Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t46GYnz6g_nzsK6KHp_vOGkY2lc.roa
File: t46GYnz6g_nzsK6KHp_vOGkY2lc.roa (raw, json)
Hash identifier: rqIxhSLMEV29iICRdYgSOz4IxfRI+nD9MrZNCZDl11o=
Subject key identifier: B7:8E:86:62:7C:FA:83:F9:F3:B0:AE:8A:1E:9F:EF:38:69:18:DA:57
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E809DDF3F51AFECEB0AF9BBFE6D873
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t46GYnz6g_nzsK6KHp_vOGkY2lc.roa
Signing time: Mon 02 Jan 2023 05:15:32 +0000
ROA not before: Mon 02 Jan 2023 05:15:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211571
IP address blocks: 2a10:cc40:190::/44 maxlen: 48
2a10:cc40:190::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 May 2023 22:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:09:dd:f3:f5:1a:fe:ce:b0:af:9b:bf:e6:d8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b78e86627cfa83f9f3b0ae8a1e9fef386918da57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:db:fd:14:dd:18:9b:2c:29:1e:3c:fd:f9:
1b:35:16:77:ca:e8:b1:ee:2c:5c:3d:f5:05:90:f8:
52:e6:ed:a4:13:f4:4d:04:89:26:97:d1:30:6e:25:
54:b7:9d:36:8b:48:60:8b:c7:77:d1:82:a8:2c:18:
eb:e3:25:52:bd:92:d0:8c:87:54:90:e7:e5:bb:f3:
53:5a:a8:3e:63:9b:bf:9a:e4:ac:4d:6d:2c:d7:70:
c1:3a:e6:fa:0c:fb:7c:22:d9:c9:c8:ed:4f:eb:bd:
f2:38:e3:a4:d7:79:2f:42:fc:84:be:8e:7a:59:cd:
e4:2c:9a:94:a1:47:83:4c:ca:de:56:94:76:ac:dd:
51:2f:8c:ce:c6:1a:ae:cd:13:ba:25:e0:0e:a3:b6:
18:bc:5d:30:4a:a5:a8:ae:2f:78:42:0c:ee:68:c7:
0c:54:88:fd:01:35:fc:d5:7d:a9:45:a4:a8:dc:64:
42:4e:84:53:32:4b:fe:33:f0:56:77:ae:aa:1c:43:
19:69:d3:88:7c:3d:50:d6:40:f8:ef:46:d3:3d:cb:
9d:b4:dc:9f:93:78:64:ae:2b:2d:2f:ab:60:ed:11:
a5:43:6b:56:07:f9:ae:ca:ff:a4:8d:b7:e9:23:d5:
07:58:99:36:1c:e6:97:19:08:cc:c8:42:13:c7:b3:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8E:86:62:7C:FA:83:F9:F3:B0:AE:8A:1E:9F:EF:38:69:18:DA:57
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t46GYnz6g_nzsK6KHp_vOGkY2lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:190::/44
Signature Algorithm: sha256WithRSAEncryption
03:fc:01:86:12:ac:20:58:4c:cc:cb:95:59:b2:3b:6c:93:af:
91:27:74:3e:6a:d0:ec:d6:dc:3a:4c:f4:8a:66:31:f3:37:af:
5f:ff:7a:b5:9c:57:0d:25:37:28:f8:0a:53:ba:63:22:20:0d:
6e:45:1c:07:c8:dd:5e:e2:5e:8f:e2:ce:55:1c:b6:d4:da:9e:
33:f2:df:e6:f1:ac:78:74:54:8b:09:01:2a:92:3b:17:6c:41:
16:b6:5e:53:ad:ba:fa:aa:9b:d3:8a:2b:13:56:e2:10:ef:1a:
2a:12:ea:c6:56:e9:96:fb:25:9f:35:54:01:c4:c4:10:7d:6a:
bf:fd:39:9b:81:cc:3e:a4:2f:37:ba:bb:0f:c0:7d:78:a0:1e:
d3:fd:61:3a:cc:7f:e5:e9:52:a0:92:3c:9c:b9:a1:3e:da:44:
49:83:56:4f:e5:9f:3e:8f:54:85:0c:9e:d6:42:d9:fa:7f:a6:
3e:5e:f4:db:d7:e0:6d:3b:bb:16:84:15:fa:9e:1e:2d:52:db:
7e:39:dc:b1:17:93:cb:32:fa:c8:b1:d1:5d:e2:42:b4:49:25:
0c:e2:53:7e:a2:1c:6d:4e:2d:48:be:78:1e:58:e7:4c:d9:88:
ef:d2:59:24:fd:3a:4c:1f:6f:1d:60:55:f8:c6:f0:61:85:ab:
b1:04:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:39 2024 by rpki-client on console-fra.rpki-client.org