Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/td85pweN0KFb_bNkwsXX1PQsgrg.roa
File: td85pweN0KFb_bNkwsXX1PQsgrg.roa (raw, json)
Hash identifier: MH5ULh/XznCBJnTdvbsKGI8s5YmgoW/6yGd9XIkwy44=
Subject key identifier: B5:DF:39:A7:07:8D:D0:A1:5B:FD:B3:64:C2:C5:D7:D4:F4:2C:82:B8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185A4A7E8359F70F7CE6682824FA3E03D5B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/td85pweN0KFb_bNkwsXX1PQsgrg.roa
Signing time: Thu 12 Jan 2023 06:25:45 +0000
ROA not before: Thu 12 Jan 2023 06:25:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a0e:b107:19a0::/48 maxlen: 48
2a0e:b107:13b::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Jan 2023 02:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:a7:e8:35:9f:70:f7:ce:66:82:82:4f:a3:e0:3d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 12 06:25:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5df39a7078dd0a15bfdb364c2c5d7d4f42c82b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:23:6a:f8:35:b2:be:f2:cb:c5:58:aa:f6:
79:96:66:da:60:18:00:5c:38:f6:f2:d7:24:f0:5a:
41:7b:ec:50:d2:8e:10:50:7d:ed:63:c3:ec:04:c9:
7a:43:3f:86:7b:0d:fc:5f:e2:c4:71:c8:8d:4f:68:
9f:68:7c:0f:f9:1a:bf:08:e8:1f:e2:9e:23:30:58:
16:25:e2:f9:94:6a:fd:de:54:d3:68:8c:18:78:af:
18:95:95:f2:60:66:5a:54:d1:a2:eb:7d:e7:3f:99:
ed:6b:a3:1a:19:4d:f2:96:dd:5d:fd:e6:42:7e:7f:
64:a3:d8:53:6b:44:72:bf:0e:0b:a1:85:42:74:78:
86:bd:97:d2:5a:b4:43:1b:ff:2d:b0:d3:2e:b1:57:
ca:6f:93:ba:27:c8:24:a0:a8:bf:1a:26:3b:d9:ac:
ef:0e:02:b8:18:39:f9:ef:15:bf:e4:b4:2e:80:6a:
eb:16:4c:97:8e:64:e1:a7:e4:b6:a8:b1:22:74:56:
64:ec:4c:66:cb:82:61:b0:f7:eb:33:66:92:7c:1e:
1e:a3:c8:ec:3f:8a:5c:c5:48:bf:80:90:fd:7e:86:
c7:24:fd:3d:4f:ce:f2:e8:40:95:d9:aa:94:46:3e:
aa:e1:55:72:4c:96:f7:a7:21:cb:4c:84:5f:1a:7e:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:39:A7:07:8D:D0:A1:5B:FD:B3:64:C2:C5:D7:D4:F4:2C:82:B8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/td85pweN0KFb_bNkwsXX1PQsgrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:13b::/48
2a0e:b107:19a0::/48
Signature Algorithm: sha256WithRSAEncryption
07:d3:b2:f1:d0:81:5d:2c:bf:95:ae:a1:49:20:84:69:09:26:
7c:d9:74:ee:81:c2:f9:29:8a:56:4d:03:9f:51:f5:71:e7:67:
ee:08:9f:c2:12:b3:fa:0a:16:8b:13:6a:60:2f:28:a3:a5:2b:
a9:a6:4c:73:f1:ec:58:b0:08:99:80:14:9d:a5:99:83:f0:bf:
53:31:b7:ae:a9:59:05:4d:6e:3f:d8:0f:d5:fb:5c:e4:5d:56:
e9:ee:01:56:eb:fb:d6:1a:63:06:aa:57:0e:57:00:4c:3e:ee:
77:d0:37:27:b3:75:0d:fc:6c:71:88:da:a8:04:68:85:14:b3:
0e:62:95:3d:c3:b2:d1:88:b5:6f:d8:69:f5:75:ee:d2:fa:bd:
fa:28:d2:40:75:d5:c7:bd:af:2d:68:62:c0:43:ef:88:4e:a3:
e7:6b:cc:b6:b8:f0:ee:7b:43:c7:d9:74:58:ea:09:76:26:e1:
8d:fb:1b:ce:51:df:6e:79:d5:af:ca:9b:97:5a:e5:72:86:74:
a8:3d:86:b5:85:da:17:f0:6e:21:b1:22:ed:e2:fa:12:b4:da:
25:32:89:77:bf:a1:97:61:40:ed:b5:c5:e6:d4:3c:bf:d8:48:
24:08:80:41:a4:de:50:64:c2:3f:78:16:39:10:8e:40:ce:f8:
83:7e:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:33 2024 by rpki-client on console-ams.rpki-client.org