Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sjMcVkeCXgRsgBRenSA_j6VPzSI.roa
File: sjMcVkeCXgRsgBRenSA_j6VPzSI.roa (raw, json)
Hash identifier: FyjCotz9nodLn0fsNkGFCU/oJP68x7czh8aTxmo62vc=
Subject key identifier: B2:33:1C:56:47:82:5E:04:6C:80:14:5E:9D:20:3F:8F:A5:4F:CD:22
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7F781301B9AEAF5F23393A704FE5F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sjMcVkeCXgRsgBRenSA_j6VPzSI.roa
Signing time: Mon 02 Jan 2023 05:15:28 +0000
ROA not before: Mon 02 Jan 2023 05:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210980
IP address blocks: 2a0e:b107:ae0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:f7:81:30:1b:9a:ea:f5:f2:33:93:a7:04:fe:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2331c5647825e046c80145e9d203f8fa54fcd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:07:28:01:79:bc:63:25:e2:47:e1:35:c3:
a3:e0:5d:d6:7c:f8:fd:ae:81:93:7c:6a:2b:cd:9f:
e2:af:e5:78:6e:41:03:a6:62:b0:f0:7d:07:26:bd:
aa:b4:5f:61:31:91:ac:88:bc:df:bb:77:1c:cf:1e:
f1:9a:dc:26:29:30:13:ac:63:43:7a:c4:f1:2b:08:
eb:1e:b0:bd:59:86:e3:72:6a:72:be:80:1b:9e:d5:
8a:47:73:4b:69:af:be:74:a5:83:53:88:29:4c:04:
01:0f:55:8c:02:4a:6a:25:df:ec:0f:fe:42:7a:fd:
a4:88:d5:35:d7:df:65:f2:4e:4a:94:a5:91:48:81:
92:5b:2c:ec:5c:2b:bd:dd:33:99:32:1a:1e:f8:e2:
0c:46:de:85:70:ae:d5:b9:9f:f6:e6:1a:01:18:2e:
0f:97:b4:24:0e:61:ae:4b:2a:a9:97:66:06:67:04:
14:6a:e9:62:6c:31:7e:53:77:f8:6e:f7:1c:d1:0d:
2b:47:1d:ab:ab:30:d9:de:69:c0:8a:2e:6e:07:18:
71:19:da:9a:90:77:c8:d2:3f:6a:01:a6:64:70:51:
d8:17:f0:d1:fa:32:3d:48:0a:19:db:01:30:0f:4b:
a9:b5:63:40:5c:63:20:47:cd:06:95:8d:f3:10:43:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:1C:56:47:82:5E:04:6C:80:14:5E:9D:20:3F:8F:A5:4F:CD:22
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sjMcVkeCXgRsgBRenSA_j6VPzSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ae0::/44
Signature Algorithm: sha256WithRSAEncryption
6c:64:9f:5e:d2:8f:c3:e0:06:38:19:53:e0:3c:47:4e:76:96:
15:73:7a:44:62:30:2f:0b:da:bd:b0:ce:cb:52:37:d6:09:14:
0b:bd:cf:8b:98:0f:a4:12:51:70:0b:d0:d4:55:61:5c:50:e6:
2f:0f:4d:f2:8e:55:2e:7e:e4:4f:e4:a1:22:30:9b:ad:b8:37:
a3:93:26:ee:2a:47:fc:37:8c:ab:50:81:98:51:23:0b:56:85:
19:6e:87:08:27:6d:ca:03:5f:ed:36:f4:2e:72:cf:1e:33:0e:
f0:1f:a0:00:3f:0b:50:cd:a5:bc:6b:e0:6c:70:81:30:98:43:
36:ac:92:dd:7b:f6:7f:49:c1:7e:76:10:cd:6b:cb:52:30:b1:
61:04:9e:53:3a:76:d9:91:06:3e:2e:f2:f9:3f:43:74:77:03:
3e:c2:96:61:0d:b8:ee:8e:f4:aa:4e:84:d3:5a:99:e7:26:bb:
a1:d2:e3:2f:cf:0a:6e:fb:eb:01:8f:a8:e9:7f:20:49:c2:22:
5b:9f:47:c0:36:78:77:11:44:1b:2c:fc:46:93:e8:3d:b3:d9:
a7:bd:62:10:6d:ff:01:e1:b2:82:ed:b9:eb:16:ee:4f:53:77:
7b:69:11:ea:cd:1d:fc:c3:ff:45:d0:53:6f:c4:74:d7:ae:a4:
1a:bb:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:32 2024 by rpki-client on console-ams.rpki-client.org