Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tiM_0PqcPllLkHotSsVVMWbPGLw.roa
File: tiM_0PqcPllLkHotSsVVMWbPGLw.roa (raw, json)
Hash identifier: j7zt23ZANer6ZIBQqKt6E8czrg2gVTSFso+WiYHOC2w=
Subject key identifier: B6:23:3F:D0:FA:9C:3E:59:4B:90:7A:2D:4A:C5:55:31:66:CF:18:BC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48ACF117297993A1FEB8E5987B4D4CE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tiM_0PqcPllLkHotSsVVMWbPGLw.roa
Signing time: Tue 24 Jan 2023 16:09:40 +0000
ROA not before: Tue 24 Jan 2023 16:09:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201938
IP address blocks: 2a0e:b107:1cb0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 Jun 2023 11:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:cf:11:72:97:99:3a:1f:eb:8e:59:87:b4:d4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6233fd0fa9c3e594b907a2d4ac5553166cf18bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1d:3c:40:36:29:ff:9c:35:5e:be:34:db:07:
de:4d:fa:96:7d:8b:dc:4d:68:80:c2:01:0a:16:02:
7c:64:49:62:35:c7:b3:ce:cb:c5:3e:ac:04:4e:24:
36:e0:bb:2c:11:ae:da:72:08:13:f0:1d:0a:8e:c3:
c2:39:18:1a:a3:24:a4:c7:e4:13:ec:0d:48:26:11:
f3:6b:e5:bd:c4:7b:ca:c0:48:bd:23:20:70:bf:00:
76:0e:66:f3:5e:0a:8c:88:f7:87:7d:ce:cd:2c:e1:
e1:5b:7f:e6:da:fe:30:62:72:9e:9b:e5:5d:56:32:
94:6d:43:d1:5a:e5:14:50:03:89:81:7b:5a:c1:fd:
d1:05:7d:5f:a8:d2:5a:a1:37:52:43:d7:80:35:0e:
a2:27:be:3b:bd:0a:e4:3e:da:39:c0:ff:9c:1f:d3:
f6:ae:d0:4b:10:aa:11:c5:04:d8:b8:55:7f:e7:30:
16:d3:71:af:20:29:07:a9:df:72:bd:d0:51:0f:fb:
b8:d5:f6:5f:cc:9b:61:18:f2:b1:75:ef:d3:72:61:
25:cd:9e:29:a1:28:39:cb:8a:df:63:6e:1a:90:dd:
cf:e8:c4:b7:e6:f1:5d:97:09:18:ab:a4:a0:c2:55:
42:26:eb:76:cb:53:ed:f4:ec:28:f6:ec:21:83:f1:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:3F:D0:FA:9C:3E:59:4B:90:7A:2D:4A:C5:55:31:66:CF:18:BC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tiM_0PqcPllLkHotSsVVMWbPGLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1cb0::/44
Signature Algorithm: sha256WithRSAEncryption
6c:b1:83:bd:c7:31:57:49:3b:cc:29:08:dd:4a:5f:99:a1:92:
ed:51:ba:1f:0b:d8:30:77:f4:e2:93:db:96:05:32:e8:9b:d4:
24:d9:06:e9:f6:18:95:d0:37:15:55:43:b2:7c:22:28:38:7d:
f6:da:e3:97:33:23:73:84:c5:cd:94:d0:86:35:58:91:b5:04:
8c:51:84:0f:aa:ee:68:d9:a4:df:34:a6:38:0d:57:97:db:e3:
b7:4b:39:b8:98:32:c6:3a:6d:55:b1:01:dd:66:e6:f3:5e:a1:
0c:fc:aa:c6:9e:2c:37:0c:4f:72:9d:31:64:c8:37:60:f5:47:
fc:a5:9c:12:24:8c:80:c9:ce:99:52:07:0e:e6:4c:ad:d2:5b:
ef:84:85:11:91:d2:1f:a4:f0:a8:39:73:25:39:71:b4:63:03:
82:c8:c9:d0:25:4c:8b:91:4f:65:18:13:c2:cb:f7:86:fc:26:
0a:28:7b:dc:72:dc:c7:cb:09:aa:01:c5:20:4d:d5:f1:36:6e:
f2:b0:63:7d:67:22:51:0b:ac:a8:f0:5c:c5:90:fd:0b:0a:ee:
f9:fa:79:04:46:fb:73:76:0a:90:d4:46:68:97:3a:5a:ce:5f:
d0:97:a4:e7:76:ce:5e:b7:47:47:20:8c:00:c6:fc:af:9a:96:
3e:04:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:39 2024 by rpki-client on console-fra.rpki-client.org