Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rzGTmdqgMrIp3nDNkq1CD4f-2Jc.roa
File: rzGTmdqgMrIp3nDNkq1CD4f-2Jc.roa (raw, json)
Hash identifier: eSVpI5ZHM5Gi433OjxkEpWm1Glrq1QS9Tq+3SfKDlhw=
Subject key identifier: AF:31:93:99:DA:A0:32:B2:29:DE:70:CD:92:AD:42:0F:87:FE:D8:97
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188760DC0400AC8C204004327E64339CB05
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rzGTmdqgMrIp3nDNkq1CD4f-2Jc.roa
Signing time: Thu 01 Jun 2023 08:23:12 +0000
ROA not before: Thu 01 Jun 2023 08:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53667
IP address blocks: 2a10:ccc2:9c00::/38 maxlen: 48
2a06:de01:400::/38 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jul 2023 16:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:0d:c0:40:0a:c8:c2:04:00:43:27:e6:43:39:cb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 1 08:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af319399daa032b229de70cd92ad420f87fed897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:13:9c:a5:0d:0d:34:bb:b8:7a:0a:c1:01:
25:80:0e:aa:fb:1f:29:88:12:9b:f1:fb:bc:30:ea:
ca:d1:c4:a9:d8:7a:9d:c4:7f:39:9f:bb:6e:cf:86:
55:2f:7f:77:21:bb:2a:ef:08:18:38:f1:fa:7a:7a:
74:ef:c7:95:1c:8c:9a:37:d1:17:4e:74:de:96:d5:
b7:50:bb:0e:8c:d2:25:bf:a0:a3:14:c4:6c:0e:d8:
b7:6b:46:31:4e:27:ae:75:87:ee:29:8a:bf:1b:c0:
a7:22:5a:bf:8b:ed:b9:d4:c4:c9:50:05:5f:21:30:
d0:41:ea:e1:e9:a7:74:ae:e3:64:33:99:6b:35:7c:
f4:f1:60:7b:ae:c6:6d:0f:b0:cb:44:bf:99:7e:69:
c5:95:3f:96:75:35:ea:67:d2:a7:bf:4e:1f:52:87:
57:64:c3:04:4b:9c:8b:88:95:fc:2c:2a:fc:a5:5e:
82:ca:32:51:0e:60:d7:79:4b:5f:ba:f0:0d:43:35:
f2:07:1e:14:f0:bc:66:10:5d:65:ee:3f:a0:02:5a:
41:23:99:25:36:90:6a:2f:1b:aa:1f:6a:9e:52:26:
e8:d2:6c:bf:25:d5:a7:fd:eb:a6:15:76:b8:13:d5:
c7:c8:58:f8:ed:8e:72:24:78:eb:40:93:97:d6:09:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:93:99:DA:A0:32:B2:29:DE:70:CD:92:AD:42:0F:87:FE:D8:97
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rzGTmdqgMrIp3nDNkq1CD4f-2Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:400::/38
2a10:ccc2:9c00::/38
Signature Algorithm: sha256WithRSAEncryption
b3:36:92:eb:4c:3d:ff:d5:9c:fb:d2:e9:b0:f7:94:2a:8a:5f:
e0:64:63:01:9f:c1:d3:4a:a4:9e:1f:48:ad:2c:dd:7d:55:56:
b5:32:85:eb:a7:b0:bf:b5:f9:60:f9:33:93:06:e6:2f:5d:cf:
79:d8:1f:9d:dc:cf:6f:ca:67:a3:ac:34:2b:2b:fa:25:f3:74:
64:5f:de:70:3c:0a:44:b1:ed:af:96:49:ee:44:3b:13:62:f3:
69:5a:be:64:07:56:f1:c9:42:ea:89:e6:ad:f0:fe:13:f6:3d:
2b:8a:33:b8:8f:a2:62:24:5c:ec:cc:b7:2b:e0:37:ec:28:f4:
ef:66:dc:b5:c6:d9:81:21:8f:af:2e:88:e5:95:ae:0e:bb:db:
ac:c6:f6:d9:a0:97:ea:cf:44:93:9f:f2:2f:69:73:c3:6f:dd:
60:4c:92:f0:a9:9a:28:32:b8:44:8b:dd:5a:1a:0a:d9:90:85:
67:e6:80:aa:39:ad:6a:a0:e9:d8:30:39:18:2e:1b:93:f9:0b:
10:88:dc:6c:7f:a7:96:ec:7f:58:97:e6:4f:e2:bc:ed:26:0d:
d1:fd:8d:b7:0d:4d:73:0a:97:de:00:4a:2e:94:26:c4:fd:fe:
d8:71:2a:d2:f6:43:a2:9f:a0:44:eb:65:d7:f4:02:6d:52:a7:
38:d4:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:39 2024 by rpki-client on console-fra.rpki-client.org