Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vsSLV2hGbVOAy62q-SKUyatT7LM.roa
File: vsSLV2hGbVOAy62q-SKUyatT7LM.roa (raw, json)
Hash identifier: 2PWrDnMdtMCIfi//EV5cSOuAwZAb+R/Fol/xldBcaoQ=
Subject key identifier: BE:C4:8B:57:68:46:6D:53:80:CB:AD:AA:F9:22:94:C9:AB:53:EC:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A081B5AF6E4BEC1ED9A1964E1AFAC2775
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vsSLV2hGbVOAy62q-SKUyatT7LM.roa
Signing time: Fri 18 Aug 2023 10:05:25 +0000
ROA not before: Fri 18 Aug 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197710
IP address blocks: 2a0e:b107:118a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:1b:5a:f6:e4:be:c1:ed:9a:19:64:e1:af:ac:27:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 18 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bec48b5768466d5380cbadaaf92294c9ab53ecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:05:20:28:16:2d:26:68:10:35:75:c5:39:
44:88:07:70:ea:c8:0e:16:cd:7d:57:73:28:7e:5c:
7e:23:ef:35:5c:41:ca:e4:30:47:77:4b:6a:2d:91:
1d:66:4c:33:82:6d:17:9d:56:bf:e8:57:31:05:28:
c5:4b:29:9b:d5:05:b9:2f:1e:cf:f2:aa:89:48:55:
3e:4b:87:91:f2:3c:13:8e:d9:2a:51:10:de:29:87:
7f:d3:7d:61:f8:f6:aa:e1:44:f5:bf:bc:de:3f:c2:
b2:b8:d8:40:ae:7d:b1:aa:a5:87:71:3c:b3:3e:ae:
ce:1d:90:7a:b4:80:85:1f:89:52:69:c1:c1:98:53:
2f:22:f6:c1:00:94:db:8c:4a:f0:1e:f5:f5:92:1a:
7a:46:21:55:f5:93:50:b9:c6:b4:fe:77:f4:a2:f6:
41:8d:3a:98:38:46:84:17:76:d1:be:18:7d:72:de:
cf:7a:66:d9:c2:8d:f7:a4:1a:b7:bc:a1:2c:1e:73:
fc:28:43:bf:a1:ad:1d:76:13:84:bf:fd:d3:5c:7a:
86:88:63:fb:4a:fb:47:0e:09:a4:ed:83:ef:56:a0:
44:47:f2:65:ed:53:92:a1:db:d5:04:b5:8e:d4:0d:
de:21:3d:34:89:c4:8f:31:f2:9c:d5:b0:36:f2:ff:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:8B:57:68:46:6D:53:80:CB:AD:AA:F9:22:94:C9:AB:53:EC:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vsSLV2hGbVOAy62q-SKUyatT7LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:118a::/48
Signature Algorithm: sha256WithRSAEncryption
1e:94:6d:6b:58:4a:3e:f0:72:9e:0d:9a:69:64:26:07:18:e8:
c5:fd:f0:ce:33:9b:a7:6c:ff:6e:45:4e:6c:91:27:6f:80:ec:
75:57:d9:8a:12:72:5f:a7:31:b5:7a:d7:6f:09:4d:66:a9:98:
f0:68:ca:f7:1e:ef:98:9c:5f:a8:f4:43:c5:67:ed:3f:eb:e1:
c8:85:17:4d:20:f2:51:28:81:9e:3d:76:50:1c:8a:75:4f:48:
7f:08:df:77:98:6e:3d:14:7d:ff:d1:52:f9:8f:c6:2e:1e:06:
48:e2:1e:59:a4:47:2c:a7:b5:60:f5:ff:4a:f7:af:3d:f8:59:
56:25:e6:81:42:32:5d:cb:ca:8b:a5:41:8c:b6:16:99:4f:04:
01:e2:d1:99:67:a1:2f:e8:5c:ff:29:8c:97:52:ff:e6:35:d3:
55:09:8e:c4:64:f0:ed:bf:b5:13:6f:6f:25:dc:2a:24:02:f5:
14:9f:af:69:51:e5:cf:e5:96:77:7d:78:2d:1f:9d:3c:3d:5b:
cb:14:74:23:bd:4c:1f:ff:79:ba:35:35:aa:81:7f:7d:b1:ef:
c5:76:2c:e1:3a:9d:ec:55:8b:58:27:c7:bb:cd:b5:27:6a:17:
a4:d8:a4:8e:e7:9f:87:bd:62:1e:04:77:03:e9:18:65:8a:c6:
b2:43:18:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:40 2024 by rpki-client on console-fra.rpki-client.org