Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sJS7FQbJWPfWlDac7E9FRqmZTjo.roa
File: sJS7FQbJWPfWlDac7E9FRqmZTjo.roa (raw, json)
Hash identifier: 95xErIubW5LgsJrGB/cVGgFyV72LXKTX64OP/rNXKWw=
Subject key identifier: B0:94:BB:15:06:C9:58:F7:D6:94:36:9C:EC:4F:45:46:A9:99:4E:3A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01910E2FE5165FB07BBD2712A18AAC681F26
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sJS7FQbJWPfWlDac7E9FRqmZTjo.roa
Signing time: Thu 01 Aug 2024 13:45:05 +0000
ROA not before: Thu 01 Aug 2024 13:45:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214527
IP address blocks: 2a0e:97c0:7a0::/44 maxlen: 48
2a10:ccc5:5550::/48 maxlen: 48
2a10:ccc5:5555::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Aug 2024 16:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:2f:e5:16:5f:b0:7b:bd:27:12:a1:8a:ac:68:1f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 1 13:45:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b094bb1506c958f7d694369cec4f4546a9994e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:93:f4:f9:4c:49:b4:a1:92:50:09:23:40:
10:73:e0:60:11:b7:0e:6b:6a:61:82:4a:f7:74:c7:
d5:f7:12:ba:89:e3:54:5f:05:dc:fb:3b:f2:fe:51:
a9:a5:94:3d:9f:de:69:74:f9:4c:8a:5b:e3:05:1c:
a8:ca:0f:eb:1b:4f:d7:aa:d0:89:f5:e5:50:b8:55:
4c:0c:e8:07:2a:9f:ec:d0:02:07:af:59:ba:56:36:
32:e4:0d:db:00:f4:86:1b:37:ff:14:ef:7f:9b:3c:
b5:28:79:02:db:0a:17:ff:6e:ff:15:5f:66:06:51:
d0:33:c2:1c:6f:8c:bf:e6:fb:f3:d8:fc:c6:e7:59:
8e:5e:07:ed:0b:2d:fa:19:d2:38:94:66:7f:6f:32:
a9:ef:d7:78:71:fa:b0:f5:18:61:90:96:46:c1:bf:
10:6c:ec:8b:02:c8:65:42:b4:e3:11:b5:ed:05:e5:
07:ad:c9:8f:4b:69:29:39:1f:5a:cf:81:e9:de:31:
f6:ac:5a:66:6d:41:39:1a:b3:d3:62:43:39:24:e8:
02:21:1b:4d:b7:9c:fd:44:54:ab:23:9a:0a:e4:b9:
b8:d4:0b:b4:9d:ea:f5:15:46:35:fc:cd:83:a1:dd:
a0:90:d2:b3:9b:2c:5f:39:d1:c8:13:02:61:6c:f5:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:94:BB:15:06:C9:58:F7:D6:94:36:9C:EC:4F:45:46:A9:99:4E:3A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sJS7FQbJWPfWlDac7E9FRqmZTjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:7a0::/44
2a10:ccc5:5550::/48
2a10:ccc5:5555::/48
Signature Algorithm: sha256WithRSAEncryption
c5:ef:af:d3:18:e5:9d:1e:97:b9:dd:73:65:4e:c8:64:d0:26:
9a:ef:12:90:eb:7f:9a:4a:9b:68:ee:46:f8:92:aa:ed:75:bb:
b1:f7:1e:d0:90:2f:d7:99:a8:33:2b:da:0c:03:49:55:36:52:
17:75:9d:5a:d7:1b:bd:01:17:a3:6b:9b:6d:cb:bd:07:3e:bc:
c6:37:f4:33:df:c9:1d:c3:33:b7:71:47:4b:8a:bf:ab:ec:97:
7c:58:26:79:f2:84:c4:d1:9a:1a:c1:b7:c1:ba:17:f7:3d:32:
00:fc:b6:66:42:ff:a7:2c:8f:42:e3:3e:54:eb:5b:d0:e4:73:
15:0a:9c:b7:eb:31:1d:b8:6e:a3:d2:37:48:db:84:72:42:cd:
00:e2:c4:c4:e5:34:2e:54:bb:95:f1:74:50:6f:b4:36:e1:8f:
13:5a:5b:86:98:a3:3c:54:49:eb:7d:da:83:e8:b6:5a:c7:73:
27:81:a2:86:89:4e:f3:3a:14:59:b0:b6:4b:45:aa:b6:0b:ff:
0c:07:57:7d:c6:65:6c:73:7b:77:3a:a3:15:7b:05:39:57:db:
0e:aa:b5:e1:21:0b:cb:26:f4:ce:15:31:c0:5f:b3:49:a7:32:
94:da:f7:1d:10:d6:7e:a1:59:07:c1:37:47:3e:21:19:f2:0e:
42:e0:4b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 17:54:14 2024 by rpki-client on console-fra.rpki-client.org