Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u-j5RPTGponfcagBt4ws3ksdgGE.roa
File: u-j5RPTGponfcagBt4ws3ksdgGE.roa (raw, json)
Hash identifier: LHBDYSgDddSDnL8UZD9AKGdXOWQAj1RbJMDwxfQLg44=
Subject key identifier: BB:E8:F9:44:F4:C6:A6:89:DF:71:A8:01:B7:8C:2C:DE:4B:1D:80:61
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F905D9D06319E2B254B46FC7483BD79E3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u-j5RPTGponfcagBt4ws3ksdgGE.roa
Signing time: Sun 19 May 2024 10:20:05 +0000
ROA not before: Sun 19 May 2024 10:20:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:de00:10::/48 maxlen: 48
2a0e:97c0:411::/48 maxlen: 48
2a0e:97c0:8e0::/48 maxlen: 48
2a0e:b107:19a0::/48 maxlen: 48
2a0e:b107:1a63::/48 maxlen: 48
2a0e:b107:1a64::/48 maxlen: 48
2a0e:b107:2880::/46 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Jun 2024 17:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:5d:9d:06:31:9e:2b:25:4b:46:fc:74:83:bd:79:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 19 10:20:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbe8f944f4c6a689df71a801b78c2cde4b1d8061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:17:e0:9d:06:cc:eb:b1:78:1d:3e:4a:0b:
70:99:e0:58:23:2b:fc:d8:d5:a4:7a:b8:e8:db:fb:
6b:89:e1:14:2b:ff:2c:d7:ff:f1:2a:bd:3c:0d:78:
af:b5:d5:49:59:12:08:84:6e:79:ca:00:4a:31:91:
23:f4:49:a6:e1:89:93:fe:a5:2a:77:4c:ea:f8:a5:
7b:f1:93:af:4a:2f:22:91:11:b9:cd:df:30:c9:34:
6b:a8:dc:8f:61:62:36:1c:65:86:14:6f:54:76:25:
bb:75:dd:43:fe:a0:a0:d0:73:5d:6e:51:0a:39:48:
aa:41:e8:6a:7c:07:07:e6:15:07:00:7e:4b:8a:c9:
bf:20:08:e6:a5:77:f8:d8:65:1c:1e:3c:c2:bc:9d:
6d:bc:09:51:09:f7:f8:ca:41:4a:3f:0b:9d:25:64:
ff:78:04:e9:b4:db:26:4c:1c:b0:dc:bd:8b:48:84:
c6:b4:03:da:9e:22:3d:65:85:b9:f8:57:9f:23:55:
85:f9:84:f4:7c:f3:51:26:ff:cd:09:33:cc:54:32:
dd:30:46:a6:e4:4e:c5:22:32:06:cf:0f:95:75:c6:
b7:5e:d1:b1:4b:48:1b:3f:ee:a4:31:7d:cd:62:cd:
98:11:cb:8f:82:f4:6a:38:84:23:1d:72:52:e5:f3:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E8:F9:44:F4:C6:A6:89:DF:71:A8:01:B7:8C:2C:DE:4B:1D:80:61
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u-j5RPTGponfcagBt4ws3ksdgGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:10::/48
2a0e:97c0:411::/48
2a0e:97c0:8e0::/48
2a0e:b107:19a0::/48
2a0e:b107:1a63::-2a0e:b107:1a64:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2880::/46
Signature Algorithm: sha256WithRSAEncryption
c6:68:1a:5d:49:f9:42:ff:bd:b5:6c:d8:1b:20:dd:a5:48:3a:
17:9f:d0:1e:26:ee:da:60:1d:fd:2e:61:c3:3b:4c:43:33:50:
f3:08:48:d6:8d:bd:ec:6a:aa:7d:f9:f4:13:da:90:fd:75:a1:
08:25:e3:94:0e:34:fe:63:34:1a:05:c6:08:97:77:d3:6a:71:
9e:a2:19:a3:4d:ee:79:4a:18:13:44:6d:90:b9:29:95:e5:3f:
35:49:ec:37:d3:b7:96:f5:0c:6d:4d:c0:62:62:99:3d:d3:00:
7a:14:fb:2f:c3:f4:c1:30:d4:cc:79:86:0a:ad:b9:05:8c:b7:
7d:2f:47:c7:3e:9b:96:60:6d:0c:2a:a7:f3:4e:6e:2f:79:8b:
d4:39:99:a3:a3:74:75:1a:fe:36:4b:36:ff:36:fe:7c:dd:82:
01:d0:ee:f6:79:4a:0e:e1:87:99:fe:c0:05:13:b8:d7:4e:29:
8c:0e:6f:e6:1d:d6:6e:82:91:64:a6:3c:e8:96:f2:3c:5b:d6:
48:8f:6a:63:d0:12:36:ce:ac:2f:05:d1:b1:aa:59:b9:4b:73:
2d:c3:f7:ad:f3:c9:45:64:d0:b5:8f:c3:51:31:12:dc:13:1e:
02:e2:b3:33:6d:6c:06:0b:13:6f:e5:26:61:ab:0f:f7:60:6b:
2e:7c:31:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:33 2024 by rpki-client on console-ams.rpki-client.org