ce:65:ff:
68:64:9d:1e:d8:0e:2d:e4:62:aa:9f:a8:7f:ef:e1:
a7:d9:80:bc:71:38:71:56:96:d0:c6:32:41:ec:98:
78:88:9d:fa:66:97:da:cc:2d:45:b7:eb:3c:8a:52:
f7:04:8c:4a:f9:c5:79:8e:4f:9f:8d:5b:3c:af:f0:
b0:f4:8e:ee:e0:a7:4e:39:4c:84:29:ae:6c:1f:6b:
a0:80:0f:b4:a5:bf:78:18:9d:a2:73:5c:b0:6f:48:
f7:cf:e5:57:ff:e0:d2:27:ad:d2:a7:e3:94:1c:75:
e3:30:9f:e0:d5:cc:fd:ce:df:5b:d2:91:30:70:22:
ff:da:7c:3f:d4:c6:01:6e:b3:3d:a5:1f:7b:7a:5f:
7a:b1:52:92:90:1d:a6:c4:6d:47:12:c5:49:2e:19:
54:14:11:bc:ac:de:30:f6:ee:e8:af:42:7f:e6:1c:
cb:9d:b0:2b:57:0c:ab:ce:c2:a6:ea:38:92:e7:00:
a7:a1:c0:90:76:e9:d0:ed:d1:59:09:6e:f4:de:7b:
7d:0a:f6:a7:24:cc:09:50:63:47:cb:55:0d:c9:f6:
6f:48:b5:0f:8b:38:70:fd:2c:f1:ae:3f:f4:19:af:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1E:B5:36:20:94:81:61:39:9D:F9:EB:07:14:35:9B:09:88:95:2A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qh61NiCUgWE5nfnrBxQ1mwmIlSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc3:ccc0::/46
Signature Algorithm: sha256WithRSAEncryption
2f:66:5e:7b:47:64:74:e0:20:6f:94:e0:c9:07:c1:a6:97:25:
fc:b7:2e:d4:62:70:47:eb:ff:44:d8:dc:b1:3e:8b:e1:9e:da:
b7:e4:e7:da:6c:a1:0e:a6:95:61:a9:3a:86:c5:dd:78:5a:7b:
fc:67:16:b1:2b:b8:a7:9e:ed:f3:e9:df:26:b6:18:32:21:16:
c7:82:8a:4e:61:ce:46:60:a8:ff:90:7c:75:4b:fd:27:f3:fd:
c3:dc:e5:5d:ef:0e:19:15:cd:7a:23:1d:6a:fb:26:67:8e:c1:
10:91:40:1c:53:ae:50:97:15:f0:ec:05:17:4f:dd:dc:54:19:
78:84:db:07:1e:b8:66:3d:34:e4:6a:7b:d7:d3:d1:13:46:a2:
b1:15:d0:c8:81:3a:a1:67:5a:84:9c:29:b8:03:31:3d:ca:a6:
d2:7c:36:60:11:30:7a:26:7b:b9:7a:01:96:30:8a:1c:10:98:
34:69:78:fd:65:2f:17:1a:0b:fc:a4:7a:62:c2:42:84:a2:13:
53:80:05:8e:b1:3c:e1:98:48:db:01:af:a3:5d:3e:b2:9c:19:
a0:f1:57:bb:b0:ce:42:10:b0:19:8d:03:2a:82:24:2e:9e:b1:
75:a9:a7:11:e2:1e:25:0a:a8:42:8e:07:81:db:1d:da:09:1f:
d2:99:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 18:17:01 2024 by rpki-client on console-ams.rpki-client.org