Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/si8ZszOxyy-NDjf5j4uC3PKzum4.roa
File: si8ZszOxyy-NDjf5j4uC3PKzum4.roa (raw, json)
Hash identifier: 6BG3r8Sms+maW5tvMG76hm63TIjEUAmrgjsdcGQwm84=
Subject key identifier: B2:2F:19:B3:33:B1:CB:2F:8D:0E:37:F9:8F:8B:82:DC:F2:B3:BA:6E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A1DBB2C68CAE5567E47762AA5A96D922B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/si8ZszOxyy-NDjf5j4uC3PKzum4.roa
Signing time: Tue 22 Aug 2023 14:52:00 +0000
ROA not before: Tue 22 Aug 2023 14:52:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216425
IP address blocks: 2a0e:b107:1d13::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:bb:2c:68:ca:e5:56:7e:47:76:2a:a5:a9:6d:92:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 22 14:52:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b22f19b333b1cb2f8d0e37f98f8b82dcf2b3ba6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:e3:3d:57:14:18:09:66:3b:0c:c3:1e:7e:
a4:af:db:92:cc:48:c1:eb:6a:c3:d8:97:16:42:bd:
1d:e3:89:e9:67:52:5b:61:7b:53:11:87:30:38:c2:
7d:89:d8:bc:9c:70:68:4e:e9:27:95:b9:cd:0a:6e:
ff:18:5c:ac:f6:b4:ae:51:bb:30:89:d8:4b:55:47:
fa:10:8d:da:38:85:fb:6d:08:ca:5d:5c:28:78:ad:
7c:a2:3a:63:5a:ef:88:94:47:7d:8a:30:ec:c4:c4:
bc:6c:2a:96:25:fe:08:07:ac:0e:66:44:11:d9:c0:
37:d8:0c:1f:67:b2:c6:68:05:f7:cf:78:ee:6b:c8:
71:b0:24:fd:1b:d2:a2:10:08:f5:79:de:c0:4c:03:
0a:fb:89:e2:ea:5c:e6:a0:50:cb:13:0f:22:13:28:
8c:5a:22:50:eb:0b:de:8d:1e:67:8c:be:f7:4b:f3:
a2:de:2d:a3:28:18:b6:dc:e2:ec:de:48:7b:6f:b4:
82:e3:fe:d5:4e:39:92:85:1d:e6:7d:cb:c6:31:5a:
fb:13:87:5b:2f:ad:71:f9:2e:3e:97:06:29:cd:da:
00:34:20:09:a1:2c:36:f4:df:05:eb:3b:aa:96:8c:
4c:f8:fd:7c:b4:27:29:d5:f1:f1:67:c3:86:f9:e3:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:19:B3:33:B1:CB:2F:8D:0E:37:F9:8F:8B:82:DC:F2:B3:BA:6E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/si8ZszOxyy-NDjf5j4uC3PKzum4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d13::/48
Signature Algorithm: sha256WithRSAEncryption
54:31:dd:f7:5a:f7:d8:79:fd:48:61:46:92:1c:7e:20:85:7a:
26:25:bd:7f:0e:13:0a:de:a0:0d:53:0f:5b:ef:ac:75:78:f6:
c4:bc:00:73:c5:4b:ba:21:ef:f9:e4:90:6f:7d:89:19:ff:17:
08:a4:11:1d:0c:9e:e8:47:01:bd:e3:cf:d9:9c:ea:26:5a:45:
4a:5b:6d:94:19:ea:49:e2:0c:25:b8:62:85:8b:aa:05:fd:e8:
5a:86:d4:f2:c0:e0:0e:8b:82:28:23:cc:ce:7a:f9:63:8e:ac:
93:78:b8:44:d1:ba:2e:bf:9a:22:b0:ea:22:ec:8f:cb:f8:c5:
5f:b8:2f:9f:5e:74:a7:d5:33:2b:23:e3:9b:93:6d:06:b8:65:
8c:2d:a1:85:ae:af:05:11:bf:57:ec:33:03:4d:f5:85:8d:56:
ed:70:a4:43:26:68:0c:d6:39:81:5b:4a:07:ca:cb:7b:8c:70:
6a:6c:cb:8d:d1:44:c5:db:50:d5:06:5b:6b:58:38:13:7e:40:
f1:b7:16:6d:ac:1c:d4:4a:d1:89:3a:8a:9d:f9:29:09:39:d4:
6d:04:c1:f8:e4:41:e8:d3:d9:99:67:69:e3:33:17:4f:f2:0d:
50:29:75:f7:92:27:52:c5:6a:0d:f2:15:24:5d:60:4d:5a:d5:
79:94:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:32 2024 by rpki-client on console-ams.rpki-client.org