Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s8rVnPVACGo0QiM6ypJTWe7mJ9w.roa
File: s8rVnPVACGo0QiM6ypJTWe7mJ9w.roa (raw, json)
Hash identifier: MAIy0PI5bbc1343vlImpN80Z86waKaJIFnPdbcLXRDM=
Subject key identifier: B3:CA:D5:9C:F5:40:08:6A:34:42:23:3A:CA:92:53:59:EE:E6:27:DC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185EB1276D7DDA80253A4FC75F3FB307A8D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s8rVnPVACGo0QiM6ypJTWe7mJ9w.roa
Signing time: Wed 25 Jan 2023 22:35:33 +0000
ROA not before: Wed 25 Jan 2023 22:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212196
IP address blocks: 2a0e:b107:ec0::/48 maxlen: 48
2a0e:b107:ec0::/44 maxlen: 48
2a0e:b107:ec2::/48 maxlen: 48
2a0e:b107:ecf::/48 maxlen: 48
2a0e:b107:ec1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:eb:12:76:d7:dd:a8:02:53:a4:fc:75:f3:fb:30:7a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 25 22:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3cad59cf540086a3442233aca925359eee627dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:d8:56:5c:f4:26:4d:22:8c:6c:74:07:25:
18:e0:89:c8:b7:c8:ca:f1:6e:ee:36:15:7d:2f:e9:
fb:e3:ff:cc:9d:01:2b:8e:69:56:c2:0b:d5:b8:e8:
5a:37:30:04:d8:1e:22:aa:b3:9b:0f:8e:75:b0:a3:
4d:19:ae:25:1d:5f:5d:30:5b:48:98:78:f9:86:b4:
8d:ea:9d:b7:ee:c0:db:5f:00:d1:24:0d:92:15:0a:
06:29:bf:13:35:5a:97:0c:67:ca:0e:a8:96:2b:85:
14:7b:96:07:ef:a4:e6:1a:33:41:58:3a:20:eb:07:
db:32:bb:db:90:7c:4b:f7:82:07:21:8e:bb:64:7c:
b2:63:11:6b:dd:5c:c2:96:de:cc:b0:7a:75:a9:67:
1b:89:a7:b9:10:c3:e3:05:b3:21:b4:b4:2a:a1:02:
00:d8:39:8b:82:d1:3f:ac:8f:45:9c:4c:89:bd:9d:
d3:10:0c:42:af:61:3e:4f:b6:a9:29:a7:63:64:df:
5f:6a:99:e6:2b:08:49:ee:5e:9b:70:99:d4:29:f5:
13:85:ca:95:87:e8:37:f2:e4:29:96:8a:7e:a3:30:
cf:28:d4:c0:4b:48:0a:ac:6e:83:04:02:48:21:a5:
4b:6d:5e:59:02:82:8c:36:e9:1b:79:07:39:61:a3:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CA:D5:9C:F5:40:08:6A:34:42:23:3A:CA:92:53:59:EE:E6:27:DC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s8rVnPVACGo0QiM6ypJTWe7mJ9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ec0::/44
Signature Algorithm: sha256WithRSAEncryption
c5:bf:5b:3a:e7:dd:19:02:3b:88:26:d7:a2:f2:3e:f5:d6:d0:
5d:82:91:9f:5b:36:1d:04:f2:98:25:c0:78:8f:96:a7:37:1c:
21:5c:20:72:62:fe:d0:21:c2:a5:51:5d:af:a6:6e:47:bf:97:
95:fd:78:bc:21:e1:aa:ac:e8:1c:f6:b8:56:73:4e:85:a3:b2:
4c:cb:ba:b6:00:10:9f:0c:6c:81:78:aa:97:ae:cb:7c:49:09:
3f:7d:29:c7:b6:25:21:a4:a5:9c:13:77:50:66:61:8e:3e:d8:
c3:10:97:bc:bf:ba:fe:a7:30:6f:6e:bb:f1:7c:44:31:fc:be:
1f:26:39:4e:a8:2e:0e:1c:67:d1:cb:04:bc:e9:b9:df:7e:a2:
18:46:3d:3e:ab:45:9c:67:cb:22:88:08:8c:2e:8d:86:b3:38:
dc:e7:e5:d9:06:a2:ec:cd:b0:d5:87:76:05:33:15:05:48:5d:
81:fe:80:70:ea:3e:f8:f1:9c:94:c7:f6:a2:2f:bd:e8:b2:b7:
28:97:2d:fc:3e:76:cb:a2:11:dc:60:ba:f4:76:14:8e:68:a3:
f1:fc:63:91:23:41:39:31:43:f7:8e:0d:95:33:e9:3d:69:75:
e9:81:18:49:44:6c:4f:ba:dc:af:cb:c5:12:1e:ae:af:43:c0:
28:51:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:32 2024 by rpki-client on console-ams.rpki-client.org