Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vDtxqI2yc5z-cWEGGo1Ib7T7rtw.roa
File: vDtxqI2yc5z-cWEGGo1Ib7T7rtw.roa (raw, json)
Hash identifier: MPeDJaA7iLWdRWnNenyIXj6wcZ0QjAiz0VhMROsHgfk=
Subject key identifier: BC:3B:71:A8:8D:B2:73:9C:FE:71:61:06:1A:8D:48:6F:B4:FB:AE:DC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018B2D9C3DFB7FA0568B93070F4CCCA7CADC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vDtxqI2yc5z-cWEGGo1Ib7T7rtw.roa
Signing time: Sat 14 Oct 2023 09:54:56 +0000
ROA not before: Sat 14 Oct 2023 09:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216182
IP address blocks: 2a0e:97c0:dd0::/44 maxlen: 48
2a06:de01:80::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2d:9c:3d:fb:7f:a0:56:8b:93:07:0f:4c:cc:a7:ca:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 14 09:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc3b71a88db2739cfe7161061a8d486fb4fbaedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:74:1e:c4:3f:8b:69:d0:d9:ea:35:28:e2:
ef:e6:b8:c1:ab:b8:e5:96:55:cd:ff:61:36:a9:8a:
d6:9c:5e:6d:a2:59:a5:64:17:2a:4e:4b:50:85:ea:
9a:1f:f8:af:23:99:a6:e8:40:26:eb:0a:2f:09:0b:
34:a3:e6:ad:d9:a3:f1:4d:15:e2:62:63:2d:27:4b:
53:06:67:d5:e2:21:3c:03:1a:40:75:6a:a6:0f:84:
ce:d9:9b:d9:3f:19:37:38:a6:36:db:dc:56:f2:55:
f7:9b:ce:98:b8:17:7f:ae:89:16:e4:ae:d9:8c:74:
c0:7a:15:ed:09:58:cf:b3:75:d2:23:40:cf:f3:19:
96:77:75:03:00:cc:32:f9:b9:d3:55:5d:3e:57:a3:
81:83:62:fa:3b:6a:1a:b1:ce:1d:c9:21:16:76:2c:
51:5c:50:1a:7d:87:3f:44:87:06:da:50:13:c1:d5:
28:1f:3b:3b:06:85:e9:f5:98:b0:f7:14:7f:a3:e1:
86:14:a4:60:7e:48:e2:27:d9:95:87:6b:ce:c4:17:
2b:bb:3e:e2:60:43:94:74:71:68:ea:b1:2f:9f:ac:
00:da:1c:c2:c0:52:4b:73:eb:64:c1:33:4c:cf:14:
8f:1b:3f:11:94:f2:85:80:73:e5:ad:bf:e8:e0:31:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3B:71:A8:8D:B2:73:9C:FE:71:61:06:1A:8D:48:6F:B4:FB:AE:DC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vDtxqI2yc5z-cWEGGo1Ib7T7rtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:80::/44
2a0e:97c0:dd0::/44
Signature Algorithm: sha256WithRSAEncryption
41:6d:e3:9a:af:d2:4c:9b:cd:fa:94:e6:f6:0f:9d:65:bb:af:
fd:6b:a6:cb:4f:63:73:3b:f9:5a:f0:11:a4:34:3e:8e:a9:8c:
65:db:03:c9:7e:fd:3e:d5:db:50:cd:a7:ce:2a:3a:ea:15:9e:
99:4c:25:20:ad:cd:72:9a:28:43:9c:ad:e4:53:1d:bd:02:4c:
c7:87:a0:32:1f:81:cb:65:80:1e:e6:c9:57:40:57:e8:61:ab:
3a:c9:c4:ac:08:c5:b6:d4:71:61:77:df:c8:a1:a2:1c:b5:80:
99:e3:70:d4:78:0c:3c:84:ca:a9:c9:68:98:b4:c9:e2:82:e7:
bc:e3:7b:7f:d9:df:63:2e:1e:6a:65:63:b0:92:64:b2:70:57:
22:63:94:ef:9d:a3:01:d3:a0:5e:8f:19:c8:95:a2:62:05:e2:
39:d6:0b:f9:f1:33:7c:f9:9f:01:57:b4:77:95:82:b6:a0:82:
50:2b:5e:43:a1:17:be:73:66:f8:95:6f:d3:df:38:26:93:1d:
2e:78:9f:43:11:e7:80:5e:54:e6:db:1e:1d:32:68:07:c8:5b:
4c:f4:d3:91:d8:18:22:d3:fa:4c:c6:4a:28:3d:31:6e:c7:46:
cd:2c:66:8f:fa:e7:68:57:b3:be:9a:37:99:ef:1e:61:eb:1b:
05:5d:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:39 2024 by rpki-client on console-fra.rpki-client.org