Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qjoY0kL6XKfP0ueYBYvbhzkwxoE.roa
File: qjoY0kL6XKfP0ueYBYvbhzkwxoE.roa (raw, json)
Hash identifier: dz4ecGBf7CVEeImdJFPypyxeMJjV3XR3WBcuszPV16Y=
Subject key identifier: AA:3A:18:D2:42:FA:5C:A7:CF:D2:E7:98:05:8B:DB:87:39:30:C6:81
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187B759B4DC52C01428D5367E200DE2BB76
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qjoY0kL6XKfP0ueYBYvbhzkwxoE.roa
Signing time: Tue 25 Apr 2023 07:38:42 +0000
ROA not before: Tue 25 Apr 2023 07:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207401
IP address blocks: 2a0e:b107:4e2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Apr 2023 13:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:59:b4:dc:52:c0:14:28:d5:36:7e:20:0d:e2:bb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 25 07:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa3a18d242fa5ca7cfd2e798058bdb873930c681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:91:0b:47:c5:ac:7f:72:4c:52:86:d1:e2:
69:ce:4f:f0:6f:12:dd:5a:95:8d:85:e4:39:a1:4d:
bc:46:79:87:7b:df:95:c1:6e:53:bf:c6:8b:04:ca:
b7:64:19:8a:8d:4d:d1:16:39:87:1e:3a:f6:fa:02:
4f:c1:c6:8f:5b:a3:66:5e:77:bc:52:59:0c:8b:97:
62:b6:62:89:0d:14:d9:35:41:d5:f5:9e:27:69:31:
0c:b2:d6:3d:f8:85:b4:18:77:99:0a:5d:7c:0e:6e:
a5:fe:f8:1c:0e:7c:88:d5:aa:ae:3d:18:78:dd:50:
5b:b9:4e:29:08:42:1f:b2:22:18:7d:ce:e7:e1:34:
64:4d:db:7c:52:a6:6f:21:2d:44:45:75:cc:95:70:
7a:ce:80:d4:61:27:d3:88:32:4e:90:fc:ae:23:c6:
70:5a:ec:2f:8a:8c:d0:f4:a6:b9:b7:cf:3a:91:7b:
98:f3:73:8d:5c:4a:e0:f9:a6:ae:20:37:48:44:ce:
76:a8:e1:a9:d5:7b:29:5e:df:08:f8:6d:61:b3:3c:
e5:97:98:08:30:93:41:8a:81:db:06:da:39:09:e7:
3c:c3:bd:89:06:42:21:1e:9f:a0:bd:aa:f1:5c:fd:
b0:9b:7c:a2:a2:42:ab:e3:50:9b:cc:51:9e:ab:38:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:18:D2:42:FA:5C:A7:CF:D2:E7:98:05:8B:DB:87:39:30:C6:81
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qjoY0kL6XKfP0ueYBYvbhzkwxoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:4e2::/48
Signature Algorithm: sha256WithRSAEncryption
81:48:4d:25:31:b9:4c:fc:ab:45:a4:dd:b6:2a:dc:f2:3f:e5:
42:bb:11:24:21:41:02:c2:c1:75:62:f3:11:96:d8:f0:d9:45:
d4:13:68:9b:6c:c7:1d:bb:1c:50:d0:c9:df:1e:70:67:75:50:
81:6e:9c:9e:d4:6f:0d:ea:f1:20:43:b5:66:c4:dd:08:10:f1:
71:a6:3a:61:a6:09:6e:81:a2:9a:b9:3a:10:cc:cc:6b:a0:47:
91:8f:8c:58:bd:e6:39:9c:e5:81:20:04:da:b8:37:ef:a1:e8:
bf:36:45:18:54:92:8d:1a:1e:37:75:34:60:10:f9:47:ef:12:
d1:be:04:ba:3c:6e:25:51:50:fd:27:f5:92:bb:20:d8:76:46:
c7:d1:32:72:96:ed:e0:23:cf:23:ba:68:93:3a:74:b0:75:ef:
74:fd:19:17:90:3c:21:34:97:42:bf:7c:bd:0d:6a:6b:e5:fe:
b0:9d:61:39:69:62:d8:66:29:55:ac:cd:94:f6:a4:94:bf:e7:
58:e6:74:b0:57:37:9e:60:6d:5a:97:f1:82:70:1d:b2:b3:5f:
d8:bf:0c:35:68:19:3b:5c:a0:eb:99:19:a5:84:30:48:cf:66:
22:14:ee:c4:9a:4a:e7:9e:5d:3e:7f:a1:a6:16:a3:e8:56:d8:
7c:44:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:32 2024 by rpki-client on console-ams.rpki-client.org