Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uKZNGSVYa6LQ5ZtlwiCv8AlMTa8.roa
File: uKZNGSVYa6LQ5ZtlwiCv8AlMTa8.roa (raw, json)
Hash identifier: epnvVtwfMchw8YYdr3PVr5PFuOz5eF5UKt0ehbu7Ilg=
Subject key identifier: B8:A6:4D:19:25:58:6B:A2:D0:E5:9B:65:C2:20:AF:F0:09:4C:4D:AF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0190531A5D60A59278E9308A415D51937307
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uKZNGSVYa6LQ5ZtlwiCv8AlMTa8.roa
Signing time: Wed 26 Jun 2024 05:52:35 +0000
ROA not before: Wed 26 Jun 2024 05:52:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202941
IP address blocks: 2a10:2f00:187::/48 maxlen: 48
2a13:8380::/32 maxlen: 48
2a13:8381::/32 maxlen: 48
2a13:8382::/32 maxlen: 48
2a13:8383::/32 maxlen: 48
2a13:8384::/32 maxlen: 48
2a13:8385::/32 maxlen: 48
2a13:8386::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 27 Jun 2024 02:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:1a:5d:60:a5:92:78:e9:30:8a:41:5d:51:93:73:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 26 05:52:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8a64d1925586ba2d0e59b65c220aff0094c4daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:b3:40:9b:d7:cb:5a:42:f8:85:53:e2:56:
f0:23:22:d0:7c:60:e4:14:d9:e5:90:e2:6e:56:3c:
80:b0:10:4f:0c:0d:44:ec:c6:ca:90:be:e1:e4:92:
c7:3d:80:98:0e:f6:24:61:6b:67:c8:71:a7:b5:9b:
95:52:f4:bb:f4:63:97:b4:4b:36:e5:49:91:8f:6f:
48:b0:58:3c:28:57:eb:49:11:70:c9:91:68:35:3c:
eb:d4:0e:e7:06:08:3b:b8:d9:d6:5b:6a:03:0b:1c:
2f:3d:e3:63:93:63:a9:d4:56:68:91:f0:9d:50:c6:
d9:be:d9:09:2c:8f:3c:0e:ba:39:b5:0c:8b:03:59:
90:98:d3:8b:29:dd:f3:00:06:0d:a1:7f:a7:fa:a3:
71:7f:b9:71:a4:a3:cb:41:5a:b9:b9:c6:59:91:de:
2a:00:d4:62:42:e6:11:85:9d:ae:14:b5:cf:f4:16:
d7:f9:77:8b:66:5c:44:78:f4:e5:35:54:04:b9:38:
1a:1f:c8:91:92:97:8e:2d:1a:e8:0f:55:67:47:2c:
49:2f:09:3d:9c:26:fe:09:43:a8:36:43:e0:2a:d1:
b2:7d:85:83:40:2b:14:20:2a:02:51:75:bf:e5:d3:
45:ed:91:c1:60:55:8d:71:14:07:d7:ef:89:af:1c:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A6:4D:19:25:58:6B:A2:D0:E5:9B:65:C2:20:AF:F0:09:4C:4D:AF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uKZNGSVYa6LQ5ZtlwiCv8AlMTa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:187::/48
2a13:8380::-2a13:8386:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9e:a4:21:a5:8e:8e:ea:19:68:49:75:93:f1:21:c1:e7:1d:2b:
2b:8a:e8:ac:b5:9f:77:fc:91:98:22:0a:26:38:f5:24:32:57:
36:db:51:13:d8:49:40:47:51:3c:db:28:d4:77:43:76:d1:6a:
f7:e0:b6:41:3d:d0:1b:47:c8:7c:91:43:5b:58:da:e4:0a:6a:
f3:d5:e7:97:fa:2b:33:ed:7c:d4:5f:11:54:6b:16:37:48:59:
e3:28:1e:38:bf:3d:da:d2:34:94:1b:8c:d6:62:a9:b3:1a:bc:
cc:da:d5:a6:f0:35:50:18:b7:2f:87:0e:35:4d:3f:3c:85:cc:
e8:c8:b4:96:67:4f:ef:af:68:ae:15:5d:3e:9b:24:de:05:bb:
c2:d6:6b:e5:79:41:78:5d:b9:a3:df:4a:99:8b:80:48:82:6b:
7e:5e:93:d0:4e:69:a0:77:26:ce:ac:e2:2e:0d:91:48:89:6e:
35:f0:7b:29:35:8a:43:73:52:de:72:2d:c9:44:d0:e6:72:09:
63:ba:58:c0:01:81:c8:53:69:9f:9d:2c:4d:9b:74:3b:b6:b3:
ab:81:4b:81:91:a1:09:f7:3a:90:ad:f7:da:4f:98:15:3d:59:
55:aa:d4:e3:33:5c:5c:83:7c:21:76:a0:0d:c8:16:f2:f5:83:
b6:dd:a1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 05:39:35 2024 by rpki-client on console-ams.rpki-client.org