Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rpxL_E74IEup7h5H2L2ce-JrG30.roa
File: rpxL_E74IEup7h5H2L2ce-JrG30.roa (raw, json)
Hash identifier: dxqwyP0/TLDi36eE3NEcpcsaBZI/J9HF9CsmOOLM080=
Subject key identifier: AE:9C:4B:FC:4E:F8:20:4B:A9:EE:1E:47:D8:BD:9C:7B:E2:6B:1B:7D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48ABF543DE0AE49B29CF15B880C58B1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rpxL_E74IEup7h5H2L2ce-JrG30.roa
Signing time: Tue 24 Jan 2023 16:09:36 +0000
ROA not before: Tue 24 Jan 2023 16:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57429
IP address blocks: 2a0e:b107:1340::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:bf:54:3d:e0:ae:49:b2:9c:f1:5b:88:0c:58:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae9c4bfc4ef8204ba9ee1e47d8bd9c7be26b1b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:1a:39:f2:fb:75:ff:2a:30:ea:c3:02:3f:
56:40:65:1d:55:52:eb:7a:5a:24:88:c7:48:4f:97:
a7:63:7a:29:a8:3a:10:a1:91:79:92:29:1c:e5:af:
aa:07:d3:1d:09:6a:48:37:3f:04:8f:5b:e7:45:be:
8b:c8:76:18:5f:4e:a0:fa:50:4b:1c:5a:c6:fc:ee:
61:4a:75:c4:9d:fa:a8:df:b6:b1:d2:81:c3:d5:04:
08:df:07:8f:79:1c:10:6d:82:e3:76:c2:06:e8:98:
57:a7:99:6a:7d:99:9c:bf:7b:f6:31:09:61:8e:e6:
b3:35:06:6e:f7:29:e1:21:09:ea:44:aa:4f:59:dc:
b6:70:3a:b4:17:ce:fd:08:e3:c1:3e:55:4c:5a:8f:
dc:6f:89:cd:98:23:d7:c7:70:f3:20:45:99:6e:a0:
83:c3:e7:b3:01:05:ce:57:c8:7c:7c:22:99:35:5d:
3c:11:28:74:46:03:db:3e:ba:3b:2c:f4:31:4c:eb:
8c:32:ab:3a:1b:fa:9e:04:6f:bf:ce:89:c3:20:f0:
43:60:3b:e6:b9:42:e3:d9:e4:30:d4:99:e4:2f:4c:
8d:a2:a9:d5:a5:d8:51:cb:97:0b:fe:4b:61:bd:a1:
53:75:67:8b:00:78:b7:d7:a3:53:a0:e1:de:0b:28:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9C:4B:FC:4E:F8:20:4B:A9:EE:1E:47:D8:BD:9C:7B:E2:6B:1B:7D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rpxL_E74IEup7h5H2L2ce-JrG30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1340::/44
Signature Algorithm: sha256WithRSAEncryption
19:56:b5:d0:3a:d0:d1:f1:5f:50:25:56:66:46:19:56:ed:ae:
3c:78:07:86:72:44:cd:7a:36:2c:9e:ee:0c:e5:8e:6f:47:af:
69:fc:cb:72:dc:4f:55:9e:1a:3f:a2:de:ae:ee:50:61:43:28:
9d:32:40:27:91:0c:1e:93:42:5c:6a:e5:e7:7a:aa:8d:51:92:
5f:bd:50:f1:76:ed:fa:34:27:5e:75:e9:70:9a:34:cf:a2:08:
c8:ee:fd:71:81:7e:38:99:27:be:7e:ee:ce:23:64:04:88:a1:
ea:b3:af:4f:51:b5:da:27:88:8e:32:3d:d0:fe:26:e9:ea:c8:
23:fe:6b:5d:a2:c0:f3:6c:16:31:20:b3:d4:f2:76:8d:44:9c:
29:ff:28:97:ec:1c:20:ff:7c:13:aa:9a:8d:97:67:68:c2:35:
3e:db:28:da:b9:98:a4:9d:64:2b:f7:b6:8e:91:d1:3c:f4:49:
9f:17:c9:f3:c3:50:9d:f9:3d:96:31:94:db:c3:a1:98:c6:49:
40:78:3e:1c:78:ab:8b:71:03:b2:cd:8b:10:9d:a7:97:24:18:
b5:84:c5:27:7f:78:a8:a6:ef:36:26:e5:68:ff:de:1d:fe:1b:
d3:49:22:e5:f5:6f:7e:1c:87:00:40:f8:48:c3:1f:5b:4f:cd:
2f:b1:c4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:32 2024 by rpki-client on console-ams.rpki-client.org